Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cp5rJffIe3vGdh2Mz9Ieq7ogc18.roa
File: Cp5rJffIe3vGdh2Mz9Ieq7ogc18.roa (raw, json)
Hash identifier: 7zss43cFkzdn/WRjM3B05/ts8JoxD3ji4fOrU+obyDY=
Subject key identifier: 0A:9E:6B:25:F7:C8:7B:7B:C6:76:1D:8C:CF:D2:1E:AB:BA:20:73:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019460C244CBFAE701DF936EFEFD9C9AF85E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cp5rJffIe3vGdh2Mz9Ieq7ogc18.roa
Signing time: Mon 13 Jan 2025 17:42:11 +0000
ROA not before: Mon 13 Jan 2025 17:42:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 31.57.67.0/24 maxlen: 24
31.57.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:c2:44:cb:fa:e7:01:df:93:6e:fe:fd:9c:9a:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 13 17:42:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a9e6b25f7c87b7bc6761d8ccfd21eabba20735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:29:a9:b1:8d:24:bb:d1:cf:3a:02:b2:16:
8e:5a:82:b5:25:3b:eb:65:d0:cb:52:4f:39:42:d0:
81:97:5a:f6:11:3a:44:d3:c5:54:9c:cf:3a:98:6c:
3b:1d:22:19:43:27:b5:e1:44:d3:43:c5:21:30:db:
5d:90:9d:0f:fa:65:af:89:3d:9d:dc:48:da:31:42:
d0:8c:b9:01:bf:62:12:d5:90:75:23:7c:ba:00:4a:
3d:0c:ad:ef:b2:f2:05:c8:a6:db:9b:01:81:b0:f9:
8e:e1:fe:22:77:79:51:36:bd:c7:bb:b2:a2:be:90:
4a:2c:a2:15:b9:97:5b:9f:bc:ff:d1:7a:e8:74:14:
7f:1b:7d:09:4a:c3:e4:67:fc:84:20:65:ea:3f:6a:
8d:e5:77:d4:2b:85:99:09:54:73:c1:3e:66:f4:17:
9d:7f:21:2b:f4:64:e0:69:31:05:07:66:8d:ef:5a:
b5:87:26:43:80:5d:33:50:4d:d0:d2:cd:27:f6:5c:
39:f9:f4:19:0e:3f:59:e4:79:7f:64:dc:b3:1c:6f:
a2:be:51:c5:e9:16:50:4e:c5:30:2a:30:3b:05:4a:
c9:bc:81:50:c3:0e:14:ff:c4:65:00:3b:e6:29:18:
d1:b4:1a:e4:f3:f1:12:9b:85:29:2a:4d:6d:9e:a1:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:6B:25:F7:C8:7B:7B:C6:76:1D:8C:CF:D2:1E:AB:BA:20:73:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cp5rJffIe3vGdh2Mz9Ieq7ogc18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.67.0/24
31.57.138.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fc:17:8f:c1:aa:92:f1:93:ab:c1:ad:90:44:a0:1b:6e:87:
4a:3c:c7:bd:91:d1:d6:82:cf:71:7b:c4:d7:63:da:57:bf:22:
8e:30:08:c5:2a:1f:7e:35:70:4f:4a:81:4e:32:c8:d4:3e:91:
45:cd:9f:e9:0f:5e:10:12:d6:b4:80:46:7a:d1:f8:3a:98:db:
2c:33:ff:1e:c0:e3:23:5d:15:25:3e:db:39:a8:92:b0:a7:ce:
ba:9c:bc:0a:d6:7c:67:93:db:05:d9:35:70:b8:82:2e:45:0b:
a7:10:72:15:9c:4a:65:48:ef:0c:26:e3:ef:5e:3c:99:dd:22:
25:1e:41:89:9f:36:cd:fc:5f:ac:b7:c1:6b:67:3a:52:3a:0c:
9e:ce:52:62:46:66:fb:1e:98:4c:69:ef:eb:45:3f:5d:c4:42:
78:6e:36:ed:87:f6:82:b8:86:ef:9a:fd:2a:1c:42:6b:40:5a:
fa:8b:1f:5d:4e:94:9f:42:fd:cb:53:7f:e0:d2:06:6f:fb:69:
4f:cf:8b:85:ca:e7:b5:7e:b6:30:94:91:0c:44:aa:be:5b:3e:
01:f0:59:7e:d7:0d:d0:42:42:4e:af:1a:f4:a4:ff:c5:e7:59:
4c:82:3f:e3:6c:8f:14:f7:bb:4e:c9:e3:dd:57:a6:9f:9e:24:
44:2d:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:19 2025 by rpki-client