Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/fTApxPH61hLGkJtBcFjZFwHkWlQ.roa
File: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (raw, json)
Hash identifier: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=
Subject key identifier: 7D:30:29:C4:F1:FA:D6:12:C6:90:9B:41:70:58:D9:17:01:E4:5A:54
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA1B69B0A0652854C63503D3C9C400
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/fTApxPH61hLGkJtBcFjZFwHkWlQ.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216033
IP address blocks: 31.40.133.0/24 maxlen: 24
31.40.136.0/24 maxlen: 24
31.40.145.0/24 maxlen: 24
31.40.146.0/24 maxlen: 24
31.40.150.0/24 maxlen: 24
31.40.152.0/24 maxlen: 24
31.40.154.0/24 maxlen: 24
31.40.160.0/23 maxlen: 23
31.40.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1b:69:b0:a0:65:28:54:c6:35:03:d3:c9:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3029c4f1fad612c6909b417058d91701e45a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:d1:3b:a6:44:84:87:a7:d5:ce:41:23:8a:
63:0c:62:f7:d1:00:be:bf:32:28:64:50:87:76:20:
75:90:8b:1a:99:78:f2:a0:ee:0c:47:02:0d:ed:67:
f9:53:b4:b2:36:97:f1:0b:fe:e1:e3:79:b7:c7:01:
cd:f4:ca:56:e1:20:2f:2c:1d:60:19:3a:f5:76:6d:
52:5e:5d:44:05:64:81:e4:cb:07:55:6e:29:66:97:
5a:81:70:cd:4e:7f:ae:69:8a:6d:80:3b:48:a2:72:
9a:5b:0c:00:a0:d6:49:53:3b:33:e5:45:9b:17:b6:
51:1e:85:13:65:23:5c:41:cb:25:46:a8:cf:b2:c0:
4e:a4:12:f8:77:95:38:eb:79:97:af:1b:9b:46:a1:
21:cf:f5:d2:de:16:fd:a1:5b:2d:63:d4:3c:aa:45:
de:13:1f:08:a1:ce:45:5c:b7:41:c1:3a:bd:9d:a7:
c3:54:ce:24:28:ca:f0:d5:b0:e1:15:5c:72:e9:b3:
d9:a5:dd:82:cc:7d:85:45:6d:34:15:63:76:65:db:
1f:27:c2:26:1b:1a:95:a8:3b:d4:b3:1e:13:93:93:
f3:b4:18:d6:01:3b:4b:7a:f3:d1:c6:6e:93:ce:b5:
53:aa:2c:9d:03:c8:19:81:19:e5:ae:61:58:c4:f6:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:30:29:C4:F1:FA:D6:12:C6:90:9B:41:70:58:D9:17:01:E4:5A:54
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/fTApxPH61hLGkJtBcFjZFwHkWlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.133.0/24
31.40.136.0/24
31.40.145.0-31.40.146.255
31.40.150.0/24
31.40.152.0/24
31.40.154.0/24
31.40.160.0/23
31.40.164.0/23
Signature Algorithm: sha256WithRSAEncryption
90:5c:da:20:0b:7a:ba:45:e9:a8:ef:cd:14:e0:11:73:c3:40:
a5:85:e1:9b:ae:da:d8:18:7e:f7:4f:ad:e5:83:f6:b3:92:07:
ef:93:39:f6:61:09:9c:b8:7e:89:8e:99:46:d5:2f:de:6b:44:
d9:b9:73:a6:e7:77:9d:80:d1:a2:4d:62:d4:b3:4d:b7:25:91:
be:8d:a0:8a:63:04:33:3c:39:b1:e2:ac:9a:04:d0:5e:35:ce:
97:f7:9b:29:7d:5a:cc:87:82:7c:ff:d0:ac:82:65:f3:f4:40:
a3:1c:f4:bc:2c:f4:0a:b8:4f:35:8f:e8:57:e7:3c:23:93:01:
9f:47:63:ad:c4:2d:7a:c7:c7:f4:1a:b2:e0:d3:02:cc:68:f8:
d1:27:b3:c7:dc:9f:cb:b4:22:55:d5:3a:23:33:d1:a5:4a:d5:
d3:14:47:26:e7:2a:c0:6e:9e:2f:be:f2:68:c5:c0:77:86:7d:
f7:4a:85:84:ed:47:08:78:60:92:d5:5a:5a:a9:9d:ce:a1:ad:
7c:ec:10:21:59:12:5c:a5:77:d4:79:ad:0a:49:28:a0:0c:b5:
b7:e2:61:88:5f:1a:9e:c5:5e:41:37:38:80:8d:d5:5b:50:d0:
28:29:b2:f5:5a:0e:26:1c:2b:5f:6d:a4:d1:45:bb:75:3c:00:
75:73:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:54 2025 by rpki-client