Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/31z7eSu8--35kebgOlCIABBeVf8.roa
File: 31z7eSu8--35kebgOlCIABBeVf8.roa (raw, json)
Hash identifier: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=
Subject key identifier: DF:5C:FB:79:2B:BC:FB:ED:F9:91:E6:E0:3A:50:88:00:10:5E:55:FF
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0194244517829B0520A883061A5D555DF386
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/31z7eSu8--35kebgOlCIABBeVf8.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 91.236.131.0/24 maxlen: 24
212.7.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:17:82:9b:05:20:a8:83:06:1a:5d:55:5d:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df5cfb792bbcfbedf991e6e03a508800105e55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:21:28:16:ec:b6:ed:38:16:e4:55:6d:09:
cc:09:8c:c5:fa:aa:fb:9f:0d:4e:6b:f3:47:54:3d:
9f:70:c7:d5:a2:bf:2f:0b:16:26:a5:1d:ef:87:40:
d9:38:af:41:bb:43:bb:1b:8b:78:99:8e:d8:fb:6a:
fa:13:3f:ce:6d:c5:13:e9:df:67:a9:bd:e0:ef:1c:
06:31:84:e8:98:b8:5f:73:71:18:88:41:66:1e:a9:
d5:b5:73:27:20:16:f7:fe:79:da:69:dc:8b:0e:84:
a1:0a:41:b0:bf:5f:32:e5:60:5b:12:b5:62:53:c6:
68:cd:60:51:ab:b7:a2:0d:2d:f5:38:c8:91:3e:24:
28:f1:b7:c7:05:1e:d9:7d:00:e3:e2:38:55:14:05:
15:74:95:7f:87:fd:29:c7:a1:bc:9d:f8:a7:f5:af:
e8:a2:0a:70:32:46:b0:d9:13:dc:22:d4:ac:94:75:
35:05:54:c5:ae:64:a2:7e:ec:46:a0:dd:61:3d:ec:
19:92:86:93:ea:cb:ce:55:60:36:98:fb:a9:36:da:
f3:ac:e0:93:fa:83:d0:0e:d6:f4:1c:43:23:23:f5:
27:9b:2c:2e:9c:51:30:b0:62:2c:47:7c:0b:4d:89:
1d:cf:62:41:83:8c:a3:ce:bd:32:dd:13:75:38:d1:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:FB:79:2B:BC:FB:ED:F9:91:E6:E0:3A:50:88:00:10:5E:55:FF
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/31z7eSu8--35kebgOlCIABBeVf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.131.0/24
212.7.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:78:e5:fd:1e:15:a2:05:30:11:eb:b9:63:97:90:3a:ad:33:
63:75:b8:6e:85:33:16:93:15:6c:26:64:20:67:e0:5a:a5:e4:
2a:f6:99:e6:47:82:18:4b:d5:62:d1:79:4c:f5:57:15:64:bd:
8f:a4:ba:93:f4:25:74:a4:a7:f6:f8:f3:cb:84:89:f4:ab:4c:
a1:fb:cd:aa:86:39:a5:7b:5c:3c:f1:70:ed:ea:e1:84:ab:66:
bc:f5:6b:f4:f7:32:b6:35:8e:e1:d5:f4:95:e8:72:90:5f:9a:
84:a8:41:2f:f5:c8:95:e8:b0:a0:69:d8:63:e2:12:09:fc:b9:
8f:2b:fc:b4:79:42:40:b2:3f:f2:0a:b7:29:73:9a:46:12:4f:
c0:1e:0f:29:fa:77:8c:84:78:23:8c:53:1f:f0:5c:06:c0:88:
2d:6d:2e:7c:86:e9:b9:d9:b5:24:2e:4b:bc:1c:47:a3:35:c7:
0d:b7:53:36:6c:29:34:46:91:ba:be:f6:e0:86:a2:21:26:0f:
7c:9e:a6:de:04:71:a1:bb:3d:45:c6:2a:87:16:38:03:65:f0:
6c:94:ee:77:11:33:69:3b:cc:4d:12:73:37:ad:a1:6b:b1:da:
1a:6c:21:ec:4e:eb:a8:de:4b:1c:5e:cd:bc:6d:15:99:f0:6c:
1e:5d:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:38 2025 by rpki-client