Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07DX8FG7RTfLtLe0YnuFySOTBvY.roa
File: 07DX8FG7RTfLtLe0YnuFySOTBvY.roa (raw, json)
Hash identifier: wFzM0+ZPm8fWkZ9Dowc5Z/asiHJpwCUhtoiEpebJjkM=
Subject key identifier: D3:B0:D7:F0:51:BB:45:37:CB:B4:B7:B4:62:7B:85:C9:23:93:06:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01945125FDB4B40C4A12538D67BC2FD23D69
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07DX8FG7RTfLtLe0YnuFySOTBvY.roa
Signing time: Fri 10 Jan 2025 16:57:11 +0000
ROA not before: Fri 10 Jan 2025 16:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 31.56.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:25:fd:b4:b4:0c:4a:12:53:8d:67:bc:2f:d2:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 10 16:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b0d7f051bb4537cbb4b7b4627b85c9239306f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:4a:87:67:d1:12:2f:24:71:be:5b:32:a3:
35:64:91:32:85:a3:ed:5e:91:f4:98:20:70:81:35:
e5:f6:6b:22:b2:fa:29:06:db:1b:25:1e:c4:3e:eb:
ce:d1:27:d2:64:7a:ff:a3:9a:1b:b3:91:19:87:1f:
12:c6:6a:c7:f1:ba:c4:67:bb:bc:2f:d2:f8:c6:11:
ff:83:cc:42:1f:ab:12:73:6b:7c:bb:11:2e:7e:8f:
ff:ef:a6:9e:c3:93:bb:13:e3:01:60:58:64:7d:b9:
65:0f:da:a2:a8:e9:55:d9:68:16:4c:89:8c:b2:95:
32:2c:d4:e1:98:fa:8c:0b:86:65:f2:2a:f1:fc:f3:
67:3b:ae:7e:02:f4:56:6f:06:7e:06:75:51:a3:f4:
04:71:b2:ea:aa:30:11:7d:81:c6:9a:86:2b:6b:8c:
da:24:e9:7d:64:f8:82:82:60:d8:6d:61:44:73:1b:
99:ee:c2:41:28:44:4a:6a:a0:0a:a3:c8:8a:fd:3e:
b5:c8:5f:0e:3f:24:fb:af:94:7d:ed:3a:ec:dd:ef:
f8:e0:15:15:3f:b7:c8:8c:4f:95:19:8a:fb:c3:30:
4a:55:27:11:f8:38:53:8e:6e:8b:74:33:78:3a:3d:
f8:e1:3a:69:07:6a:33:e9:8e:f7:70:be:b7:f8:ee:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:D7:F0:51:BB:45:37:CB:B4:B7:B4:62:7B:85:C9:23:93:06:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07DX8FG7RTfLtLe0YnuFySOTBvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ff:b3:67:b2:7f:b8:6e:9f:5a:33:74:bd:12:79:8a:53:82:
6d:71:06:9a:a6:b2:4e:13:dc:9f:b5:6b:53:39:ff:f7:e3:ff:
92:e8:79:16:89:96:db:ac:cb:2d:09:d4:ba:2e:9e:47:5e:6e:
3e:c7:c3:ca:8e:41:86:56:28:54:1f:5f:fe:e8:a0:e4:a1:44:
df:a4:6c:23:0f:07:f2:62:2e:16:a7:d9:da:74:c7:80:8b:e3:
17:a0:73:1c:c9:93:4e:3e:13:b0:1b:ff:33:d0:db:0e:e3:64:
a2:71:a1:8c:c1:8d:18:06:85:86:21:0c:72:b4:3d:13:53:e1:
b8:37:bc:7b:54:4e:18:af:ec:2a:b7:fa:81:b2:e1:4b:c4:68:
59:18:e3:46:0c:14:ed:3c:27:3d:da:db:c5:c4:70:2b:fe:a3:
db:4c:2a:92:68:62:28:85:4f:3f:8b:df:a5:d1:58:f7:25:e6:
f7:2d:4c:eb:a1:3a:0a:49:73:be:bb:85:d3:c0:37:b2:4c:37:
1c:5e:a9:4d:12:c8:56:4f:c3:92:d4:54:db:6a:b3:13:87:27:
74:ad:47:45:d9:c7:f4:6f:19:b1:db:fd:20:81:04:bf:e8:66:
18:a0:47:9d:3b:5d:1e:1c:a2:70:87:f4:22:e3:18:fc:b8:c1:
b9:f4:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:00:36 2025 by rpki-client