Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8A4IJjcCpL4rWYiT3VaemYTnHxI.roa
File: 8A4IJjcCpL4rWYiT3VaemYTnHxI.roa (raw, json)
Hash identifier: IBtK2BoRmtA7LSyVOSfxleIAm3KLetCpV30oJaUmeUA=
Subject key identifier: F0:0E:08:26:37:02:A4:BE:2B:59:88:93:DD:56:9E:99:84:E7:1F:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235C57B14C52A2C4FE332430C28812
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8A4IJjcCpL4rWYiT3VaemYTnHxI.roa
Signing time: Thu 02 Jan 2025 17:49:53 +0000
ROA not before: Thu 02 Jan 2025 17:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198361
IP address blocks: 31.58.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5c:57:b1:4c:52:a2:c4:fe:33:24:30:c2:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f00e08263702a4be2b598893dd569e9984e71f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:3d:36:7b:b5:b8:57:d0:79:c5:e6:1a:31:
d5:99:6a:3c:4d:76:8b:3b:6b:54:7f:a2:ab:72:52:
8d:69:1f:3b:59:57:cc:7c:b3:9c:09:22:6a:20:d3:
a0:e7:f1:36:bf:f1:59:35:f1:a3:d4:33:76:06:27:
f3:49:50:c0:2c:c5:2b:02:b8:66:2a:aa:57:ba:96:
39:6b:4b:8a:ec:41:e8:9b:b7:58:24:ec:34:e6:dc:
6e:74:bb:69:32:fe:5e:fc:69:a8:35:ac:8d:72:0f:
92:9f:10:1f:35:92:b9:57:fd:fc:ac:a5:d0:d1:af:
35:0b:54:48:2f:02:81:23:5e:62:76:0e:16:fd:a5:
2c:d7:a7:00:c1:9d:86:88:ca:d6:a5:01:7e:3f:92:
b5:01:4b:12:50:74:7b:05:1c:c8:2d:f8:8c:40:3f:
98:ac:6d:9d:f2:b4:43:9d:0f:aa:36:0f:85:47:7e:
ee:e7:95:04:53:6e:44:2b:02:43:6f:85:73:f4:95:
08:d5:79:1f:5e:28:0f:73:d4:de:a2:dd:98:32:ae:
a6:03:0c:a3:03:71:ff:6b:3d:a7:5b:8e:af:1b:e6:
5d:cb:31:c4:40:74:0a:df:49:1a:96:79:0d:28:fe:
2c:79:f6:55:cf:c3:43:40:ed:d9:25:db:60:94:4d:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:08:26:37:02:A4:BE:2B:59:88:93:DD:56:9E:99:84:E7:1F:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8A4IJjcCpL4rWYiT3VaemYTnHxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:37:5b:97:7d:48:a2:04:fd:9a:05:1a:d3:8d:72:1d:26:5d:
d3:b0:15:2f:c3:9e:e7:54:17:65:92:66:5a:8a:c6:58:5e:da:
8c:43:18:83:64:73:f2:d2:3a:82:d4:27:a9:4f:e8:f2:63:f7:
2f:9d:b5:20:47:bc:a6:43:e8:da:08:9a:cd:4c:9f:1d:4d:70:
1e:7c:a2:51:92:74:a9:2c:a0:bd:5c:a5:4c:51:b8:d8:f8:27:
0f:2d:a0:92:5e:13:cf:d0:a7:7e:aa:bb:d4:7f:47:46:c2:47:
53:ff:e7:3b:1a:a4:5e:87:02:9e:df:ab:4a:70:85:25:19:cb:
83:f7:29:70:88:11:05:67:f8:88:1b:14:22:47:1f:14:ab:d3:
38:1f:9e:41:aa:3c:05:1e:7e:81:33:25:f7:76:ca:c5:78:ac:
3a:61:dc:ac:9c:8c:a5:d3:b3:5d:de:9b:bd:e3:f5:ba:45:d4:
ed:77:3c:63:8e:21:76:d1:5a:4e:cb:42:ee:39:06:70:e9:b8:
b7:ff:5c:19:ce:cc:53:5e:e0:3a:8b:ed:17:08:45:a8:1f:f6:
3b:0c:0f:b6:c8:12:2d:b5:c7:49:c9:bc:af:a8:f9:36:67:97:
95:e5:5c:57:ee:a6:a5:af:63:a0:e4:91:08:c4:90:3f:ce:6e:
3c:a0:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:00:54 2025 by rpki-client