Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L7_NwnkuFjDJ-1iy23gyv43YRF0.roa
File: L7_NwnkuFjDJ-1iy23gyv43YRF0.roa (raw, json)
Hash identifier: jrSpc1m3OJHug+U++/1+lOtsKcrSaOwqhiRYUj+E2T4=
Subject key identifier: 2F:BF:CD:C2:79:2E:16:30:C9:FB:58:B2:DB:78:32:BF:8D:D8:44:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195DD099FF49A95A0076705B3F7B3797840
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L7_NwnkuFjDJ-1iy23gyv43YRF0.roa
Signing time: Fri 28 Mar 2025 13:55:50 +0000
ROA not before: Fri 28 Mar 2025 13:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 31.56.141.0/24 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
31.59.224.0/24 maxlen: 24
31.59.225.0/24 maxlen: 24
31.59.226.0/24 maxlen: 24
31.59.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:09:9f:f4:9a:95:a0:07:67:05:b3:f7:b3:79:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 28 13:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fbfcdc2792e1630c9fb58b2db7832bf8dd8445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:26:ef:d7:1e:1b:35:0c:d4:bb:81:1b:49:
1f:c1:d2:32:65:3c:0b:46:cd:03:23:1a:c3:2c:8e:
f1:78:22:34:59:af:a3:cc:f6:fb:83:15:77:29:41:
e3:55:4d:9d:70:68:dc:35:95:f5:19:d0:5f:58:2a:
a3:2e:8c:fc:a8:32:41:e7:36:44:1f:08:ad:93:b5:
fa:f7:eb:0b:88:c5:03:23:51:05:b9:da:d0:de:45:
b4:ca:37:92:8d:b3:ee:a9:23:06:45:42:9f:16:c3:
2e:e8:cb:b8:ce:0a:d6:0e:b9:42:43:57:e5:8e:d8:
c4:61:03:57:8e:05:b5:3d:be:0b:9f:7f:61:59:d0:
8c:f0:c1:1d:08:91:fb:9d:9b:4e:34:d8:c8:ef:8b:
d4:91:e4:4f:02:61:72:71:25:a1:55:41:41:94:f8:
79:50:8c:a0:5a:f2:9a:af:01:9d:4a:27:d7:59:f5:
e1:35:80:c7:b1:37:fd:5a:a0:6b:75:3e:27:6d:13:
3f:7e:d6:ff:40:09:0d:2f:82:86:bd:08:56:9e:5b:
e4:c3:93:2e:a8:f3:9c:6d:42:8a:d9:ea:49:bf:c3:
2d:3b:08:ca:61:08:b8:7a:83:1b:4a:bf:25:1d:0b:
06:79:85:a9:f2:67:cd:12:ec:b3:8d:0a:f3:5c:ff:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BF:CD:C2:79:2E:16:30:C9:FB:58:B2:DB:78:32:BF:8D:D8:44:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L7_NwnkuFjDJ-1iy23gyv43YRF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
31.57.155.0/24
31.57.160.0/24
31.57.226.0/24
31.59.99.0/24
31.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f8:bc:78:9a:b5:2d:c5:92:23:c0:a4:4f:dd:30:d7:82:a4:
63:af:6a:a1:67:3b:72:5b:c4:ab:a6:eb:31:43:54:ff:e0:6d:
6d:37:ca:4d:60:cf:e6:8a:90:47:38:17:18:91:f8:18:5c:4f:
fe:1d:d8:19:fd:49:6d:92:08:65:76:2a:48:ff:77:00:b4:c3:
bd:7c:f0:a2:2c:25:37:cd:15:98:2f:ed:07:ea:e3:2c:71:ce:
08:e9:d8:2a:97:e1:22:2d:96:95:92:a7:f2:b2:c6:c3:43:4a:
1a:7d:e7:ba:73:de:ca:02:2c:d3:4a:08:52:98:33:e6:2d:c4:
1c:cf:ce:92:2b:8e:7d:40:37:b0:52:54:1c:1c:90:08:0d:44:
7f:b3:59:94:0f:da:96:82:aa:3a:2e:de:73:e3:21:e0:74:1b:
d4:5c:a1:b1:d9:fc:c6:d5:d7:ed:87:6d:61:03:8b:00:c8:f9:
87:04:3b:00:91:0b:5d:46:51:cb:ff:ef:56:46:84:0a:f5:38:
96:97:d4:c0:b1:1e:8c:25:5a:14:6d:0f:17:14:c2:ed:9f:25:
1b:94:eb:9f:04:09:9e:be:03:0f:30:90:4a:3e:69:7a:cf:6a:
f1:b0:2c:83:db:70:85:21:ff:7d:34:36:67:42:de:29:b4:83:
ce:e6:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:13 2025 by rpki-client