Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/lQpPjj9gpOYnRRV52S0ec3Spick.roa
File: lQpPjj9gpOYnRRV52S0ec3Spick.roa (raw, json)
Hash identifier: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=
Subject key identifier: 95:0A:4F:8E:3F:60:A4:E6:27:45:15:79:D9:2D:1E:73:74:A9:89:C9
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019425FDC5766EAD421C206F87CA8EA25E46
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/lQpPjj9gpOYnRRV52S0ec3Spick.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.68.0/24 maxlen: 24
31.169.68.0/26 maxlen: 26
31.169.68.64/28 maxlen: 28
31.169.68.80/28 maxlen: 28
31.169.68.96/28 maxlen: 28
31.169.68.112/28 maxlen: 28
31.169.68.128/28 maxlen: 28
31.169.68.144/28 maxlen: 28
31.169.68.160/28 maxlen: 28
31.169.68.176/28 maxlen: 28
31.169.68.192/28 maxlen: 28
31.169.68.208/28 maxlen: 28
31.169.68.224/28 maxlen: 28
31.169.68.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:76:6e:ad:42:1c:20:6f:87:ca:8e:a2:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=950a4f8e3f60a4e627451579d92d1e7374a989c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:68:37:a4:d4:ec:5a:94:2e:c5:b9:01:98:
18:46:49:a5:90:97:45:20:6f:d9:22:e3:5a:78:03:
5b:fa:ea:5d:6a:bb:33:f8:5a:e1:2c:11:73:35:f5:
c3:2c:c7:0b:88:b8:a7:50:5b:9d:3f:fb:1e:c2:15:
ed:58:42:38:83:0d:84:93:50:31:ba:2e:48:64:81:
11:4f:4e:89:10:a8:77:84:40:58:2e:a9:d0:db:5d:
25:84:99:0d:a6:cb:39:58:fd:76:f2:a4:f3:f3:90:
61:94:d4:ca:18:7f:46:7d:b0:8f:ce:b6:b6:3a:43:
8d:cd:6c:37:cf:7e:9a:41:c5:d6:0c:c7:36:52:43:
2d:03:39:d8:b8:97:a1:3b:8a:b0:9f:c6:81:17:bd:
db:8d:9d:03:c7:7b:b8:f9:5f:75:f9:91:54:f6:d8:
4b:04:8b:3b:01:b7:67:88:04:c3:bd:e7:c2:6c:aa:
af:9a:87:50:ce:41:64:0b:00:06:aa:06:3a:1b:d1:
14:b0:bf:72:74:16:5f:ee:71:ba:4d:5d:b5:52:d9:
a6:36:c5:a1:cf:d2:15:0e:ee:f8:a5:11:13:1e:16:
32:54:25:67:d1:79:24:12:5c:cb:f7:97:ad:2b:2c:
05:d9:19:9f:fa:cb:2f:01:89:96:f4:f6:4c:4a:46:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:4F:8E:3F:60:A4:E6:27:45:15:79:D9:2D:1E:73:74:A9:89:C9
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/lQpPjj9gpOYnRRV52S0ec3Spick.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.68.0/24
Signature Algorithm: sha256WithRSAEncryption
08:dc:96:27:a0:db:bc:3b:13:10:a7:f5:1b:a0:e7:50:66:70:
c7:69:f4:3e:a2:89:70:a7:89:ab:ac:e3:9e:36:4c:0e:bd:2e:
2c:c2:7a:00:a5:f7:de:9d:e9:ba:a9:8f:cb:85:29:57:b8:fb:
ca:10:c3:8a:f9:ec:57:91:40:2f:62:98:36:d4:ae:82:01:dd:
25:84:31:07:e1:ea:cb:e9:52:ec:1b:01:92:ba:38:cd:7c:cf:
ff:7c:a1:fe:74:53:c4:ba:d9:7e:7b:7e:90:ce:39:78:e7:e6:
09:61:2e:6e:d5:93:6a:a8:32:16:2c:50:d7:ed:bd:d3:7d:2b:
fd:36:83:e2:45:ef:ad:88:54:8a:65:f8:6d:de:12:c4:6b:89:
1d:ff:60:da:f3:67:4d:91:1d:1a:d8:d1:d8:23:84:2e:cd:9d:
dd:4e:42:e4:a8:e4:18:aa:15:f2:01:f9:8c:c5:a2:c1:35:01:
58:f5:64:e0:1c:78:3b:97:1e:a9:b7:44:01:6d:7d:16:ec:18:
e3:c5:ed:39:91:a8:9b:7d:53:ea:d5:7b:e3:fb:66:f2:f5:52:
d7:de:b3:f0:17:c3:a5:09:d3:b2:5c:b1:67:c3:20:e4:cf:64:
ba:c3:82:4a:b2:1e:15:50:4e:1f:26:9a:3d:32:7e:be:34:de:
3c:c3:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:05 2025 by rpki-client