Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JNTKMIUneP-wCrSCAJarvYazX-Q.roa
File: JNTKMIUneP-wCrSCAJarvYazX-Q.roa (raw, json)
Hash identifier: 7z0XWqSGc5isB5kDhfHo3lw4RN2Y70ryLzkdD6tKQd0=
Subject key identifier: 24:D4:CA:30:85:27:78:FF:B0:0A:B4:82:00:96:AB:BD:86:B3:5F:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823416CCC96AE68DD424B770C5875B8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JNTKMIUneP-wCrSCAJarvYazX-Q.roa
Signing time: Thu 02 Jan 2025 17:49:46 +0000
ROA not before: Thu 02 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 24
31.57.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:41:6c:cc:96:ae:68:dd:42:4b:77:0c:58:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d4ca30852778ffb00ab4820096abbd86b35fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:e8:a0:3d:cf:1d:60:2c:61:e8:21:b7:11:
6d:bb:9f:d4:76:7c:9f:eb:4d:1f:73:ba:b2:50:2c:
71:e0:a1:6b:8b:02:d6:f6:5f:2b:c3:bc:3b:27:10:
17:b2:c7:38:77:d4:41:b4:3e:fb:2e:83:3f:b7:fd:
d4:28:67:39:5b:0d:cf:6f:da:84:91:fb:db:27:cb:
3a:ce:7a:28:b1:89:4c:55:2f:ee:06:38:a1:27:f9:
cd:c8:c0:3a:fb:c0:fe:aa:a1:5a:db:46:3f:2d:08:
73:57:3f:89:7f:6e:86:0b:35:05:4d:9d:07:ff:58:
67:e8:bd:8a:0f:41:f4:1e:31:a1:be:aa:8b:fe:61:
2d:43:dd:08:31:99:8b:bd:3d:dd:b8:54:d2:e7:5c:
86:d1:ce:f5:83:cd:66:75:0c:f3:2d:85:9f:6e:01:
14:1f:a0:68:4e:7c:1d:80:14:17:03:f6:ef:04:d6:
10:1c:95:a6:b2:81:b8:b4:a1:ba:bc:72:07:22:25:
8a:bf:5e:7a:b2:57:7b:e0:eb:1b:57:04:95:84:09:
13:78:27:f2:2a:66:e7:9a:e6:df:16:b9:9b:39:c4:
98:52:fc:1d:b2:96:0e:7c:1e:2f:d7:c8:ae:93:6d:
ea:95:4d:bc:15:4a:25:07:00:f9:d5:aa:da:cb:e3:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:CA:30:85:27:78:FF:B0:0A:B4:82:00:96:AB:BD:86:B3:5F:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JNTKMIUneP-wCrSCAJarvYazX-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/22
31.57.36.0/22
31.57.46.0/23
Signature Algorithm: sha256WithRSAEncryption
20:91:03:e3:dc:5c:cc:5c:eb:f4:aa:72:6f:5a:ab:90:71:d1:
3f:61:6c:6c:ca:cc:1b:5d:c7:cc:30:9f:18:9f:d9:59:88:c7:
c3:b0:f6:e3:37:aa:73:cb:d2:cf:9e:d5:04:13:aa:1e:e5:cf:
d3:d8:7b:b3:15:95:a8:db:4b:e2:55:a2:96:ab:31:eb:44:ce:
73:8d:c6:98:fa:62:30:b9:4f:b0:ee:d9:97:86:80:79:cf:ca:
7f:fe:10:b4:bf:48:92:5e:73:78:4a:63:1c:e4:96:3f:89:91:
fc:33:33:41:1a:6b:f4:d3:bd:c4:e3:56:2b:a1:5f:ba:f5:3e:
54:04:c5:d8:80:cf:40:cc:16:60:bf:fe:dd:b6:e2:3c:a4:21:
11:c4:13:26:c7:8e:c7:63:a8:07:5b:4c:0d:a6:bf:7d:45:e3:
8c:f6:11:e0:4a:77:41:8e:a2:10:9a:c2:2e:c8:ae:91:72:dd:
dc:49:c4:62:aa:2c:14:89:8a:02:50:ab:67:2a:08:2f:67:c6:
c7:71:7d:1a:a1:d2:48:17:96:8f:f5:00:fe:9d:d0:dc:c4:5b:
b6:6b:a9:ee:30:34:41:c2:b5:19:4e:09:5b:15:66:f5:62:1f:
d0:e7:2c:c9:f7:42:a1:73:32:cb:fc:a1:08:09:f9:56:71:a2:
61:90:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:12:00 2025 by rpki-client