Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BltYyvCGQbiZv5IDMZctt-rZWuk.roa
File: BltYyvCGQbiZv5IDMZctt-rZWuk.roa (raw, json)
Hash identifier: qJ7X+YZM+gf0enWJkCWOzoopNWgHWwOLBR7HWCd1F1c=
Subject key identifier: 06:5B:58:CA:F0:86:41:B8:99:BF:92:03:31:97:2D:B7:EA:D9:5A:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282376443A3911EA9E56D4D2B8203D64
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BltYyvCGQbiZv5IDMZctt-rZWuk.roa
Signing time: Thu 02 Jan 2025 17:50:00 +0000
ROA not before: Thu 02 Jan 2025 17:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214560
IP address blocks: 31.59.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:76:44:3a:39:11:ea:9e:56:d4:d2:b8:20:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065b58caf08641b899bf920331972db7ead95ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:8b:7a:81:a0:11:38:03:b6:46:94:e1:13:
fd:4e:09:40:3d:c3:ad:50:8a:d1:45:b9:94:98:b9:
e1:9d:d7:e0:24:50:48:1a:fd:d7:9d:16:cc:64:05:
f7:3d:b7:35:4d:f5:c2:5d:d8:09:1f:89:0a:d7:1a:
e0:92:0a:58:a0:17:fb:90:0f:85:a3:51:6e:39:ee:
7a:d2:b4:19:a6:32:c4:5e:c1:ad:e4:1f:26:3f:55:
8c:1b:d3:8a:a1:d7:54:70:43:61:a8:69:4c:49:1e:
bb:b6:ca:34:05:0d:e8:e6:5e:9b:53:71:b6:d1:5e:
be:7b:a5:17:5d:99:dd:2a:88:5f:7f:60:af:bd:86:
be:b0:21:c7:b8:2f:42:7c:b1:75:bf:f7:2b:0f:6c:
2a:32:18:51:eb:1a:46:12:07:7a:0e:a3:ea:fd:d4:
cd:8f:e0:43:91:d7:e5:10:56:82:b3:df:7b:c7:04:
d8:33:bf:be:41:19:6e:e6:35:13:d3:c7:cd:82:3b:
f8:e6:8f:e9:4a:27:b6:b1:4b:c9:83:cd:2d:fa:77:
fc:50:8e:be:6a:9d:fe:30:2f:64:3d:7b:f7:60:a6:
0e:e1:36:f1:93:58:80:00:b6:c6:8d:dd:e2:68:59:
53:77:fb:e4:5a:ea:a2:91:d8:f8:6e:70:fb:af:e0:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:58:CA:F0:86:41:B8:99:BF:92:03:31:97:2D:B7:EA:D9:5A:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BltYyvCGQbiZv5IDMZctt-rZWuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d8:68:03:e6:51:af:a0:bb:b5:d5:f5:d2:40:7f:ed:ea:1f:
01:a5:a8:85:c8:fd:60:cf:71:82:75:33:84:98:a9:26:92:fc:
25:15:29:f9:0f:58:5b:4c:03:31:fb:5b:af:9e:f6:5a:76:5f:
4c:3e:9e:5f:2b:83:7e:f2:a7:f4:29:e6:0e:b1:dc:c3:eb:ca:
a8:7e:b9:5d:45:9e:13:83:d7:0b:4b:f6:b4:b7:84:e5:ff:00:
9c:f7:40:8f:1e:0a:da:e4:93:66:44:f6:08:57:39:b1:86:37:
82:50:e0:8b:33:df:d5:a2:3c:08:b7:ea:5f:8e:5f:4d:35:0b:
29:5a:9c:44:00:ca:9b:2f:27:2d:ab:a2:5d:42:8f:2a:cf:7e:
bc:3c:21:c0:e0:d8:3e:eb:64:57:c6:73:5c:2a:e4:4f:b1:c0:
c7:0d:75:48:08:56:cb:1c:98:e6:c1:4c:73:d8:43:fb:15:62:
6e:2c:1c:de:4e:dc:ff:5c:c2:82:44:57:b0:7a:e1:54:2c:25:
88:23:63:3d:a3:53:e2:e4:b1:94:3a:b3:f3:fc:6a:40:7c:de:
44:65:6b:41:63:8e:f7:fa:81:eb:75:6e:e8:76:88:4a:62:68:
0e:47:b9:9d:d2:ab:15:5f:c0:76:d5:33:02:83:bb:a3:ab:75:
81:58:6d:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI3ZEOjkR6p5W1NK4ID1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjViNThjYWYwODY0MWI4OTliZjkyMDMzMTk3MmRiN2VhZDk1YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+LeoGgETgDtkaU4RP9TglAPcOt
UIrRRbmUmLnhndfgJFBIGv3XnRbMZAX3Pbc1TfXCXdgJH4kK1xrgkgpYoBf7kA+F
o1FuOe560rQZpjLEXsGt5B8mP1WMG9OKoddUcENhqGlMSR67tso0BQ3o5l6bU3G2
0V6+e6UXXZndKohff2CvvYa+sCHHuC9CfLF1v/crD2wqMhhR6xpGEgd6DqPq/dTN
j+BDkdflEFaCs997xwTYM7++QRlu5jUT08fNgjv45o/pSie2sUvJg80t+nf8UI6+
ap3+MC9kPXv3YKYO4Tbxk1iAALbGjd3iaFlTd/vkWuqikdj4bnD7r+BnbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZbWMrwhkG4mb+SAzGXLbfq2VrpMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQmx0WXl2Q0dRYmladjVJRE1aY3R0LXJaV3VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztgMA0G
CSqGSIb3DQEBCwUAA4IBAQBc2GgD5lGvoLu11fXSQH/t6h8BpaiFyP1gz3GCdTOE
mKkmkvwlFSn5D1hbTAMx+1uvnvZadl9MPp5fK4N+8qf0KeYOsdzD68qofrldRZ4T
g9cLS/a0t4Tl/wCc90CPHgra5JNmRPYIVzmxhjeCUOCLM9/VojwIt+pfjl9NNQsp
WpxEAMqbLyctq6JdQo8qz368PCHA4Ng+62RXxnNcKuRPscDHDXVICFbLHJjmwUxz
2EP7FWJuLBzeTtz/XMKCRFeweuFULCWII2M9o1Pi5LGUOrPz/GpAfN5EZWtBY473
+oHrdW7odohKYmgOR7md0qsVX8B21TMCg7ujq3WBWG3e
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:11:06 2025 by rpki-client