Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IurSVbVDdwDBL_HAwIxTP4NjF7I.roa
File: IurSVbVDdwDBL_HAwIxTP4NjF7I.roa (raw, json)
Hash identifier: PZsUze8cn4bnvdEM59fkdeUBEXQ0cDEo1iDjpQHlgv4=
Subject key identifier: 22:EA:D2:55:B5:43:77:00:C1:2F:F1:C0:C0:8C:53:3F:83:63:17:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019460CA812FD19E4AF4E163093F6A0D88E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IurSVbVDdwDBL_HAwIxTP4NjF7I.roa
Signing time: Mon 13 Jan 2025 17:51:11 +0000
ROA not before: Mon 13 Jan 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.226.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:ca:81:2f:d1:9e:4a:f4:e1:63:09:3f:6a:0d:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 13 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22ead255b5437700c12ff1c0c08c533f836317b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:4d:54:8b:78:54:6e:81:c0:6c:63:09:db:
a7:d5:64:18:06:dd:b8:b0:9b:41:75:74:43:c5:fd:
4f:f3:b8:41:e8:92:d4:08:ee:4c:77:c7:4b:79:85:
3e:2a:cd:40:a0:a5:72:0e:92:42:88:cc:62:65:79:
d3:1d:a1:6c:76:a7:38:2c:5f:c1:e8:07:ba:4f:56:
bc:29:d2:be:7a:ce:0c:90:ef:17:a8:4b:13:2f:8e:
89:3c:1b:60:5e:da:1d:8c:60:e5:f1:79:50:0a:78:
f2:b8:0e:e3:a6:f3:a1:e1:12:27:ca:87:5c:0c:f9:
28:16:39:9c:eb:f3:6b:5d:9d:1d:a4:62:5c:3e:17:
db:0f:14:ed:18:0f:19:5f:68:8c:e3:71:ed:5b:95:
e3:fc:2c:f4:51:5b:9b:eb:c8:45:3b:a6:b1:84:57:
c9:c0:26:b5:41:0b:cd:16:53:26:c3:27:72:ef:c1:
c0:41:38:4f:02:21:86:25:cb:66:ea:1d:35:55:63:
1d:a6:74:5f:a7:fc:20:a3:e8:3b:0a:94:af:81:98:
12:2d:6b:46:65:d9:33:8f:59:3e:d6:af:0a:8b:1d:
af:80:11:7e:9a:31:05:f0:21:db:b5:48:d3:0c:82:
de:0d:7b:f6:70:67:f5:79:d2:8d:69:96:34:69:aa:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:D2:55:B5:43:77:00:C1:2F:F1:C0:C0:8C:53:3F:83:63:17:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IurSVbVDdwDBL_HAwIxTP4NjF7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.25.0/24
31.56.27.0-31.56.32.255
31.56.34.0/24
31.56.36.0/24
31.56.38.0/24
31.56.40.0/24
31.56.44.0/24
31.56.48.0/23
31.56.58.0/24
31.56.61.0/24
31.56.68.0/24
31.56.70.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.56.112.0/23
31.57.105.0-31.57.111.255
31.57.119.0/24
31.57.168.0/22
31.57.226.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cd:03:ad:e0:c4:c8:67:1e:43:41:72:1f:d1:54:86:2b:3c:
7f:b9:78:61:ed:42:e7:5a:1d:46:87:5b:8c:1a:97:ea:45:58:
82:cc:00:58:e4:4c:b5:16:fc:a4:98:3f:88:19:d7:d7:b4:61:
ff:2d:1b:83:6e:d5:9d:85:99:93:56:ef:c3:d7:d9:c1:d2:99:
86:e5:1e:58:55:0b:aa:32:54:f1:73:0b:17:9d:84:4c:20:5d:
13:fe:22:3d:a8:b9:a4:9f:80:0a:b2:6d:8c:62:8e:26:47:f5:
8a:59:32:c6:a6:b7:e2:aa:0d:dc:a7:c8:58:9b:17:27:2d:0b:
d4:d3:3e:a8:93:fb:28:08:40:42:ba:2e:04:cb:13:fc:83:c8:
18:5f:cb:78:cc:ba:60:32:e4:00:07:09:4d:04:f4:e6:61:eb:
7b:71:ac:d4:3f:4a:06:b0:f0:5f:44:52:39:b3:71:12:2d:39:
6a:d9:04:ff:e0:7b:cf:c8:36:74:37:0b:fa:12:28:55:93:3d:
59:1e:e0:88:02:fc:7c:d6:ae:61:9e:22:4c:73:2c:b1:79:e8:
11:11:2a:35:16:af:9a:c6:fd:50:cc:4d:be:6d:47:ff:0e:45:
4e:28:a9:2e:6b:6a:8b:e7:42:07:af:05:eb:c0:6b:97:15:8c:
08:73:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:55 2025 by rpki-client