Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BoAnT3rpwcK2pvI-LX5w4u20gEk.roa
File: BoAnT3rpwcK2pvI-LX5w4u20gEk.roa (raw, json)
Hash identifier: AosdjB0OhBOhmdUDTmoULSlASeaO5p7ITGi0lHdIJMU=
Subject key identifier: 06:80:27:4F:7A:E9:C1:C2:B6:A6:F2:3E:2D:7E:70:E2:ED:B4:80:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235EA534CCC8DE20E0B25F12E191D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BoAnT3rpwcK2pvI-LX5w4u20gEk.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201233
IP address blocks: 31.56.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5e:a5:34:cc:c8:de:20:e0:b2:5f:12:e1:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0680274f7ae9c1c2b6a6f23e2d7e70e2edb48049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:02:dd:2d:ac:d1:4c:36:f1:b0:4a:01:3c:
7b:47:aa:cd:69:a9:97:c7:24:ee:0b:a9:6b:c1:98:
a4:02:5d:c3:0c:64:40:12:c3:a5:c6:92:ec:dc:18:
59:4b:04:44:8e:3d:1c:93:1d:35:d8:0a:6a:09:03:
05:05:46:4f:a6:c8:33:4d:a0:41:5e:1d:a6:2f:3c:
ed:fe:e2:ae:36:1f:b0:cd:e6:2d:13:5e:a4:25:25:
e5:60:d1:b0:e8:f6:b4:9c:a6:4c:ac:cb:b5:65:f1:
99:f8:91:25:73:ea:39:aa:a7:23:ea:47:cc:2e:89:
51:b2:70:32:53:47:82:5f:ec:1a:7b:8f:40:46:89:
38:61:ab:f3:d8:66:b5:df:32:f7:9d:52:78:7b:54:
26:9d:0f:33:19:c4:a9:e2:a2:1c:47:8f:03:bd:1d:
e7:3b:da:9f:f5:de:3d:c0:02:86:30:9b:fb:70:4a:
7f:17:ee:48:67:7f:b6:2f:63:db:de:be:09:f9:cc:
15:8b:35:cd:0c:7d:a1:96:b1:d3:18:4c:c7:2b:76:
11:f7:74:2e:b7:77:24:1c:a8:3f:43:5e:be:ad:74:
9d:5f:04:ce:6d:de:54:c8:1a:94:5e:33:6c:c6:ec:
d9:96:cc:fa:5e:b2:51:53:33:7e:3b:52:5e:73:c8:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:27:4F:7A:E9:C1:C2:B6:A6:F2:3E:2D:7E:70:E2:ED:B4:80:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BoAnT3rpwcK2pvI-LX5w4u20gEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:85:62:30:b2:86:13:de:01:64:d5:27:26:96:ce:3c:86:1e:
f0:75:99:b6:cb:f5:cd:16:8f:29:4a:b0:60:f4:6e:3c:94:d7:
2f:32:e9:4c:1c:b1:c4:3a:0f:c2:3a:5a:a9:14:c7:c4:a3:8f:
a9:aa:44:9a:69:bc:95:d0:17:6e:f8:89:fe:0f:a1:f9:23:25:
43:e3:97:dd:bb:eb:7e:8a:b5:76:89:2f:37:a4:1f:57:59:fd:
ba:31:a8:3a:db:68:89:63:12:32:e0:65:96:7a:ed:84:df:cf:
2a:af:4d:b8:ef:0e:7d:a7:ab:b4:7b:f8:ca:73:b5:ff:e7:40:
7e:8e:10:d3:f7:4b:41:40:c6:65:e3:71:21:e8:21:54:5d:81:
8a:a8:26:2c:78:1e:a5:58:09:71:a4:20:bc:de:1e:fd:8e:33:
bc:21:1c:a5:78:4b:e8:71:3c:02:e7:fd:73:c2:e9:c9:47:58:
50:75:49:7e:8c:74:aa:15:6d:d7:a9:e1:2e:24:75:d8:43:11:
2d:06:53:3c:c1:12:f5:3a:bf:12:56:35:71:86:ca:04:b1:77:
71:4d:16:70:9e:cf:d5:d1:ca:c6:1f:ea:a2:09:72:c7:cc:84:
51:59:c4:c7:a2:57:de:0e:06:25:cf:bd:9b:10:af:e9:03:2f:
55:86:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:11:44 2025 by rpki-client