Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPqqwi5Xyvf9CvektRxPtvlYLKI.roa
File: GPqqwi5Xyvf9CvektRxPtvlYLKI.roa (raw, json)
Hash identifier: N/7HU79PNfO/zMMdGLs9soaUt6F+bIwgNWwp1Wn0bdE=
Subject key identifier: 18:FA:AA:C2:2E:57:CA:F7:FD:0A:F7:A4:B5:1C:4F:B6:F9:58:2C:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282333D26204CF9FC1299448A5B3CB6E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPqqwi5Xyvf9CvektRxPtvlYLKI.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:33:d2:62:04:cf:9f:c1:29:94:48:a5:b3:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18faaac22e57caf7fd0af7a4b51c4fb6f9582ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:8d:8b:12:98:b9:a2:e0:be:ff:08:a4:5e:
7a:bc:38:d0:89:30:c1:ec:42:6c:bf:74:4d:15:4c:
2c:3a:39:b8:71:ac:35:b5:1e:bc:76:54:21:4a:ea:
94:ff:0a:dc:d3:b6:c1:e3:87:01:84:20:6f:84:04:
75:8e:4f:17:92:4b:8c:3c:67:7e:59:10:20:1c:a5:
28:d4:6d:ac:85:91:ac:78:54:e6:e2:c5:c5:67:61:
da:67:8d:19:c4:22:13:3d:da:c4:b1:75:aa:2f:68:
c5:96:a8:3f:8a:01:cb:57:1f:ca:ce:a6:59:77:fd:
3b:d7:03:e4:65:ce:f2:a9:2e:cf:c3:f9:fd:69:0b:
d8:ae:5e:c8:b5:4d:86:13:71:c9:97:8e:6a:6d:89:
3f:5a:03:b2:19:47:3c:b4:4d:f0:ac:a9:76:36:7c:
f5:9b:f7:fb:aa:be:96:11:24:74:8f:34:4f:7a:ac:
dc:d6:ac:f0:8d:8c:6f:5e:2c:05:a8:8b:64:29:39:
87:2c:39:b0:28:00:ab:9e:fa:36:16:dd:41:59:ce:
9e:0b:ac:47:2d:b6:b4:c2:e3:e8:1c:8c:a5:b0:16:
01:69:6a:4e:64:fe:a0:f6:03:2b:a9:55:9a:a0:4c:
05:df:bd:94:8c:c7:48:93:0d:c0:08:14:4a:4b:4a:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:AA:C2:2E:57:CA:F7:FD:0A:F7:A4:B5:1C:4F:B6:F9:58:2C:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPqqwi5Xyvf9CvektRxPtvlYLKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c3:c6:82:e4:65:f5:81:07:9a:3b:f6:16:2b:7b:a1:26:67:
ac:c6:16:6f:bd:f5:91:20:d5:9a:ed:ad:e3:06:6b:54:36:c5:
80:67:1f:c3:4d:99:3b:3f:31:fb:c6:ed:7f:36:b7:37:72:99:
09:12:c6:41:7d:86:cd:2c:25:d5:03:c6:53:a3:dc:bb:b7:85:
6e:09:63:ed:17:af:12:38:91:00:56:89:98:df:c3:e0:d1:5b:
b0:87:85:59:81:6e:b0:7a:63:b2:f5:d3:2d:ab:d7:83:37:ee:
d1:29:ed:47:22:10:8d:a5:05:76:d8:59:c6:49:fd:7c:af:4d:
63:30:7b:2b:89:7d:bc:f1:71:8c:4c:a7:00:f5:8e:fc:f0:79:
38:6c:90:5d:c9:a9:42:a8:17:6f:ae:7e:62:23:10:a6:10:c9:
dc:20:b3:ac:34:91:50:d9:f0:e2:d3:94:bc:0d:ab:3c:e6:7d:
02:60:21:74:17:e9:7a:b9:c5:7d:b1:c6:53:e3:ea:40:2d:81:
a6:d2:b6:0d:19:25:7e:be:52:c2:e9:19:5c:be:82:6c:06:27:
72:ad:05:27:a7:69:89:79:66:b8:7b:eb:1a:2a:d8:53:87:a7:
87:3c:45:20:87:48:4c:0f:f6:00:9c:58:4e:d8:0d:f7:8e:8e:
21:cf:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:47 2025 by rpki-client