Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38WqElS4k62OM7OeVGeCYR-nTZs.roa
File: 38WqElS4k62OM7OeVGeCYR-nTZs.roa (raw, json)
Hash identifier: GYObD02SSNqWDz80Pdc1YXdBg2FyOPgXEg4xqzbjpcA=
Subject key identifier: DF:C5:AA:12:54:B8:93:AD:8E:33:B3:9E:54:67:82:61:1F:A7:4D:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194B29E9C936AB044B624EFBE7B4C077621
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38WqElS4k62OM7OeVGeCYR-nTZs.roa
Signing time: Wed 29 Jan 2025 15:12:06 +0000
ROA not before: Wed 29 Jan 2025 15:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213845
IP address blocks: 31.58.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:9e:9c:93:6a:b0:44:b6:24:ef:be:7b:4c:07:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 29 15:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfc5aa1254b893ad8e33b39e546782611fa74d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:68:0e:8c:75:81:0a:36:74:f5:f8:d8:9d:
26:fd:04:a0:77:55:df:0c:2c:9d:99:87:42:b2:5c:
2b:fe:46:d3:3f:0d:6c:e1:6b:49:74:3b:a4:37:28:
7e:3e:73:14:0f:ff:18:fe:b7:78:18:90:06:6b:5a:
8a:87:d6:38:80:db:9c:a6:72:1c:b6:fe:51:f7:a3:
57:9f:6a:60:83:d5:64:1a:64:e7:0d:36:34:68:1f:
ff:66:20:16:38:50:9d:a9:69:4d:5f:73:7d:ef:8e:
32:c0:34:4a:4e:76:e1:14:f2:9c:2c:88:be:b1:2d:
ea:b7:5b:73:f9:c9:c1:38:01:9e:95:e9:e7:03:47:
8d:09:c5:a4:b6:ed:7b:0f:67:59:b4:27:dd:4a:c2:
d6:09:53:5b:95:46:44:67:36:4d:ca:4b:35:19:9a:
66:f6:88:cb:fa:cb:76:0c:4b:33:17:16:d3:33:c4:
b2:4b:e1:f1:b0:fd:83:d8:94:9a:30:0d:1e:d1:f7:
7d:67:44:71:90:b6:92:a8:df:29:ef:4e:3a:18:1e:
9a:4b:e7:d8:06:e1:94:cf:52:8b:4d:b6:a7:d1:3a:
d2:b2:34:3c:6e:62:ae:d9:1c:e5:8e:f3:1b:e2:1c:
0b:0a:44:7e:b7:83:b7:15:27:5d:0e:6b:f1:09:b7:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:AA:12:54:B8:93:AD:8E:33:B3:9E:54:67:82:61:1F:A7:4D:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38WqElS4k62OM7OeVGeCYR-nTZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
66:7a:be:a2:01:cb:d9:d8:8c:7d:e9:c7:7d:26:38:21:7c:fe:
4b:20:e0:db:02:1f:a6:65:0c:5e:c3:2f:e7:de:9c:b8:65:cf:
82:7f:75:0c:be:36:0f:16:84:dc:c8:ad:90:ca:c8:32:f2:a9:
94:a6:7f:23:87:57:d3:8f:25:0e:96:ce:e5:42:f6:e1:e3:66:
00:54:cd:64:1b:3a:95:e1:11:07:28:c4:1f:95:fd:ea:84:6e:
de:38:0a:82:c1:e6:5d:ce:2b:df:a8:8d:41:86:b9:8f:ff:9f:
97:bb:be:6d:7c:76:72:16:14:b3:d8:72:74:b2:df:f4:4d:6b:
23:00:71:03:d3:c5:67:83:85:9a:54:4a:8c:85:43:f2:b6:24:
fd:13:73:21:5a:1f:db:eb:4c:db:79:fa:2d:30:b8:63:61:fa:
7d:39:22:f3:91:13:db:7f:87:b0:7c:65:95:5b:b2:8a:b3:8e:
95:89:be:9b:98:54:33:23:98:f6:e3:80:87:16:b9:33:00:62:
af:b4:6d:19:df:e2:60:7d:e0:2a:1d:38:92:5f:45:b0:dc:b6:
9d:37:9d:bf:be:9c:1d:40:e1:22:42:7c:52:79:ff:d8:71:7d:
44:dd:7d:95:b2:5e:66:30:24:ae:66:68:61:86:11:2c:81:e2:
6d:96:07:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSynpyTarBEtiTvvntMB3YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTI5MTUxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmM1YWExMjU0Yjg5M2FkOGUzM2IzOWU1NDY3ODI2MTFmYTc0ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBdoDox1gQo2dPX42J0m/QSgd1Xf
DCydmYdCslwr/kbTPw1s4WtJdDukNyh+PnMUD/8Y/rd4GJAGa1qKh9Y4gNucpnIc
tv5R96NXn2pgg9VkGmTnDTY0aB//ZiAWOFCdqWlNX3N9744ywDRKTnbhFPKcLIi+
sS3qt1tz+cnBOAGelennA0eNCcWktu17D2dZtCfdSsLWCVNblUZEZzZNyks1GZpm
9ojL+st2DEszFxbTM8SyS+HxsP2D2JSaMA0e0fd9Z0RxkLaSqN8p7046GB6aS+fY
BuGUz1KLTban0TrSsjQ8bmKu2RzljvMb4hwLCkR+t4O3FSddDmvxCbdJywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/FqhJUuJOtjjOznlRngmEfp02bMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMzhXcUVsUzRrNjJPTTdPZVZHZUNZUi1uVFpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzqOMA0G
CSqGSIb3DQEBCwUAA4IBAQBmer6iAcvZ2Ix96cd9JjghfP5LIODbAh+mZQxewy/n
3py4Zc+Cf3UMvjYPFoTcyK2Qysgy8qmUpn8jh1fTjyUOls7lQvbh42YAVM1kGzqV
4REHKMQflf3qhG7eOAqCweZdzivfqI1BhrmP/5+Xu75tfHZyFhSz2HJ0st/0TWsj
AHED08Vng4WaVEqMhUPytiT9E3MhWh/b60zbefotMLhjYfp9OSLzkRPbf4ewfGWV
W7KKs46Vib6bmFQzI5j244CHFrkzAGKvtG0Z3+JgfeAqHTiSX0Ww3LadN52/vpwd
QOEiQnxSef/YcX1E3X2Vsl5mMCSuZmhhhhEsgeJtlgcY
-----END CERTIFICATE-----
Generated at Sun Feb 2 16:10:31 2025 by rpki-client