Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-42h57v8_dibbpVat1OyAeUoJJU.roa
File: 1-42h57v8_dibbpVat1OyAeUoJJU.roa (raw, json)
Hash identifier: 1JxUZS7/tliuJthIHUrExUpostgVMZHXoX2MXriYtSg=
Subject key identifier: FB:8D:A1:E7:BB:FC:FD:D8:9B:6E:95:5A:B7:53:B2:01:E5:28:24:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F07E17C673E0BC23E9464F168EE2BD1B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-42h57v8_dibbpVat1OyAeUoJJU.roa
Signing time: Tue 01 Apr 2025 08:35:50 +0000
ROA not before: Tue 01 Apr 2025 08:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213769
IP address blocks: 31.57.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:7e:17:c6:73:e0:bc:23:e9:46:4f:16:8e:e2:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 1 08:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb8da1e7bbfcfdd89b6e955ab753b201e5282495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:46:0f:b2:a2:bd:e5:00:bf:c0:21:85:e1:
f5:e5:2f:74:a5:61:d6:34:7d:b4:fd:9b:ee:41:6c:
08:d6:d5:e4:3c:31:5a:96:5a:fa:1d:51:ac:78:ff:
b1:a0:ad:36:0c:9a:60:f6:2f:e7:2f:ef:16:38:d5:
b1:10:59:02:5c:6e:6e:43:0a:c8:17:8a:11:64:ee:
24:9f:6b:d7:e6:7e:ea:c8:af:e0:c3:9f:b0:af:9a:
f5:16:16:f4:c0:e3:e9:85:f1:82:1e:4b:7c:1a:e8:
36:a8:bf:b2:49:11:87:c6:0a:40:18:11:40:0f:6f:
10:a2:a4:39:ba:aa:78:13:fa:39:bf:73:8b:e5:a3:
f6:20:ce:c5:6c:14:f6:14:e3:06:d8:8a:48:31:50:
54:c8:40:93:c9:e9:93:73:83:c8:f5:4f:a4:b7:6a:
bc:41:ae:8b:c6:a6:5d:d4:83:e4:92:e2:1b:86:0a:
b1:4b:b4:89:a5:d0:8c:52:a0:ab:52:67:79:ef:25:
57:38:3b:3b:9b:99:8f:62:50:d5:00:ec:e7:fc:a9:
3c:b9:ca:07:7d:0f:9a:f6:4e:31:65:be:13:d7:8d:
89:98:08:b9:8d:b3:e9:61:85:a2:7f:4b:82:9b:23:
2a:2d:7d:7b:8f:c6:11:fe:b2:58:1a:a9:a8:a6:a0:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:A1:E7:BB:FC:FD:D8:9B:6E:95:5A:B7:53:B2:01:E5:28:24:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-42h57v8_dibbpVat1OyAeUoJJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.182.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ae:6d:41:20:a4:b2:e5:17:5c:72:98:53:9a:4a:34:41:4f:
53:2c:93:c8:45:d6:79:bc:7c:d0:3e:41:bd:8a:c8:69:21:76:
f1:5c:0f:01:60:eb:0d:12:f2:3f:eb:0b:c2:e1:0b:35:91:df:
14:89:8e:3a:60:6d:a3:a2:39:bd:75:7b:49:f5:8a:de:a0:fe:
3c:96:49:48:19:a7:3f:40:c1:97:eb:c1:b7:a1:ad:b4:df:19:
f0:84:2c:de:d4:ea:93:d4:17:22:cc:d1:a6:64:32:53:d2:5a:
48:7c:07:e1:a3:58:cb:64:4a:a1:b3:28:3f:e2:23:e1:45:43:
5c:5f:21:20:f7:cf:e3:9d:38:05:5d:f3:20:b5:8e:48:82:ac:
09:91:20:44:5e:0b:8e:b4:2b:85:64:49:db:cb:fe:dd:2f:87:
7c:a9:7e:32:87:d9:3f:41:b4:f4:80:cc:7e:4e:4f:70:68:a6:
aa:74:9f:eb:52:a8:dd:ab:a6:b6:da:30:83:d7:4b:d7:71:09:
04:5d:cb:83:18:8a:ac:1c:cb:ff:2b:ae:29:7d:1c:d5:51:7a:
39:1a:c3:e0:9d:fb:7c:4e:46:72:4a:35:5f:41:1d:32:a7:c2:
82:89:36:b8:d3:f6:a3:77:b6:10:72:40:0e:b5:27:24:0c:b4:
f4:9a:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:43 2025 by rpki-client