Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7dT0ubQdqyPLjVYVuMgmw8xGV7M.roa
File: 7dT0ubQdqyPLjVYVuMgmw8xGV7M.roa (raw, json)
Hash identifier: oNYFXLFmeU1OvWa1mVzm/7O32dlb/Easi2ADT7SgwYs=
Subject key identifier: ED:D4:F4:B9:B4:1D:AB:23:CB:8D:56:15:B8:C8:26:C3:CC:46:57:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823392257FA34DD2092425013D9DACF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7dT0ubQdqyPLjVYVuMgmw8xGV7M.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18186
IP address blocks: 31.56.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:39:22:57:fa:34:dd:20:92:42:50:13:d9:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd4f4b9b41dab23cb8d5615b8c826c3cc4657b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:44:e8:d7:c3:79:ca:f6:fe:14:68:56:86:
84:02:77:84:f9:fc:eb:5d:11:3f:ec:47:f2:af:de:
4b:9a:c2:8e:37:9b:f4:e1:a0:e4:65:6a:2e:35:67:
fd:40:22:50:14:44:c6:05:cc:a6:4e:1d:9a:92:57:
b7:cc:fe:c2:7e:d3:be:cf:fa:f1:56:32:2e:0d:bc:
ad:e5:85:79:f4:35:80:f8:94:ff:21:bb:a1:01:00:
d3:cf:ed:87:b9:69:8f:a0:06:62:1b:d6:31:fa:42:
0c:f7:42:3f:8f:d9:26:fd:bd:2f:e6:75:f1:40:17:
4d:6f:f3:2f:56:9e:3d:37:3f:54:24:4f:d9:a2:62:
20:05:54:af:08:dd:e7:3d:12:1c:1d:81:0c:04:d4:
7b:3d:30:45:bb:c1:a1:52:bc:42:40:e4:9d:aa:84:
21:87:0f:af:e1:a0:fc:32:e9:73:e9:04:cd:29:66:
0e:b3:9b:bc:64:03:5a:e6:aa:40:e5:16:cb:8c:13:
ca:c0:82:29:cd:77:db:e0:4b:d8:26:aa:c3:43:29:
3a:7d:10:8c:dd:60:e4:f7:0b:01:78:9e:10:d1:0d:
1e:73:c5:08:55:a3:df:37:18:b0:8b:98:24:66:ac:
3d:91:9e:95:8d:ba:a5:a9:6e:ab:79:fb:37:42:f2:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:F4:B9:B4:1D:AB:23:CB:8D:56:15:B8:C8:26:C3:CC:46:57:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7dT0ubQdqyPLjVYVuMgmw8xGV7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:58:20:8c:7c:9b:02:94:30:c9:3a:68:a8:e5:9f:52:28:8d:
d5:df:2c:15:b0:85:15:56:b6:6c:35:c1:dc:06:b7:4b:1a:ad:
53:44:3e:11:9d:57:11:77:c6:95:e4:f3:d1:11:fa:d0:4e:d9:
c8:4f:41:77:b1:c1:24:8b:da:76:e4:a9:32:8f:d3:3b:c1:03:
23:d7:c1:45:25:ec:43:54:f7:65:91:7b:ee:69:54:27:33:45:
5b:bc:d6:54:69:65:02:0a:6b:28:ce:35:ea:bf:1f:b9:3b:91:
4d:c1:33:a3:1c:cc:5a:53:a7:d5:67:d9:27:4d:41:6a:a0:4a:
f1:ae:28:18:36:59:2b:19:07:f9:03:ad:25:dc:01:7a:34:d9:
95:4d:b8:69:db:4d:a1:39:52:1b:e5:7e:a6:b2:30:db:5a:8b:
e1:4e:9f:d0:b2:39:be:3b:20:8b:3a:cd:86:9b:93:60:83:0e:
8c:63:d8:58:29:c0:eb:43:7c:5d:b6:d4:74:f2:85:30:18:04:
8a:75:56:33:4d:76:f2:49:b8:ac:f9:41:6e:40:dd:0c:a8:c6:
43:2e:7a:07:68:b9:11:67:8e:0f:8c:f9:59:82:9b:8f:90:24:
37:24:98:93:fe:cb:c2:e1:72:f0:5b:dd:45:28:74:e3:23:64:
c3:46:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:10:24 2025 by rpki-client