Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6AA9LT9mxWsBdASTf-87zIpXj8.roa
File: C6AA9LT9mxWsBdASTf-87zIpXj8.roa (raw, json)
Hash identifier: LtEF2N+jDGHyKhqGe0uNe8C467s0u7zIsryRau33MW4=
Subject key identifier: 0B:A0:00:F4:B4:FD:9B:15:AC:05:D0:12:4D:FF:BC:EF:32:29:5E:3F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282356EEA3EA9FCCB6CF1B542FB1E826
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6AA9LT9mxWsBdASTf-87zIpXj8.roa
Signing time: Thu 02 Jan 2025 17:49:52 +0000
ROA not before: Thu 02 Jan 2025 17:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141892
IP address blocks: 31.56.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:56:ee:a3:ea:9f:cc:b6:cf:1b:54:2f:b1:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba000f4b4fd9b15ac05d0124dffbcef32295e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:13:74:77:e6:40:f3:7b:22:2d:d8:bf:0d:
9c:a3:76:34:63:23:2e:b5:74:3b:ba:c5:5e:61:c9:
9c:ab:9f:ef:53:8d:bc:0c:d9:5c:17:5d:0b:ff:fe:
b2:26:ce:6f:6b:ad:47:dc:63:7c:63:02:87:62:05:
43:2c:14:c4:1e:d7:b3:23:1e:a1:11:84:0a:f7:73:
12:93:84:e8:6e:86:0d:95:b8:20:4f:d8:e4:ff:b3:
a1:ea:c3:0e:b1:3f:13:c0:ba:ca:43:2d:dc:23:3b:
00:30:b2:be:fb:34:37:f9:60:44:e8:63:7a:ef:68:
c1:32:bd:75:93:9f:c0:18:cd:f9:4d:75:44:7c:64:
db:e1:64:dd:c9:63:29:83:70:ef:8e:83:e0:d4:e7:
67:ae:dc:ac:f6:10:e1:41:47:bd:35:38:91:50:d9:
05:ad:18:e4:cc:d2:bb:fc:95:79:80:dc:9b:74:5c:
76:36:d7:81:06:ce:63:19:c2:d0:87:46:6e:ff:77:
8d:85:cb:17:5b:ee:5c:0d:ec:78:ba:04:9e:11:7c:
8f:c6:04:19:0c:a4:5c:5a:09:9d:de:e8:cc:83:f5:
0a:63:b3:b1:9f:6c:91:12:a7:c6:c5:d8:79:9b:00:
10:06:f8:ef:31:f8:f0:da:89:b8:ae:1f:86:4b:62:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:00:F4:B4:FD:9B:15:AC:05:D0:12:4D:FF:BC:EF:32:29:5E:3F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6AA9LT9mxWsBdASTf-87zIpXj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.56.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:6e:69:f3:f4:b9:87:df:35:3f:ba:7c:64:72:60:0f:37:
6c:62:4d:f8:78:39:fa:f3:05:b9:7d:93:e2:76:da:d1:7a:18:
13:e2:5d:db:ca:47:bb:e3:23:c3:e7:6a:ec:6d:e8:af:43:37:
06:f0:8e:ed:af:41:d6:ac:14:69:bd:b8:65:f4:6b:83:de:d6:
c6:90:f5:b7:4c:42:d5:00:c5:dd:25:db:bb:6d:d0:85:4f:ea:
51:17:3a:41:f4:ca:25:f9:b5:b6:d3:7c:ad:0e:38:3c:67:73:
8d:48:07:89:64:30:c4:ce:9c:6a:90:4d:43:fc:71:2e:8f:6d:
87:1e:47:97:47:da:40:8e:c2:e0:84:4e:01:b8:07:78:cb:03:
0b:54:06:36:ca:17:ae:41:21:f7:7f:82:c7:68:66:32:b2:7e:
c8:eb:76:0b:9e:cf:1e:e0:af:08:5a:5e:1b:be:ef:6e:f1:7e:
62:3b:52:c3:4c:db:6c:16:94:8a:0b:82:68:fe:b9:78:7d:11:
df:6f:80:f7:f1:8b:4f:02:a2:71:f4:56:1a:78:2a:71:25:46:
36:1a:b5:9d:b9:60:23:97:d4:65:cd:0f:b1:ae:80:ac:6e:06:
bc:a4:9b:00:29:5b:98:43:99:09:e2:2b:e6:a3:4c:f5:d6:77:
4e:ca:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:13:23 2025 by rpki-client