Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JjJE7DVp1ATUqGVBy2lNm9izFLc.roa
File: JjJE7DVp1ATUqGVBy2lNm9izFLc.roa (raw, json)
Hash identifier: ZFbLHEs6rBABrXx2o+1VcJ0Y7jpodhrvGhBPqxGjOHc=
Subject key identifier: 26:32:44:EC:35:69:D4:04:D4:A8:65:41:CB:69:4D:9B:D8:B3:14:B7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195DBD083A4CBD3A8B70FE65BF55E1D0CC0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JjJE7DVp1ATUqGVBy2lNm9izFLc.roa
Signing time: Fri 28 Mar 2025 08:13:50 +0000
ROA not before: Fri 28 Mar 2025 08:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:d0:83:a4:cb:d3:a8:b7:0f:e6:5b:f5:5e:1d:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 28 08:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=263244ec3569d404d4a86541cb694d9bd8b314b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:e1:2e:6a:0d:fe:62:4c:66:b5:5f:8a:77:
09:23:fa:10:f2:26:41:8f:e8:78:a2:d6:a8:82:3e:
66:a5:f2:ca:ac:c6:ce:37:61:d8:38:b5:08:49:50:
aa:d3:a3:74:37:0c:91:7c:17:1b:04:2c:2c:08:5f:
74:6d:04:1a:f3:bc:ef:5e:22:ff:ad:8f:ed:b5:ca:
48:d2:ce:af:89:9c:43:73:25:9a:0a:ae:f1:0b:78:
b4:1c:db:f6:cc:4e:ea:d8:ed:94:e1:5d:cf:36:87:
2b:5f:a5:3f:38:d2:48:ba:67:fd:f1:df:93:7d:a7:
75:42:88:2b:7b:8d:be:96:96:af:f4:5e:be:25:29:
34:2c:59:e9:66:ce:08:80:b5:c1:f3:03:83:e6:fa:
57:74:94:cc:f8:76:c6:1f:2d:4d:91:c2:c8:ba:e2:
f3:47:f7:f8:57:c6:7b:f5:e5:43:d2:f5:54:55:a0:
4a:26:7b:6c:3e:3b:56:73:27:89:63:b9:8c:b9:d6:
9d:71:f5:f0:ff:04:99:fc:73:aa:0c:b6:56:73:3f:
1a:ef:d6:c1:b0:47:b9:a0:5f:30:22:62:16:51:b2:
32:b9:fe:b1:04:d1:8a:4c:0d:f1:48:c7:af:28:17:
56:97:ac:f5:d9:03:af:83:93:cb:e9:72:74:a5:0c:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:44:EC:35:69:D4:04:D4:A8:65:41:CB:69:4D:9B:D8:B3:14:B7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JjJE7DVp1ATUqGVBy2lNm9izFLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.199.255
31.56.208.0-31.56.239.255
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
31.59.121.0/24
31.59.196.0-31.59.215.255
31.59.220.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:67:4d:95:d0:84:c7:f4:01:65:2e:94:59:38:45:08:bd:94:
6f:33:60:f7:b7:98:a9:87:99:a1:40:f3:60:3b:50:12:57:2b:
1b:75:49:df:23:94:87:d1:57:d9:2f:9b:ff:45:73:ad:ce:82:
be:94:00:7e:15:c8:80:f3:22:d4:67:ff:a4:b4:ed:2f:20:cb:
3d:c2:2f:9a:d0:13:1b:7f:96:5d:20:f8:6f:0a:60:37:e2:e7:
d0:b1:fa:2c:de:c5:18:a8:5e:88:76:e4:73:48:10:58:cb:e3:
13:95:e9:45:44:29:92:ab:5b:6b:1c:5f:3d:71:9b:a3:f1:8b:
da:80:1a:58:0a:d9:22:0e:f9:45:c7:4e:db:73:63:ec:82:71:
49:98:a6:66:07:d6:18:33:ad:71:f6:fb:e7:dc:68:2f:5c:7e:
67:9d:95:85:de:1e:c7:1f:37:68:b7:09:e9:30:06:da:cf:df:
d0:2c:d5:f9:b8:af:ac:3b:d2:5b:88:eb:66:83:d8:0e:b2:0d:
a4:24:d5:38:db:d7:d7:eb:9e:26:00:72:9d:6e:68:9c:09:1f:
d9:a6:06:43:eb:de:29:8a:90:a1:23:da:ea:c3:95:70:9e:5f:
a4:17:eb:26:92:27:60:06:49:d1:de:d4:29:66:04:b8:92:39:
62:b2:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client