Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FoudVHENUylDtzE5cHP49PXO9XI.roa
File: FoudVHENUylDtzE5cHP49PXO9XI.roa (raw, json)
Hash identifier: 6Op8fJ2tNZVgW+6UgplrGT0IlBVb8BT6SQvo8lFxDTY=
Subject key identifier: 16:8B:9D:54:71:0D:53:29:43:B7:31:39:70:73:F8:F4:F5:CE:F5:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282355E26A557589365BEF91ECA17309
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FoudVHENUylDtzE5cHP49PXO9XI.roa
Signing time: Thu 02 Jan 2025 17:49:51 +0000
ROA not before: Thu 02 Jan 2025 17:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138156
IP address blocks: 31.56.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:55:e2:6a:55:75:89:36:5b:ef:91:ec:a1:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=168b9d54710d532943b731397073f8f4f5cef572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:a5:51:6b:a5:a8:63:48:ce:40:ec:67:3b:
f9:d8:3f:3d:f3:25:46:15:45:4d:9c:31:a7:2d:d5:
73:dc:ff:e1:b2:30:5e:95:68:98:79:96:9e:29:43:
2b:db:08:e9:31:5a:ed:44:d8:16:69:68:21:44:e8:
ff:bd:a7:03:85:0e:7b:74:a4:b5:df:9f:6b:75:22:
ac:6d:e9:de:1b:9d:0c:fb:6a:7a:32:86:76:38:ef:
51:dc:36:70:77:22:f2:6e:5e:9b:0b:0d:be:89:30:
e2:28:85:7b:49:0d:81:13:36:6a:40:df:7c:08:ef:
bd:30:a0:dc:0f:3a:d9:36:48:59:d5:ea:2d:95:9c:
1f:ac:9c:89:ec:9a:7a:63:23:79:a0:58:ad:d4:e9:
ee:fb:68:11:5b:91:6e:57:ec:60:a7:f6:ce:91:7f:
6c:54:74:e9:44:bd:6e:a6:5c:3c:a7:8f:f8:7d:3f:
cf:60:7a:62:ef:4d:9f:3a:0b:22:cf:49:b0:1e:7c:
cd:49:85:c3:59:92:5a:f1:46:63:45:25:8e:2b:8d:
f0:40:44:64:e6:ff:9c:2b:f4:5b:76:50:05:81:dc:
25:1e:af:09:eb:70:ba:89:7b:c7:05:d3:1d:68:2a:
51:ce:b5:06:59:7f:d5:fc:91:2b:d1:a7:c4:3d:1c:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:9D:54:71:0D:53:29:43:B7:31:39:70:73:F8:F4:F5:CE:F5:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FoudVHENUylDtzE5cHP49PXO9XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d6:18:ba:96:86:89:46:01:a3:8c:2c:67:43:2b:9e:89:4a:
57:c9:23:1f:8b:e9:0f:67:cc:5c:79:a9:9a:4b:65:2c:28:e4:
47:f4:3e:81:65:5b:33:a3:7f:dd:15:bd:f4:28:df:0e:f6:05:
a7:c9:7c:0d:d7:dd:b7:d0:d4:62:97:52:a8:1f:0e:eb:e0:c9:
2a:f2:7d:98:9b:50:ae:ac:1e:a0:8c:87:5d:84:85:c4:5e:aa:
09:fd:20:17:29:cb:72:f7:5e:50:e6:a3:5f:35:bc:7b:af:f1:
8d:32:aa:da:cf:1c:c7:4e:37:bb:28:7f:48:68:60:39:76:f0:
01:dd:c0:03:e5:43:ac:ff:da:d1:57:99:0d:14:21:2f:ba:9d:
2a:e5:99:2e:9f:93:21:f2:7d:d7:b7:1e:53:c8:a4:e5:d0:5e:
4b:07:b4:47:37:1b:9a:13:a1:9f:ad:0b:a8:a1:c7:30:d8:07:
27:b7:a2:bc:58:14:88:8e:4d:21:c6:85:6b:39:98:3d:e5:bd:
b5:5b:fc:f6:ed:91:d0:af:af:00:33:fd:b7:85:8c:b6:0d:7a:
ff:31:a4:74:46:6a:fc:4e:8f:e0:73:ff:c3:ac:88:3a:f3:2e:
e1:72:06:4d:35:96:f0:2c:90:01:fc:14:da:15:cc:a3:f9:61:
fb:d4:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:44 2025 by rpki-client