Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bt0RliiBc4wewKPVNeVMsTFVwo0.roa
File: Bt0RliiBc4wewKPVNeVMsTFVwo0.roa (raw, json)
Hash identifier: SkjBX10Cee/4H4fiuFdTVlZpHiCdeGqSuftz1VvRhvs=
Subject key identifier: 06:DD:11:96:28:81:73:8C:1E:C0:A3:D5:35:E5:4C:B1:31:55:C2:8D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944175DCC4928CD59E9354A7B2E69F6BC8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bt0RliiBc4wewKPVNeVMsTFVwo0.roa
Signing time: Tue 07 Jan 2025 15:50:30 +0000
ROA not before: Tue 07 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:75:dc:c4:92:8c:d5:9e:93:54:a7:b2:e6:9f:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 7 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06dd11962881738c1ec0a3d535e54cb13155c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:90:89:0a:c9:9a:24:80:4d:80:2b:46:e2:
21:a7:37:e4:e5:8e:e4:b5:55:69:b2:dc:51:d6:23:
01:56:55:ed:4f:4f:f7:68:6d:7d:4d:ac:e3:c1:ef:
c7:0c:6b:2f:2b:98:ca:f1:8f:60:45:90:94:93:c0:
63:ab:f4:52:45:51:db:b7:f8:ad:ae:e2:65:c0:dd:
c4:14:85:b9:e4:bf:c5:46:08:7c:ed:dd:e8:82:bf:
b7:bf:07:84:e4:74:13:64:6a:36:9c:fb:69:6a:bf:
15:5d:75:85:e7:a4:84:98:64:28:b8:6b:8d:b8:c7:
e4:d8:96:45:1e:67:2d:d0:ba:90:8e:42:ab:a4:51:
31:40:b5:cb:7c:71:f4:39:8f:8d:93:52:84:82:e7:
3b:5d:45:6a:d7:1e:08:7c:be:81:90:7b:8d:79:31:
75:67:d0:a2:4b:05:d5:e9:68:72:84:a0:cf:42:a3:
2e:d6:e0:2c:17:1c:2e:f2:1a:a4:92:28:a8:b9:a1:
10:1e:47:0b:34:96:d4:53:07:e0:f8:11:d2:ed:bd:
44:0f:eb:94:19:53:76:9f:cb:f3:2a:15:14:ce:e2:
86:1b:42:f2:7c:97:68:a4:c4:8e:5d:69:b0:43:cf:
06:7d:7f:6f:44:7d:6b:2d:9d:7f:8c:72:ca:21:9a:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:11:96:28:81:73:8C:1E:C0:A3:D5:35:E5:4C:B1:31:55:C2:8D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bt0RliiBc4wewKPVNeVMsTFVwo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.217.0/24
31.58.147.0/24
31.59.107.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6c:ea:2b:32:d7:94:9c:ff:c8:4a:50:f4:5b:3f:7c:9e:7c:
68:b4:9d:f2:a0:ef:65:82:15:a4:da:c3:19:6c:94:35:2d:3b:
e1:7d:ff:bf:22:a4:89:5c:51:6b:b6:5a:c2:3c:ed:97:e9:17:
26:64:d1:3e:15:34:7d:58:c2:b5:7f:65:2b:0a:31:95:b2:ba:
7a:17:6a:d9:2d:cb:00:6f:23:b3:09:4c:1c:d2:b5:b2:0d:30:
a6:dd:b9:ef:07:55:c2:3f:60:42:b5:c5:a0:4e:28:a7:45:e8:
a2:35:ab:4c:bf:cb:32:41:b9:87:e0:2b:6f:06:4d:95:e0:a5:
3d:b0:e2:83:14:b8:2f:01:98:02:d2:94:1e:84:08:de:56:cc:
1a:ba:87:bf:2a:99:b4:c2:71:6c:29:25:3e:66:39:eb:94:9a:
16:90:48:f8:02:3c:89:c0:6b:1d:56:3a:84:1a:0c:4e:71:46:
35:fd:54:47:69:c1:1b:a3:b6:0a:15:44:65:85:05:ae:8f:ce:
bd:b9:ea:39:a0:a4:81:45:cb:ed:a3:71:27:c6:80:e2:ae:df:
08:b3:d6:fe:05:f1:cc:7d:4e:e5:e4:a4:58:23:e1:7d:0f:13:
95:6b:0d:9e:08:99:8e:60:dc:a6:94:69:48:d4:d1:1c:1f:57:
93:6f:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:58:44 2025 by rpki-client