Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fw5IY6cL2aBO5lE-HEGuo9KQNGk.roa
File: Fw5IY6cL2aBO5lE-HEGuo9KQNGk.roa (raw, json)
Hash identifier: AerhmfVdRDpLkq8M1i4H5uAZrc5wWKRuGbMtHhOsUWg=
Subject key identifier: 17:0E:48:63:A7:0B:D9:A0:4E:E6:51:3E:1C:41:AE:A3:D2:90:34:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282384B939C9A66FC140361D8B103E5A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fw5IY6cL2aBO5lE-HEGuo9KQNGk.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 263702
IP address blocks: 31.57.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:84:b9:39:c9:a6:6f:c1:40:36:1d:8b:10:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=170e4863a70bd9a04ee6513e1c41aea3d2903469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:69:a0:26:37:37:14:db:33:b8:80:1a:26:
ce:d7:75:2d:46:c5:91:58:aa:e5:89:d2:cf:d2:b4:
50:a7:4a:99:38:85:e0:27:90:e8:f8:96:22:2b:8e:
ad:d8:7d:2e:69:b8:cf:ea:2d:c5:f5:46:b9:00:2c:
73:ab:5a:18:d4:5a:fb:bb:e2:dc:b3:2a:e8:4e:d0:
5b:62:cc:da:e0:50:6b:f2:b5:c4:a8:da:97:c2:57:
b0:cf:77:60:bb:50:b5:62:e5:2d:f4:34:1c:f6:85:
59:2d:ae:4a:81:05:2c:66:14:89:1b:11:bb:eb:ec:
ed:57:c3:8e:99:eb:5c:7a:45:a6:fa:74:82:43:2a:
03:e2:03:0b:a0:7b:02:1b:f3:80:64:e4:7c:e9:0c:
48:43:d5:79:74:6d:a9:a3:08:ce:ee:9a:c2:7e:f5:
85:1b:d4:24:9d:bd:56:97:ec:c5:3b:ab:64:32:76:
be:3e:eb:20:ad:68:86:9e:c5:a4:a5:e4:fa:16:78:
cd:b4:36:2f:69:9c:aa:d7:bc:67:e6:12:99:d7:b9:
43:c3:31:f2:24:79:f8:ab:a6:8b:05:c8:4b:ad:31:
bc:a0:19:78:d0:92:fe:36:85:a1:cd:fb:0f:52:0e:
ea:46:6c:aa:fd:d3:21:04:78:32:d3:cd:ce:14:3e:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:48:63:A7:0B:D9:A0:4E:E6:51:3E:1C:41:AE:A3:D2:90:34:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fw5IY6cL2aBO5lE-HEGuo9KQNGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.145.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a8:5e:5e:ac:8a:cf:bf:6f:da:84:c8:ec:9e:f7:d2:64:91:
83:66:a0:62:79:0e:71:59:d0:8f:71:e6:60:82:56:1d:9b:14:
ed:0b:fc:04:8a:42:a7:40:9f:b1:26:96:6c:51:a6:88:02:7e:
9c:3e:c0:51:4d:21:89:34:94:f5:bd:ab:a7:26:2d:2d:21:e7:
5f:74:da:29:30:3e:0e:7c:bb:fa:cd:fc:0b:84:25:39:e6:e2:
56:08:13:a1:0c:e8:86:06:c9:35:94:9c:bc:b0:43:24:26:9e:
50:c0:53:c0:78:16:42:9a:b6:c3:5e:6a:b4:13:04:a9:72:6e:
8f:fe:54:ab:ba:e6:a4:1e:a6:88:10:a9:2e:77:0e:41:aa:2f:
31:3e:14:a7:fc:8e:8d:9c:2e:35:c9:73:dc:d7:8b:77:3c:4f:
40:35:45:25:aa:78:cd:87:ed:3e:c4:71:37:cd:5f:3d:bc:b5:
f9:68:ca:87:25:a9:40:b5:e6:be:97:52:cd:a6:5e:6b:d2:0b:
ed:45:a8:85:91:7f:22:93:ac:43:cc:29:c7:3f:53:dc:8c:f2:
06:43:89:a6:ac:5c:45:b7:79:5f:ee:95:33:f5:fa:b0:66:50:
91:67:6e:37:ca:33:8e:11:3b:4f:9d:6c:03:90:02:2f:9b:aa:
fb:54:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:53:30 2025 by rpki-client