Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-vkSiq2CQKT5D9NYwnKVQ0falec.roa
File: 1-vkSiq2CQKT5D9NYwnKVQ0falec.roa (raw, json)
Hash identifier: dR9G23hpwraGiwEs2qEWH1v2atUgTwu50cyqF26C68o=
Subject key identifier: FA:F9:12:8A:AD:82:40:A4:F9:0F:D3:58:C2:72:95:43:47:DA:95:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953E31C1F35C16FDBAF3B8BEE516221F6B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-vkSiq2CQKT5D9NYwnKVQ0falec.roa
Signing time: Tue 25 Feb 2025 17:40:02 +0000
ROA not before: Tue 25 Feb 2025 17:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137564
IP address blocks: 31.58.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:31:c1:f3:5c:16:fd:ba:f3:b8:be:e5:16:22:1f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 17:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf9128aad8240a4f90fd358c272954347da95e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:fa:66:4e:0c:8c:39:78:25:58:33:99:19:
15:f6:3f:4b:9f:43:41:cf:55:cb:d0:ee:c2:59:00:
d7:9b:05:a1:a7:c3:53:90:a5:64:69:6e:e6:18:bf:
05:88:91:66:e9:31:67:00:fb:bc:47:ee:ea:6d:24:
e4:b1:37:60:d7:1c:19:32:a0:57:f6:ad:f4:80:09:
99:48:1b:46:e8:5e:f5:26:3a:ab:2b:79:df:fc:7b:
e5:53:69:e5:fc:b8:98:76:60:fd:66:62:2b:ec:74:
cf:ba:df:e0:e5:e2:17:0f:d5:a6:7a:de:b6:42:c3:
7c:ec:42:3c:f9:07:5a:3e:74:70:00:58:f5:87:bf:
4e:1a:69:05:19:84:02:20:9b:86:03:37:c9:e1:f1:
d8:49:15:ef:92:ec:b5:79:b2:95:1a:1b:a1:9f:92:
1a:72:ab:cb:a6:35:95:64:3f:6a:3d:b2:46:2c:3b:
f0:c0:71:72:57:96:f7:b3:9e:f3:52:7a:27:d6:a8:
ae:43:23:8c:7a:21:23:02:0c:fa:a4:a1:ab:19:06:
34:df:af:19:f3:f2:4b:8c:40:34:cb:c0:d7:e3:d6:
c7:a9:ca:3e:41:74:49:90:5f:e7:13:ba:21:6e:3d:
1b:69:d6:05:dd:c2:86:a5:2b:04:64:02:d8:9c:b0:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:12:8A:AD:82:40:A4:F9:0F:D3:58:C2:72:95:43:47:DA:95:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-vkSiq2CQKT5D9NYwnKVQ0falec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8d:87:68:31:15:d8:82:11:c5:7f:b8:0f:8b:3a:8f:c7:2f:
2e:06:94:7d:d2:21:68:09:e6:66:7f:a9:03:ed:cb:d7:7c:8e:
69:a9:a7:98:61:b4:3d:06:04:0e:1f:5a:2c:99:6f:f3:10:3b:
1e:b4:a1:76:1a:82:14:23:fb:33:4d:fd:7e:47:c3:fc:a0:7c:
39:67:20:22:46:b4:f5:f9:56:cb:a5:5c:47:ff:a2:82:66:11:
43:3d:70:63:29:ac:c7:e0:be:c0:61:dc:d7:aa:fe:cb:e1:1c:
bb:81:a8:24:43:9c:1a:e4:be:ed:a1:65:90:34:b7:4d:2d:97:
de:e8:f8:6e:22:6d:af:4e:eb:3c:5d:c1:05:f5:67:7d:ab:0b:
9f:41:c6:f0:93:af:38:46:8e:75:c0:3e:3b:35:40:ff:04:a8:
f1:77:43:30:cc:b6:7d:69:85:45:2a:2c:59:45:1d:30:9d:22:
e9:39:6a:1f:73:5a:0f:be:e4:4b:08:5c:54:a0:5b:ef:c5:df:
95:93:e0:0f:15:ed:da:a4:80:06:37:f7:20:c5:28:4c:39:b4:
cc:40:80:57:8a:71:b0:b5:bc:88:1c:61:79:23:f3:64:f8:a2:
3e:e8:b2:a0:18:46:48:28:04:f6:bf:4c:7c:20:4e:0a:7d:6b:
e7:78:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:40 2025 by rpki-client