Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/35Lx2JmlirJDHmoDjIwsqZdRZW8.roa
File: 35Lx2JmlirJDHmoDjIwsqZdRZW8.roa (raw, json)
Hash identifier: /5do4Ej4/KKk3Z9Af+aJPPCRsPJ9YN82MwCIpZLnTik=
Subject key identifier: DF:92:F1:D8:99:A5:8A:B2:43:1E:6A:03:8C:8C:2C:A9:97:51:65:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A0807CEA7A94A34BEF2FB6A4196C05F2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/35Lx2JmlirJDHmoDjIwsqZdRZW8.roa
Signing time: Sun 16 Mar 2025 19:48:49 +0000
ROA not before: Sun 16 Mar 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:80:7c:ea:7a:94:a3:4b:ef:2f:b6:a4:19:6c:05:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df92f1d899a58ab2431e6a038c8c2ca99751656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:8b:ce:ef:2f:4b:38:f0:43:9b:fb:08:47:
fa:75:3f:04:31:8a:6f:c0:5c:52:81:eb:dd:95:8d:
d0:85:3e:ef:d3:32:08:ea:59:0a:ff:0d:c4:61:db:
04:57:ae:f7:58:b9:8b:ae:fd:8d:6d:f5:e4:a3:b3:
41:18:d7:63:cc:f6:3d:97:c1:a6:40:d7:1a:4a:f0:
a6:ef:8f:0a:45:4a:aa:6e:a4:90:6c:c1:72:1e:0e:
b8:e6:5d:14:f8:4f:51:33:4d:9d:df:99:d2:37:bc:
46:d2:88:28:67:f8:44:a3:b0:95:15:5e:35:92:95:
a3:3b:8b:26:6f:81:cf:4b:e7:cd:89:2c:12:6c:6d:
d4:c4:a2:e1:a1:da:95:2d:17:fd:ff:65:d9:31:0c:
91:d4:52:f7:30:30:69:99:de:50:21:f6:30:8e:d4:
5f:75:b5:e3:b5:f1:30:85:60:56:c8:d6:0a:1a:8d:
92:92:10:93:07:e2:3a:5e:5e:a6:2c:b4:a8:3a:7f:
fc:dc:e8:c5:26:fa:e9:86:89:57:a1:57:9d:76:4a:
0c:4b:66:1c:65:9c:18:c6:26:61:64:be:41:58:76:
70:46:45:ed:56:9c:68:6c:e6:16:25:00:86:fc:6f:
84:f7:1e:c9:9f:65:5b:33:32:66:e8:8b:b5:34:4f:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:F1:D8:99:A5:8A:B2:43:1E:6A:03:8C:8C:2C:A9:97:51:65:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/35Lx2JmlirJDHmoDjIwsqZdRZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.153.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
45:68:a9:de:d4:7c:27:91:b4:1f:d9:6e:5a:42:43:9e:17:5f:
db:35:4c:80:52:64:0d:a9:cf:70:b1:1a:7b:e1:70:86:7a:90:
8d:10:3a:98:6c:1e:de:44:fa:a7:6c:98:f1:49:82:86:3f:8c:
cb:9c:5c:23:cc:c7:36:9a:4b:6c:55:5f:4f:45:c5:75:5a:be:
b5:1b:5d:79:dc:95:b2:88:1a:25:88:d5:93:6d:4a:cf:d6:c0:
63:c0:4d:1d:75:0f:cc:78:81:5b:a8:f6:e9:45:66:f6:0b:24:
5f:ad:2b:a3:65:48:d5:3e:16:be:7a:fc:ac:0a:e3:45:a9:b8:
99:38:9f:3e:8b:ee:29:b5:9b:fd:07:9e:03:8a:09:d8:2f:4b:
fd:49:fe:2d:76:66:16:51:80:52:76:7d:bc:4e:b5:b9:b5:77:
81:8a:47:94:62:44:09:b0:4d:8b:08:32:1f:78:5d:7d:56:db:
d5:4f:89:08:26:5f:44:ec:81:58:25:7d:a5:de:62:26:e2:61:
b5:b0:22:c7:f2:71:4b:d6:0d:e2:11:e3:d8:d7:31:49:57:54:
c9:5f:60:6e:a0:fb:96:cb:63:6b:ea:1f:d2:80:32:00:52:52:
a2:68:58:0d:0f:25:9d:de:91:94:30:21:bf:7d:ee:b5:86:2b:
85:d6:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:23 2025 by rpki-client