Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IUrC2gfAo-aiqKa0RhXnK9EC5eU.roa
File: IUrC2gfAo-aiqKa0RhXnK9EC5eU.roa (raw, json)
Hash identifier: ItmEdzNsG3/e5EvrxBK7CIShgsyDde58O/b6aNkp5do=
Subject key identifier: 21:4A:C2:DA:07:C0:A3:E6:A2:A8:A6:B4:46:15:E7:2B:D1:02:E5:E5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195192D222EB9549945D3E4534899B0A09F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IUrC2gfAo-aiqKa0RhXnK9EC5eU.roa
Signing time: Tue 18 Feb 2025 13:09:03 +0000
ROA not before: Tue 18 Feb 2025 13:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 31.57.204.0/24 maxlen: 24
31.58.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:2d:22:2e:b9:54:99:45:d3:e4:53:48:99:b0:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 13:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=214ac2da07c0a3e6a2a8a6b44615e72bd102e5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:c9:74:8c:b2:e9:03:77:50:0c:5f:0e:b4:
1b:16:53:d6:8a:6a:7e:2d:9a:09:64:3f:af:fd:92:
f7:71:e6:7b:2a:a9:96:06:32:86:cf:60:43:88:e9:
68:52:a6:ef:d2:df:6f:d6:2f:ea:d8:d1:72:62:fa:
8f:4f:fe:f5:47:ec:f0:54:0a:9e:35:2f:01:7e:5a:
38:d1:61:51:b4:f8:35:65:49:ce:c9:46:f3:ad:1a:
84:b4:bf:60:bb:a9:9b:31:47:f5:f1:b6:1e:bb:1f:
ef:3f:f5:2b:09:b8:d4:0f:8a:8a:6a:1b:7b:9a:ba:
9d:39:0d:87:b0:54:f0:23:f4:35:25:1c:08:3b:c1:
81:c8:42:40:63:cd:84:04:46:03:06:02:d7:20:cb:
c9:a4:55:c5:09:19:26:46:0f:cb:d0:64:39:32:86:
6f:73:b2:f7:87:dd:fb:c3:a2:42:1b:37:14:5e:67:
e4:c9:94:a6:66:00:4c:4c:38:a1:d6:f3:a9:f3:01:
77:97:8f:26:87:10:de:ee:03:bc:e5:dc:ca:86:7f:
d5:c0:bb:98:fd:b0:95:31:3b:49:c1:fd:3c:fe:db:
5b:7e:4b:55:21:ee:c5:fb:29:71:fe:f5:47:a2:b1:
08:3a:00:5d:09:a7:f5:9e:c8:1a:d4:8a:af:dd:2b:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:C2:DA:07:C0:A3:E6:A2:A8:A6:B4:46:15:E7:2B:D1:02:E5:E5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IUrC2gfAo-aiqKa0RhXnK9EC5eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.204.0/24
31.58.230.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fc:f6:f7:36:90:af:0c:81:f7:ab:67:bc:e7:d1:7a:6a:62:
d4:93:47:da:c3:ca:6e:22:09:e9:1d:a6:86:e6:40:14:86:c8:
de:99:a5:3b:8d:03:40:d4:2b:73:15:2f:bb:bb:5a:65:cb:78:
ba:67:e7:f3:b7:6c:93:23:e1:3f:86:c4:2c:e9:c4:c3:18:d6:
c7:2c:49:75:5c:9d:31:18:26:cd:b1:e9:59:c5:b3:27:f7:0c:
0b:3d:85:a1:73:b5:2a:76:fc:97:0b:2d:82:3b:4b:8f:ec:a4:
f6:87:1c:80:40:c4:a8:63:1d:39:1e:d4:c9:2a:d8:98:b5:17:
61:84:cc:e9:0d:8d:fc:56:51:ec:58:dd:32:30:66:d8:8f:21:
01:ee:84:7b:fa:1d:d3:ef:7f:cc:8a:cd:81:6a:d5:9a:8b:bf:
4e:42:84:59:7c:f9:0a:b3:d0:0a:25:30:8e:64:2d:6a:b1:9e:
9f:53:6e:0d:f7:55:aa:b1:a3:6a:4f:76:6d:dc:cb:bf:f3:a7:
b0:17:c1:ba:32:4b:68:51:7d:c6:13:b6:6a:9c:9a:0a:af:fa:
2f:76:17:81:17:22:3d:cf:52:e9:42:a9:5c:b7:50:3d:f0:d6:
95:c2:c5:5c:36:16:71:d0:b4:ef:61:ee:d3:76:6e:df:ac:9f:
52:41:fe:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUZLSIuuVSZRdPkU0iZsKCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjE4MTMwOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTRhYzJkYTA3YzBhM2U2YTJhOGE2YjQ0NjE1ZTcyYmQxMDJlNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwfJdIyy6QN3UAxfDrQbFlPWimp+
LZoJZD+v/ZL3ceZ7KqmWBjKGz2BDiOloUqbv0t9v1i/q2NFyYvqPT/71R+zwVAqe
NS8Bflo40WFRtPg1ZUnOyUbzrRqEtL9gu6mbMUf18bYeux/vP/UrCbjUD4qKaht7
mrqdOQ2HsFTwI/Q1JRwIO8GByEJAY82EBEYDBgLXIMvJpFXFCRkmRg/L0GQ5MoZv
c7L3h937w6JCGzcUXmfkyZSmZgBMTDih1vOp8wF3l48mhxDe7gO85dzKhn/VwLuY
/bCVMTtJwf08/ttbfktVIe7F+ylx/vVHorEIOgBdCaf1nsga1Iqv3Su3yQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCFKwtoHwKPmoqimtEYV5yvRAuXlMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSVVyQzJnZkFvLWFpcUthMFJoWG5LOUVDNWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHznMAwQA
HzrmMA0GCSqGSIb3DQEBCwUAA4IBAQBy/Pb3NpCvDIH3q2e859F6amLUk0faw8pu
IgnpHaaG5kAUhsjemaU7jQNA1CtzFS+7u1ply3i6Z+fzt2yTI+E/hsQs6cTDGNbH
LEl1XJ0xGCbNselZxbMn9wwLPYWhc7UqdvyXCy2CO0uP7KT2hxyAQMSoYx05HtTJ
KtiYtRdhhMzpDY38VlHsWN0yMGbYjyEB7oR7+h3T73/Mis2BatWai79OQoRZfPkK
s9AKJTCOZC1qsZ6fU24N91WqsaNqT3Zt3Mu/86ewF8G6MktoUX3GE7ZqnJoKr/ov
dheBFyI9z1LpQqlct1A98NaVwsVcNhZx0LTvYe7Tdm7frJ9SQf4/
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:01 2025 by rpki-client