Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7CU8sSSRydyL23JqBQQOc41VAMc.roa
File: 7CU8sSSRydyL23JqBQQOc41VAMc.roa (raw, json)
Hash identifier: dtc7DR3CsLMrwh+XDRVQ0DVUlH6WEtia74Ze18fRs4M=
Subject key identifier: EC:25:3C:B1:24:91:C9:DC:8B:DB:72:6A:05:04:0E:73:8D:55:00:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955D1AEB50ECF86847F90D6298BB280B95
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7CU8sSSRydyL23JqBQQOc41VAMc.roa
Signing time: Mon 03 Mar 2025 17:43:20 +0000
ROA not before: Mon 03 Mar 2025 17:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 31.56.172.0/24 maxlen: 24
31.56.173.0/24 maxlen: 24
31.56.242.0/24 maxlen: 24
31.56.243.0/24 maxlen: 24
31.56.244.0/24 maxlen: 24
31.56.245.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.9.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:1a:eb:50:ec:f8:68:47:f9:0d:62:98:bb:28:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 17:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec253cb12491c9dc8bdb726a05040e738d5500c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:b0:65:9d:86:d0:73:5a:cf:40:ab:0a:21:
9b:c4:45:7a:22:81:28:d0:95:d3:df:3d:b7:c7:40:
5f:dd:a8:9b:d8:2b:7f:e3:a2:14:94:6e:09:4d:22:
0e:0f:3a:1f:0e:ff:01:78:39:30:b8:89:ba:fc:b3:
23:8d:8a:83:c2:02:86:cf:9f:91:f1:c8:b9:33:1c:
1a:dd:26:b8:b9:db:4e:f6:05:fe:53:03:5b:7e:65:
fc:f9:a9:bc:dd:1d:a9:a4:92:b0:eb:da:a0:78:90:
0e:f5:73:03:45:74:d9:82:73:04:57:2f:84:4f:17:
d5:6d:ae:44:9b:47:61:7f:af:fe:3a:17:90:af:c6:
56:4b:c1:64:80:bd:dd:67:c9:33:fd:97:32:04:6c:
58:13:3f:5d:c1:0a:f8:fa:ab:72:76:e3:d2:f2:86:
27:50:15:e5:a6:43:50:4b:ea:7b:7b:a3:46:6c:7f:
ad:d0:21:1a:c3:9d:5a:2a:91:61:2b:d6:f7:6e:a3:
09:c5:84:28:bb:b3:80:06:62:60:ef:86:fe:7d:2c:
18:03:00:51:1b:97:86:4b:c2:fd:e2:c2:da:e1:ee:
eb:ad:bb:e2:4a:d2:19:30:4d:85:73:98:84:b1:ab:
cc:38:99:5b:2c:d5:23:1f:8e:18:ce:68:7f:f5:ad:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:3C:B1:24:91:C9:DC:8B:DB:72:6A:05:04:0E:73:8D:55:00:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7CU8sSSRydyL23JqBQQOc41VAMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.172.0/23
31.56.242.0-31.56.245.255
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:2b:31:07:8d:f6:fe:9a:75:df:70:bb:af:16:48:b6:41:64:
b4:3b:be:6f:ed:5f:47:b5:9a:c0:7b:81:65:77:c5:3b:3d:54:
dd:c6:32:cb:f7:e4:35:ab:41:1e:b2:45:56:3a:53:e0:a6:00:
b0:1e:88:6d:e9:f1:38:15:5c:5f:19:62:28:4d:c9:e1:5b:51:
55:6d:58:c0:02:5b:84:f5:44:cf:bd:00:ad:da:dd:a9:2b:10:
0b:96:09:06:7d:47:5a:bd:18:0f:2e:d1:5a:50:c3:33:fe:69:
f2:58:3c:b2:85:c3:72:76:fe:b8:b3:14:fd:92:f5:b6:15:1b:
9a:74:d5:7b:40:b2:d2:1c:68:56:0a:80:f8:e0:c5:0e:e7:b0:
ab:8b:24:a1:30:29:c7:c4:a7:33:a1:b7:d0:89:a8:54:b6:cc:
5b:63:d5:6c:80:5e:f5:55:cf:0a:bb:a2:52:9c:78:64:b1:33:
5f:6f:7e:8f:0b:15:d6:c8:62:06:ba:2a:60:2a:d1:98:e0:76:
4c:70:07:e3:5b:a4:79:21:e9:b8:9a:20:24:ab:4a:32:57:15:
37:74:54:01:95:9d:28:52:37:f8:f6:40:f9:ca:c0:44:e2:5c:
4e:82:ba:3f:f2:47:c4:d2:26:14:70:29:8f:51:f2:f9:a7:65:
2c:d2:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:05:31 2025 by rpki-client