Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa
File: m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa (raw, json)
Hash identifier: 0ftdeq2I0Ls/OwARQ/FHezOkmfJrEt6ekfubL8KjG/I=
Subject key identifier: 9B:C8:EA:7F:4B:7A:6C:AE:0E:BD:95:4A:54:69:EF:14:1D:26:74:A0
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01949C4DB80FDD89CCB69A455EA2C651E756
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa
Signing time: Sat 25 Jan 2025 07:12:06 +0000
ROA not before: Sat 25 Jan 2025 07:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/24 maxlen: 24
31.185.100.0/22 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:4d:b8:0f:dd:89:cc:b6:9a:45:5e:a2:c6:51:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 25 07:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bc8ea7f4b7a6cae0ebd954a5469ef141d2674a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:fb:22:67:56:e1:90:15:46:e5:b1:33:20:
e3:bc:a0:06:0d:c9:89:80:2b:79:c2:59:d6:41:1b:
cb:e3:08:ca:74:19:5e:20:ab:74:2e:76:4a:5a:98:
63:aa:1b:89:ec:14:55:6a:d8:a8:c0:34:a1:0a:b4:
7c:aa:d5:13:ce:75:e4:b5:43:24:bf:40:02:4d:78:
25:a9:29:f9:ea:c2:77:79:90:22:43:27:56:60:15:
79:ea:fc:6f:e8:38:5f:5d:25:72:0a:bd:06:ab:ff:
57:61:07:b5:5c:ef:72:7d:ca:b1:e8:4e:df:61:43:
1e:86:6d:dc:4f:b4:d5:de:0e:68:7e:82:f1:4c:31:
72:9a:a6:fb:c6:06:f1:e6:6c:65:d9:cf:d2:0d:83:
89:27:49:77:da:e5:0c:13:c1:21:d9:77:bf:c8:bd:
bc:02:9c:8e:8d:63:2c:a8:64:3d:8a:f7:50:11:74:
5c:fd:60:52:53:71:fa:52:6e:1d:d1:fa:26:6a:f2:
45:c8:56:e0:6b:59:08:be:4e:bc:25:9a:5b:e8:f6:
45:bf:0b:8d:75:3d:ce:4a:6f:28:eb:b4:fe:2d:f4:
b6:89:fd:cd:61:7c:f4:50:33:36:98:b2:ff:86:ab:
6f:76:ba:01:6b:b9:5c:d3:f8:04:bb:08:99:e8:6f:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:EA:7F:4B:7A:6C:AE:0E:BD:95:4A:54:69:EF:14:1D:26:74:A0
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/24
31.185.100.0/22
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
75:fc:7f:40:0e:d2:a4:73:a7:61:5b:20:30:c2:9e:cf:af:77:
d2:06:c3:41:9a:99:ae:e7:8c:f4:ae:e1:1f:6f:87:53:68:e8:
2f:36:77:b1:16:c9:b8:02:ae:79:d9:9c:e0:5f:72:99:60:cc:
98:6f:c7:4b:65:68:2f:79:69:0e:66:fa:37:1f:3e:a6:6d:ad:
b5:6b:f5:d3:6d:41:e8:1e:15:3f:cc:e0:c6:ab:e8:2d:d3:9e:
19:99:66:e4:65:dc:98:fe:f9:c0:39:c4:ac:00:cb:c1:32:6a:
fa:95:b4:f0:d8:ec:4f:58:ca:54:38:b9:ac:35:e4:ae:c5:d8:
aa:13:b4:86:1f:66:ad:94:36:a1:37:a1:01:10:b5:bd:42:d3:
12:bc:c1:b6:dd:b2:d3:31:87:f4:f6:ec:e8:39:38:90:27:8c:
15:c7:0b:c3:25:50:a5:f0:06:07:8c:a5:15:7e:1a:99:11:71:
eb:e1:2f:af:6a:13:e2:cd:cd:c5:1a:20:83:88:0c:9b:65:80:
51:8e:12:cc:8b:b4:f3:02:62:49:0f:51:eb:c4:19:d5:54:c2:
6a:a1:cb:81:a8:95:8f:d8:58:a2:88:19:d5:62:9e:f8:f5:81:
30:1b:72:a7:00:b2:dd:26:97:ab:de:db:55:e5:d6:9b:94:69:
37:29:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:03:40 2025 by rpki-client