Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7qc2W-IvMbRsrqj9w3QQbiVQ3Dk.roa
File: 7qc2W-IvMbRsrqj9w3QQbiVQ3Dk.roa (raw, json)
Hash identifier: K/tkI7qKp/IBxtf8TJwBDabDEQkkEb/iPmorgKeCyT0=
Subject key identifier: EE:A7:36:5B:E2:2F:31:B4:6C:AE:A8:FD:C3:74:10:6E:25:50:DC:39
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195CBECD2C84C4E1360965D1CC39F64863E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7qc2W-IvMbRsrqj9w3QQbiVQ3Dk.roa
Signing time: Tue 25 Mar 2025 06:10:50 +0000
ROA not before: Tue 25 Mar 2025 06:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211409
IP address blocks: 31.59.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:ec:d2:c8:4c:4e:13:60:96:5d:1c:c3:9f:64:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 06:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea7365be22f31b46caea8fdc374106e2550dc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:5a:9e:20:22:5a:f4:2c:f9:38:eb:74:25:
b3:fa:b1:71:ab:8e:29:19:2e:0e:32:d3:10:81:d7:
70:3d:ce:23:81:7a:dc:2e:77:ab:b1:69:9e:96:c2:
78:2e:8e:16:79:84:54:12:bd:e0:63:c0:96:47:45:
27:97:ca:c9:8c:45:6c:bc:f9:66:85:c0:1d:e3:8d:
0e:7f:49:fa:ea:9d:e3:8d:59:2a:f9:e9:ea:1a:bb:
00:36:d3:65:bb:8b:29:e4:b4:ab:87:9f:6a:19:e9:
b7:65:1e:b5:b1:31:6b:22:a1:ae:3a:ed:8e:5d:84:
df:c2:52:8a:03:6d:ca:67:85:2f:db:d9:59:2f:03:
7e:91:7f:11:35:0d:66:31:ec:ce:ba:cd:d9:3b:dc:
46:93:2b:57:4c:32:8d:f4:c6:52:d6:68:fa:79:1e:
14:54:fe:68:65:b7:90:de:b2:ca:3b:cc:a9:23:5e:
8a:d1:b1:a3:96:f9:c0:e8:30:e0:19:57:07:67:87:
70:59:8c:6b:f9:2e:d0:40:66:a1:09:95:13:12:f9:
4b:4c:e9:fd:38:cf:e4:75:72:2b:83:8d:e3:d0:1d:
60:11:08:7a:bf:28:e2:ea:1b:1d:f2:72:d6:94:29:
2f:cb:17:c5:f3:93:01:94:95:41:89:bb:a9:2b:1d:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:36:5B:E2:2F:31:B4:6C:AE:A8:FD:C3:74:10:6E:25:50:DC:39
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7qc2W-IvMbRsrqj9w3QQbiVQ3Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6e:14:13:75:c1:2b:50:7d:82:f5:3d:a2:ff:42:f9:81:03:
c0:70:84:8f:ab:68:58:a4:cb:2a:ef:b8:d1:c8:bd:6b:03:70:
e4:92:ff:46:4a:71:31:0d:59:ea:b7:6c:ec:45:d8:60:35:6b:
56:5b:20:96:f6:2d:ce:9b:c2:50:63:56:4c:b7:93:b1:aa:84:
fb:90:fc:44:97:19:9d:63:c0:47:de:80:ba:be:99:ab:a9:d8:
a9:6b:79:69:d7:87:49:91:45:92:a5:6d:f0:c8:0f:e9:ee:7d:
17:93:de:9c:9f:c3:09:53:15:85:60:20:2d:3b:1a:7f:6d:77:
bf:66:b1:16:0f:1a:6c:66:01:a6:91:5d:d4:e0:35:99:6b:07:
1b:ec:ac:83:09:96:ec:e2:8e:71:b6:de:7b:00:e5:4f:99:3d:
e6:df:b9:d2:0b:7b:d0:0d:bf:2a:81:bf:23:ab:3d:63:8e:9b:
e4:2b:a4:24:27:4f:7c:88:54:e1:92:48:c2:96:43:dd:2e:c3:
65:32:e6:5f:96:a6:1d:e2:bd:0d:aa:d0:f3:f4:e3:ee:17:15:
0f:5c:a3:0c:d7:4e:7c:89:60:51:c9:40:e4:b8:e9:a9:90:7f:
d2:78:4f:c5:05:a2:cf:7f:17:50:5a:9f:14:88:7e:c2:f6:c0:
7a:8f:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:35 2025 by rpki-client