Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0b5eLFhJ_IKDc8_PY5E0SvFpR9E.roa
File: 0b5eLFhJ_IKDc8_PY5E0SvFpR9E.roa (raw, json)
Hash identifier: xtYjrHF9MWriirUmLFvyAm/BnnjqfCMIlEFBsFWbbtg=
Subject key identifier: D1:BE:5E:2C:58:49:FC:82:83:73:CF:CF:63:91:34:4A:F1:69:47:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428238239B96A1A3FD0A15C4B7172C517
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0b5eLFhJ_IKDc8_PY5E0SvFpR9E.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216145
IP address blocks: 31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:82:39:b9:6a:1a:3f:d0:a1:5c:4b:71:72:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1be5e2c5849fc828373cfcf6391344af16947d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:ab:dc:ae:c3:c1:48:68:0b:e4:5c:c3:14:
0d:ef:6b:81:c6:82:d7:68:b3:10:87:74:fe:9e:dc:
84:27:5a:35:81:64:4b:4a:9a:f4:0c:e3:24:e4:7d:
9e:bf:07:2d:39:fa:55:de:bb:c6:8d:44:f1:f8:47:
e3:74:69:c9:99:3f:22:3a:f2:69:3b:65:40:a3:2e:
7d:96:16:b5:a0:72:76:12:ca:88:e7:d6:cc:93:71:
bc:72:3d:5f:b5:97:93:cd:13:c9:e8:fc:6b:0a:56:
72:ad:30:12:5c:fb:d2:2e:00:59:32:15:af:54:9f:
22:bc:37:7c:8a:26:9a:58:30:9b:a2:22:0e:63:97:
66:9f:0e:70:6d:3b:b6:32:13:a3:9d:58:9b:8e:b7:
4a:ed:bc:52:10:05:2e:9c:6e:71:1d:91:87:c9:09:
1d:18:77:cd:c9:d0:cf:4e:0a:f9:d4:70:a3:4d:cc:
00:d1:0a:fd:01:56:67:27:74:cc:ba:b9:f2:cb:51:
80:8f:a0:1f:8e:85:08:c4:0b:87:23:28:3e:03:0b:
41:7c:64:1f:f4:ca:1a:c1:03:95:cb:15:f2:c6:27:
de:ce:07:f9:ff:2e:7b:cc:80:ad:ba:bc:fb:e4:ba:
e5:5b:e3:c2:3d:02:43:6b:95:62:d5:fb:f3:e1:03:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BE:5E:2C:58:49:FC:82:83:73:CF:CF:63:91:34:4A:F1:69:47:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0b5eLFhJ_IKDc8_PY5E0SvFpR9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f1:03:1b:04:75:06:95:ab:2e:4e:fd:b1:ad:fe:be:13:37:
ad:44:ef:03:4d:a7:f6:89:32:6a:46:ba:b3:d5:39:22:eb:dd:
05:4c:38:d3:b3:8f:5c:60:d3:37:ab:a3:aa:a6:ef:4a:48:14:
e6:a1:48:9d:48:2a:03:2a:0b:9b:94:04:e1:20:b7:1b:2c:d8:
a6:fe:37:4e:5c:1a:71:cf:fc:82:b7:63:d4:90:f8:93:3f:04:
a9:09:85:4e:73:a8:1b:7d:7f:96:09:ca:b9:7d:9b:e8:6f:1b:
22:c7:c8:84:4f:98:20:89:69:5c:ff:a4:2b:f5:cd:c4:4a:f6:
5c:81:22:ba:33:ba:6e:05:c0:5b:c2:16:1b:a4:20:db:60:3e:
8f:29:d0:0e:80:2a:08:ba:af:8c:70:a1:ef:f9:cc:b0:46:8e:
c9:cf:75:35:a9:ae:ec:d2:0a:e3:9e:be:a2:76:4d:19:44:ad:
71:4b:62:78:cf:02:ef:ab:b2:10:73:45:32:3c:ce:15:07:6c:
af:6e:e4:c6:55:b3:c4:b9:55:28:19:db:41:5e:30:d0:b8:c6:
9e:a6:75:13:34:24:ce:df:ed:e2:cc:7b:97:1d:3a:66:38:6a:
52:87:95:39:ad:65:38:17:f3:d5:0b:64:87:d2:0f:03:f5:ed:
f0:a7:de:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI4I5uWoaP9ChXEtxcsUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWJlNWUyYzU4NDlmYzgyODM3M2NmY2Y2MzkxMzQ0YWYxNjk0N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JOr3K7DwUhoC+RcwxQN72uBxoLX
aLMQh3T+ntyEJ1o1gWRLSpr0DOMk5H2evwctOfpV3rvGjUTx+EfjdGnJmT8iOvJp
O2VAoy59lha1oHJ2EsqI59bMk3G8cj1ftZeTzRPJ6PxrClZyrTASXPvSLgBZMhWv
VJ8ivDd8iiaaWDCboiIOY5dmnw5wbTu2MhOjnVibjrdK7bxSEAUunG5xHZGHyQkd
GHfNydDPTgr51HCjTcwA0Qr9AVZnJ3TMurnyy1GAj6AfjoUIxAuHIyg+AwtBfGQf
9MoawQOVyxXyxifezgf5/y57zICturz75LrlW+PCPQJDa5Vi1fvz4QMpHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNG+XixYSfyCg3PPz2ORNErxaUfRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMGI1ZUxGaEpfSUtEYzhfUFk1RTBTdkZwUjlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmnMA0G
CSqGSIb3DQEBCwUAA4IBAQAw8QMbBHUGlasuTv2xrf6+EzetRO8DTaf2iTJqRrqz
1Tki690FTDjTs49cYNM3q6Oqpu9KSBTmoUidSCoDKgublAThILcbLNim/jdOXBpx
z/yCt2PUkPiTPwSpCYVOc6gbfX+WCcq5fZvobxsix8iET5ggiWlc/6Qr9c3ESvZc
gSK6M7puBcBbwhYbpCDbYD6PKdAOgCoIuq+McKHv+cywRo7Jz3U1qa7s0grjnr6i
dk0ZRK1xS2J4zwLvq7IQc0UyPM4VB2yvbuTGVbPEuVUoGdtBXjDQuMaepnUTNCTO
3+3izHuXHTpmOGpSh5U5rWU4F/PVC2SH0g8D9e3wp94r
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:07:52 2025 by rpki-client