Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FKhD4Xe9bg5KQ4IZ1zRT2MP-uIQ.roa
File: FKhD4Xe9bg5KQ4IZ1zRT2MP-uIQ.roa (raw, json)
Hash identifier: 4lgXkK0AoXsg9Lmbt7a078rvYSYY/v1SZkGGX7Kl8Ug=
Subject key identifier: 14:A8:43:E1:77:BD:6E:0E:4A:43:82:19:D7:34:53:D8:C3:FE:B8:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282365E699EDC0AAC44B3C543635685D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FKhD4Xe9bg5KQ4IZ1zRT2MP-uIQ.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 31.57.154.0/24 maxlen: 24
31.57.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:65:e6:99:ed:c0:aa:c4:4b:3c:54:36:35:68:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a843e177bd6e0e4a438219d73453d8c3feb884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:c0:28:c3:93:c4:a6:90:c6:c5:5f:11:8f:
c7:22:5d:78:12:0b:da:9c:4d:7f:e1:8f:98:cd:98:
f9:2c:6f:c5:a1:36:8d:f7:75:bf:87:9d:ca:d2:c7:
b0:62:a4:d9:a2:84:b0:5d:26:7f:7b:3e:0c:c6:91:
71:1b:52:e6:c3:7d:b6:1f:42:9d:d1:9d:b9:97:3b:
54:b3:0c:d4:45:5c:c0:eb:4e:36:da:98:a6:b3:0c:
17:e0:ec:c0:42:bb:68:37:ee:85:d0:17:24:bf:b7:
7f:52:d7:09:2a:1b:22:24:db:42:08:46:37:7d:b3:
e1:30:29:c8:f0:0b:5c:92:29:98:47:f5:73:06:aa:
3c:e0:0d:28:17:09:d8:58:0f:ee:29:de:5c:8f:db:
6a:83:d7:64:fb:c9:de:7e:1c:18:b5:ba:f3:19:24:
06:c1:0f:7a:d8:72:71:b4:4a:58:69:86:11:20:24:
e4:34:af:43:a3:a6:c1:a0:e6:36:f9:09:7e:bd:81:
d6:d1:6b:4a:45:eb:4f:03:0e:1d:af:3b:4b:f9:43:
0c:ad:57:1a:fb:b4:5a:7d:ce:b2:d2:b9:bd:1f:fe:
b7:29:f5:90:98:1f:7d:e8:b4:cb:0f:7f:de:1e:2e:
61:13:c9:13:4c:db:ed:22:39:39:f8:fe:25:e4:b6:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A8:43:E1:77:BD:6E:0E:4A:43:82:19:D7:34:53:D8:C3:FE:B8:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FKhD4Xe9bg5KQ4IZ1zRT2MP-uIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.154.0/24
31.57.156.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e6:4e:5d:bf:31:37:6a:81:9c:94:43:4a:f0:2d:38:84:56:
27:58:fb:10:d2:5e:ca:01:f8:81:ac:fa:5a:15:b3:23:1c:c7:
fa:e1:85:56:07:ad:db:33:5d:a1:1e:5c:e0:59:38:50:cb:db:
23:3e:47:b9:06:f4:9f:0c:21:17:11:c2:3b:35:cc:63:30:91:
a6:89:f1:5e:2e:e6:a6:bd:62:34:67:ee:cc:bc:0b:37:32:a1:
01:d9:86:c4:90:fb:9e:be:0b:5c:15:d0:43:6b:a1:77:04:c9:
29:8c:0e:25:a4:3a:0c:6f:96:81:71:15:6a:b6:2b:a5:d4:12:
f2:d3:7e:8d:f7:86:fd:d9:c7:81:93:ea:31:61:69:30:49:8d:
45:5d:0f:e8:36:2d:63:b7:6c:56:02:26:a2:5f:a8:d3:b6:5a:
31:d9:9f:2b:6e:0f:fc:4f:06:36:57:58:6f:d4:bc:78:4c:44:
ba:be:7c:26:5a:15:43:81:58:b9:36:56:03:f1:6f:62:9d:43:
4d:23:b4:f6:19:20:c5:4b:40:3b:50:40:ed:ea:aa:4d:e6:4b:
b9:67:ba:5e:da:e1:d7:2b:f2:59:2d:af:ad:f0:87:3b:01:1a:
8a:ab:ba:f8:3d:31:ee:bc:5d:20:a3:e4:d2:ba:3a:26:77:db:
7c:0b:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:15:09 2025 by rpki-client