Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/L-zOPzmtsqDfMHwda_RhlWweurM.roa
File: L-zOPzmtsqDfMHwda_RhlWweurM.roa (raw, json)
Hash identifier: K+Qa6SDk+P9jfEXGeQPbkFjUDkOGmN/t+jWt6LVdbCI=
Subject key identifier: 2F:EC:CE:3F:39:AD:B2:A0:DF:30:7C:1D:6B:F4:61:95:6C:1E:BA:B3
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A9544ADBF7737E64B500EEE7254F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/L-zOPzmtsqDfMHwda_RhlWweurM.roa
Signing time: Wed 01 Jan 2025 23:48:52 +0000
ROA not before: Wed 01 Jan 2025 23:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 31.41.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a9:54:4a:db:f7:73:7e:64:b5:00:ee:e7:25:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fecce3f39adb2a0df307c1d6bf461956c1ebab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:23:fb:c6:e6:b8:4a:db:17:18:1d:97:48:
30:d2:ff:86:1e:16:c9:15:4a:d3:31:47:6f:32:a0:
2a:c3:cd:eb:9a:df:92:80:dd:f0:ba:a7:7f:1e:94:
59:44:99:26:6c:e4:6a:19:34:e9:63:e7:21:56:ad:
21:66:36:ea:cd:65:1d:9d:bc:0b:bc:84:d8:82:fb:
67:e7:d2:ee:14:6e:f4:93:4a:bd:88:2e:66:aa:6d:
4d:b0:29:e4:a2:d3:59:7f:b5:20:d5:39:0f:89:ca:
ab:cf:a6:0a:41:4e:a0:16:5e:a3:b9:eb:16:3c:e6:
a8:1f:67:03:9c:3b:d5:8d:4b:77:d6:e7:56:5e:49:
b3:de:3c:9e:3a:4d:f3:eb:ef:9b:92:17:55:ce:59:
39:5f:69:eb:63:a4:47:1d:29:c8:24:47:d5:16:85:
c8:dc:a5:d2:db:67:a9:4d:01:21:cc:1e:6c:9c:34:
66:02:04:7d:0d:35:d8:9a:f8:68:61:14:12:44:2f:
50:c2:fe:1b:f7:22:9f:03:7f:bb:17:c2:90:3d:d9:
ea:de:51:84:00:a6:f7:77:23:86:d0:3f:df:1e:7d:
75:52:79:a2:0a:56:26:c4:71:c7:e2:7f:2c:0e:c9:
20:30:62:3d:ea:c3:03:ca:45:b9:d6:b3:6e:64:19:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:CE:3F:39:AD:B2:A0:DF:30:7C:1D:6B:F4:61:95:6C:1E:BA:B3
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/L-zOPzmtsqDfMHwda_RhlWweurM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:74:24:7b:10:b8:d5:0c:5b:ce:66:57:ad:59:ec:2e:79:de:
65:ea:f4:b7:c0:28:ee:40:6c:1c:ec:ec:05:cb:ba:2e:0f:20:
d2:c6:83:11:05:b9:44:23:5c:7e:14:59:95:b5:41:aa:dd:c0:
8a:47:33:30:e8:b5:5b:63:e6:3e:17:ec:7d:2e:40:b8:ac:55:
a9:3f:c9:f7:f7:08:1b:6a:0d:84:f6:dc:47:ee:f3:52:47:44:
4d:39:fa:9c:f5:2b:77:44:81:a2:d2:1d:39:a7:07:42:54:d8:
c3:95:72:92:3e:f8:8f:a3:71:d7:fb:a5:85:2a:21:4f:57:70:
aa:90:a4:23:83:9a:db:a7:b5:4a:0c:6b:d8:9d:3e:c9:83:f3:
42:5a:e8:32:2c:f2:44:13:84:4b:09:e6:00:05:38:25:ed:96:
74:ee:1a:90:44:aa:68:f8:9f:91:13:05:1f:e0:96:45:c1:95:
b7:aa:a9:04:79:f5:23:3c:23:c4:4b:69:84:0f:46:88:9a:6c:
e8:90:75:4f:06:bb:c7:02:89:dd:1e:b1:5b:cc:b3:65:34:31:
56:0e:5d:95:dd:cf:2a:80:75:4c:ce:97:f9:52:b7:8f:16:ea:
db:2f:b2:6e:bf:7c:04:f0:32:61:3c:e7:4c:47:da:07:3e:6b:
6e:23:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:37 2025 by rpki-client