Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eB-MLKPYfjpLgdIntsbL4LzPb8.roa
File: 8eB-MLKPYfjpLgdIntsbL4LzPb8.roa (raw, json)
Hash identifier: Bj93xSRu+JbP7AZWXtoeMgg+wG28uOkYOSvz+0zD31U=
Subject key identifier: F1:E0:7E:30:B2:8F:61:F8:E9:2E:07:48:9E:DB:1B:2F:82:F3:3D:BF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01943D1A92C0DE903A12A24DA1649302D994
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eB-MLKPYfjpLgdIntsbL4LzPb8.roa
Signing time: Mon 06 Jan 2025 19:32:19 +0000
ROA not before: Mon 06 Jan 2025 19:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 31.57.218.0/24 maxlen: 24
31.57.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:1a:92:c0:de:90:3a:12:a2:4d:a1:64:93:02:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 19:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e07e30b28f61f8e92e07489edb1b2f82f33dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:72:b2:59:55:d2:e5:0d:3a:b5:59:c6:a5:
e6:94:24:df:37:74:1d:60:d4:b6:8a:61:1e:06:45:
73:82:2a:e3:9f:af:5f:52:70:89:4a:5c:fa:5e:8b:
e2:9f:92:11:63:76:37:d1:d0:b9:c0:61:2f:67:48:
c0:d5:6d:bd:9e:b4:71:8a:a2:c9:43:fe:d7:c2:ea:
22:f3:e1:66:60:e9:60:0f:cd:84:6c:5b:62:b5:0f:
56:65:1a:e7:cd:6f:93:8d:31:fe:49:c0:19:ac:b6:
a1:8d:3e:55:a1:e7:f6:df:f4:b4:11:b9:22:c9:38:
d7:e5:fb:41:62:11:1a:c2:f0:ef:0b:63:0f:f9:03:
c9:bc:2b:8f:78:09:0b:f1:5b:71:9c:07:c3:98:50:
77:25:13:ff:a6:fe:e2:f3:58:7c:ce:41:92:a2:67:
64:7d:80:2f:67:cb:94:68:2e:2a:ac:1f:95:67:41:
6e:a1:7f:c1:68:83:7a:1a:d8:bd:e5:0e:f9:28:eb:
6d:bf:ef:a5:f3:ae:c3:38:25:2c:24:5a:69:29:c1:
ca:7b:4d:2d:3e:0e:7b:80:e8:55:4c:77:59:fa:25:
d3:a7:c3:40:69:22:49:54:92:65:9a:5c:49:98:9f:
de:41:04:d6:74:2a:5b:a9:05:83:26:60:53:ff:bf:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:7E:30:B2:8F:61:F8:E9:2E:07:48:9E:DB:1B:2F:82:F3:3D:BF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eB-MLKPYfjpLgdIntsbL4LzPb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.218.0/24
31.57.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:be:61:3f:c2:95:62:91:b6:e6:82:9e:a8:9f:79:35:17:9e:
3b:b8:22:11:e3:ce:05:36:dd:b4:80:74:05:75:aa:d2:40:1f:
7f:0f:e3:dc:60:88:d9:1e:3e:22:27:35:4c:78:a5:70:20:77:
08:fd:55:57:66:2d:02:6c:cb:67:d7:d2:3f:ad:22:b2:26:76:
d0:43:0f:cd:1d:ff:77:54:c1:b7:59:8e:c4:be:0b:16:ab:f4:
23:cb:2b:a8:3f:7b:0b:2e:24:4d:fa:31:dc:ad:1a:5a:60:ad:
76:d0:b1:21:03:3c:d9:c4:54:8d:dc:1b:b2:a3:0c:50:1a:5a:
ef:25:b6:4e:6f:72:de:9b:fd:29:0c:94:63:99:17:89:8e:04:
3e:b4:70:7d:1d:dd:14:0e:fe:a0:89:2a:a8:a7:4c:87:6a:dc:
58:ea:83:a4:46:98:b2:b9:f9:0d:36:aa:04:71:bd:ca:05:52:
dd:7e:e6:2e:54:e1:11:6a:8e:b6:58:e2:5d:38:81:31:f6:f4:
63:f8:01:2c:eb:77:8b:10:be:35:6a:f5:ca:c1:da:2a:46:4c:
db:1a:37:99:0b:ca:0c:35:74:dd:6e:39:2e:c1:57:22:d3:8d:
21:63:0e:6d:0f:4e:e4:4c:92:d4:78:14:3e:b3:6e:5c:a3:0a:
a0:76:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:05:49 2025 by rpki-client