Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2zt076-URxe5XkI2MeV_zgKZU5g.roa
File: 2zt076-URxe5XkI2MeV_zgKZU5g.roa (raw, json)
Hash identifier: G5Zee4Ahy8icbma4HEkkGpNrSKgryck5ITWJu8lfjwE=
Subject key identifier: DB:3B:74:EF:AF:94:47:17:B9:5E:42:36:31:E5:7F:CE:02:99:53:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019464513A269867A695743AC48F38DE4E55
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2zt076-URxe5XkI2MeV_zgKZU5g.roa
Signing time: Tue 14 Jan 2025 10:17:12 +0000
ROA not before: Tue 14 Jan 2025 10:17:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140042
IP address blocks: 31.57.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:51:3a:26:98:67:a6:95:74:3a:c4:8f:38:de:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 14 10:17:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db3b74efaf944717b95e423631e57fce02995398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:75:b2:8a:42:2f:ed:7a:7d:a1:8f:fd:bf:
c2:47:90:7d:0e:cf:36:60:01:dd:35:16:d5:96:32:
2f:17:b0:66:81:8e:e8:5f:d7:cd:9a:fb:3d:c2:ec:
c1:30:c2:c9:66:fa:77:e2:82:15:44:b5:f0:9e:c6:
55:43:83:61:c7:af:c6:d0:52:85:7f:95:18:bd:ab:
36:e8:26:db:f2:48:52:1c:2f:35:ee:a0:79:a8:bb:
a5:bc:f0:ee:31:2e:59:eb:d4:3f:39:e7:45:41:6d:
90:19:5d:a2:d6:3a:2b:5d:27:7d:be:27:a4:69:b2:
70:62:d2:aa:19:46:8e:3a:bd:3c:05:65:b4:dc:4f:
98:3d:2d:bd:99:a0:1d:3e:ba:dd:8a:a5:d0:6c:f5:
22:0e:06:24:52:87:1a:31:dc:65:21:7b:ea:7a:51:
9f:7a:0b:82:70:01:fb:bb:f8:00:d7:01:fc:0a:f9:
32:8a:b8:e8:a7:91:7c:d0:64:29:85:00:01:58:f2:
a9:73:b9:9c:12:f2:85:a5:13:e3:c0:02:ea:4e:32:
58:62:af:af:48:10:66:3f:21:22:da:34:fb:91:7c:
41:7a:59:d3:c1:be:05:2d:8f:67:7b:49:0e:00:97:
32:6e:3a:06:93:be:72:16:eb:f2:80:67:86:10:06:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:74:EF:AF:94:47:17:B9:5E:42:36:31:E5:7F:CE:02:99:53:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2zt076-URxe5XkI2MeV_zgKZU5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
91:23:1b:07:95:31:2e:62:ea:e3:a1:30:e3:d3:20:fb:b9:72:
9f:38:20:a3:d7:55:3f:30:01:e8:51:d9:b3:87:5f:fe:e7:7d:
af:ab:08:22:36:a4:cb:f8:1b:25:d7:7a:8b:3b:f5:2d:8e:2f:
c1:32:c0:70:70:5a:44:0f:1f:bd:fa:9a:fd:90:69:46:63:8b:
93:50:0b:44:81:8d:da:9a:12:c4:25:06:a3:aa:2c:99:dd:ce:
31:40:b5:50:9c:e5:30:c8:11:8b:e5:6a:70:b0:07:a3:9a:71:
7a:2c:1a:da:79:32:e9:be:8e:f6:d6:d3:b5:04:a6:a0:8f:bf:
f4:db:d8:2f:c5:c5:2f:6b:e9:0d:7f:b4:84:5a:ee:72:f0:1f:
f1:e0:ce:ae:9a:56:2e:f0:6a:d9:25:c5:39:74:e4:50:c4:85:
3d:5a:79:a2:d9:e7:93:a0:da:ac:27:16:b2:de:a7:64:86:29:
4a:9c:06:43:17:56:90:9a:30:99:10:d0:60:f5:27:64:1d:e0:
0f:1f:3f:4f:e0:6f:ad:3b:fb:f4:be:79:a6:c1:68:7c:97:25:
98:1b:13:90:53:7b:12:de:e6:24:29:80:c0:44:7f:8a:84:0b:
7e:77:92:bf:10:d4:b4:33:7e:d2:0a:dd:c0:e9:9a:a8:17:8e:
c2:1a:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:26 2025 by rpki-client