Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAbYUpdDaKT3H_0T_kRyN23hUog.roa
File: JAbYUpdDaKT3H_0T_kRyN23hUog.roa (raw, json)
Hash identifier: Sxy5Yqc5ORC+c8CspH8u6I3wbUqzWubbr2Z51QM1VrA=
Subject key identifier: 24:06:D8:52:97:43:68:A4:F7:1F:FD:13:FE:44:72:37:6D:E1:52:88
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959434E7A173D3561583957C05773C26D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAbYUpdDaKT3H_0T_kRyN23hUog.roa
Signing time: Fri 14 Mar 2025 10:30:49 +0000
ROA not before: Fri 14 Mar 2025 10:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60431
IP address blocks: 31.58.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:34:e7:a1:73:d3:56:15:83:95:7c:05:77:3c:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 14 10:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2406d852974368a4f71ffd13fe4472376de15288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:cd:f4:24:f5:65:9b:36:f2:11:a2:aa:04:
c0:fd:3b:0c:60:c5:6c:de:77:f0:e1:cf:04:d3:8a:
12:d9:eb:8f:b2:04:5c:e3:03:44:34:6f:24:fd:73:
66:17:2f:00:68:98:e6:b4:92:cb:a5:79:ef:fb:87:
98:0f:88:0b:19:36:86:f9:05:31:56:6c:7b:71:0d:
d5:23:e7:a4:08:6f:35:92:65:75:de:92:62:e3:c6:
b7:52:22:af:23:0f:0d:66:a7:52:63:81:69:7b:0b:
b6:8e:b5:14:d9:5f:31:19:c8:ba:09:64:cf:72:7c:
dd:5c:fe:be:f9:5c:57:86:9e:fb:4e:51:26:84:b0:
96:c1:a4:c4:87:b6:02:78:82:71:ca:60:69:3f:f3:
b7:90:3c:7f:37:9d:8d:f8:c7:a3:fd:13:84:9f:29:
13:4f:a5:6d:fc:03:d6:0b:6d:f0:f2:ab:52:c0:bb:
fe:c6:4e:89:8c:fe:87:b9:6d:5d:71:02:ad:7e:a5:
83:ae:a3:c5:76:3e:5c:e2:f6:e9:b0:9d:5a:50:cd:
0d:5f:6d:59:c1:0c:c6:40:16:d7:83:5b:11:96:56:
39:a8:a6:d7:18:23:70:d2:72:67:9b:9b:e3:95:bb:
41:98:9d:3b:a9:84:55:33:20:d8:72:a1:64:1f:8a:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:D8:52:97:43:68:A4:F7:1F:FD:13:FE:44:72:37:6D:E1:52:88
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAbYUpdDaKT3H_0T_kRyN23hUog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:74:1f:bf:60:29:0b:b1:cf:93:33:f9:dc:33:2a:ed:cf:ba:
f0:eb:a2:04:a6:d4:29:2d:21:41:4c:f5:02:62:35:c1:27:45:
d0:1f:ad:53:3a:32:76:48:82:9d:10:e7:9e:f2:b1:bb:00:f8:
d6:22:3a:db:4d:70:f5:1e:3d:f3:39:52:9a:4d:4c:24:3f:b3:
f6:d5:8d:90:da:fd:04:0b:be:5d:5a:3e:6f:22:73:ec:e5:52:
d2:18:65:2e:b6:34:30:e4:49:2b:e4:c2:3f:7d:01:58:68:94:
cb:5c:d4:11:40:43:14:58:31:30:68:7d:30:96:47:cd:f4:9f:
b2:a7:d0:06:24:81:48:d4:21:cb:6e:dd:7e:7d:aa:99:7c:20:
77:77:22:68:b1:98:4e:d1:82:02:8c:23:65:1e:4f:e5:73:a7:
d6:f7:7f:46:4f:94:d6:e2:3b:8e:4b:3f:c8:98:16:1b:b4:da:
d4:0c:5f:8e:ef:da:33:cc:39:2b:4b:3d:d1:95:0a:73:b4:6d:
60:31:15:d0:f1:81:28:cf:be:20:12:85:7a:06:92:67:52:1b:
56:c3:7c:b1:83:92:7c:ff:8a:0d:07:b5:b5:8b:7c:44:cb:f2:
49:86:a6:98:f4:10:8b:5d:c7:8f:21:8b:ba:d0:36:f2:af:2c:
ec:91:10:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWUNOehc9NWFYOVfAV3PCbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE0MTAzMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDA2ZDg1Mjk3NDM2OGE0ZjcxZmZkMTNmZTQ0NzIzNzZkZTE1Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtObN9CT1ZZs28hGiqgTA/TsMYMVs
3nfw4c8E04oS2euPsgRc4wNENG8k/XNmFy8AaJjmtJLLpXnv+4eYD4gLGTaG+QUx
Vmx7cQ3VI+ekCG81kmV13pJi48a3UiKvIw8NZqdSY4Fpewu2jrUU2V8xGci6CWTP
cnzdXP6++VxXhp77TlEmhLCWwaTEh7YCeIJxymBpP/O3kDx/N52N+Mej/ROEnykT
T6Vt/APWC23w8qtSwLv+xk6JjP6HuW1dcQKtfqWDrqPFdj5c4vbpsJ1aUM0NX21Z
wQzGQBbXg1sRllY5qKbXGCNw0nJnm5vjlbtBmJ07qYRVMyDYcqFkH4oOewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQG2FKXQ2ik9x/9E/5Ecjdt4VKIMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSkFiWVVwZERhS1QzSF8wVF9rUnlOMjNoVW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpGMA0G
CSqGSIb3DQEBCwUAA4IBAQAadB+/YCkLsc+TM/ncMyrtz7rw66IEptQpLSFBTPUC
YjXBJ0XQH61TOjJ2SIKdEOee8rG7APjWIjrbTXD1Hj3zOVKaTUwkP7P21Y2Q2v0E
C75dWj5vInPs5VLSGGUutjQw5Ekr5MI/fQFYaJTLXNQRQEMUWDEwaH0wlkfN9J+y
p9AGJIFI1CHLbt1+faqZfCB3dyJosZhO0YICjCNlHk/lc6fW939GT5TW4juOSz/I
mBYbtNrUDF+O79ozzDkrSz3RlQpztG1gMRXQ8YEoz74gEoV6BpJnUhtWw3yxg5J8
/4oNB7W1i3xEy/JJhqaY9BCLXcePIYu60DbyryzskRDx
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:14:14 2025 by rpki-client