Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M1OMlP0pr2EflUdYRW9xWO482Z4.roa
File: M1OMlP0pr2EflUdYRW9xWO482Z4.roa (raw, json)
Hash identifier: +ypGFHgB1OvKGOiZVrfUvi1TiKvczc5TnBHxcv3D0/U=
Subject key identifier: 33:53:8C:94:FD:29:AF:61:1F:95:47:58:45:6F:71:58:EE:3C:D9:9E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FF608526659BFFA484ECDCDD96242834
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M1OMlP0pr2EflUdYRW9xWO482Z4.roa
Signing time: Fri 04 Apr 2025 05:57:50 +0000
ROA not before: Fri 04 Apr 2025 05:57:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:60:85:26:65:9b:ff:a4:84:ec:dc:dd:96:24:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 4 05:57:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33538c94fd29af611f954758456f7158ee3cd99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:74:e0:aa:3a:46:b4:aa:1a:95:0b:c4:bd:
d7:2f:a4:43:8e:61:c8:81:3d:c7:8a:69:28:53:05:
9b:ab:b6:0c:e9:d1:e4:fd:61:6d:ef:c0:28:3f:22:
c9:61:b9:ba:53:b0:28:8f:b4:a6:c9:88:1d:83:7c:
9d:29:e2:f5:45:8d:8b:20:5b:06:f9:9a:d0:1a:2b:
3e:c7:2d:13:ea:89:af:45:b0:2d:96:ed:79:9c:f9:
0d:c6:a7:f9:d6:ea:dd:12:6e:7f:43:ab:a7:da:5c:
b0:a0:c8:41:ea:19:f6:da:a6:2c:61:46:0e:46:98:
df:94:b5:db:d4:9d:6d:5f:f1:a9:8e:b2:a7:35:63:
2d:26:63:e7:5c:2f:3d:b5:2c:5a:5e:23:93:78:67:
3c:2f:a3:d7:51:22:d8:d4:4f:a4:e9:44:16:ab:9b:
6f:63:6f:0b:b7:7f:79:6b:08:a6:d1:03:c7:22:cc:
52:f4:37:fa:cf:b3:b4:c5:01:f1:e6:a7:2b:7d:1a:
ff:3b:1f:b3:32:c7:b9:25:57:6d:0a:67:82:92:c0:
0e:18:0a:6f:e5:68:92:09:03:98:55:0e:3b:5d:f1:
c1:5e:cc:85:2b:a1:7c:28:50:bc:c2:e4:95:9c:8c:
5e:d7:4b:c5:d1:e4:0d:08:5a:9e:1c:0d:26:41:63:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:8C:94:FD:29:AF:61:1F:95:47:58:45:6F:71:58:EE:3C:D9:9E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M1OMlP0pr2EflUdYRW9xWO482Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.57.104.0/24
31.57.188.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
71:b6:78:fd:96:a6:af:41:5d:1f:4a:ea:7d:67:7e:66:18:0f:
7d:fc:33:2a:59:ec:6e:28:da:fc:4d:6b:f3:37:91:ee:0d:c5:
8d:80:f7:df:a6:23:72:6e:e5:39:70:36:7c:e8:5f:72:e0:c4:
a0:91:49:f2:b1:d0:24:c5:37:b2:47:32:72:10:e4:20:4e:8c:
92:cf:1a:ae:42:18:f0:72:3d:27:cc:ac:ae:41:3f:bd:1d:36:
9e:fe:c6:12:81:99:b7:e4:8a:24:b8:44:86:ee:db:7f:33:da:
22:08:dd:24:f3:76:09:03:44:a3:b5:01:b9:8e:e1:95:63:e7:
3d:c5:66:6a:8f:31:e9:76:05:f4:ad:90:af:27:2d:d3:6c:4c:
0b:85:eb:7c:a0:c9:b2:8d:6d:28:6c:fa:a4:48:f8:b1:b6:0d:
13:17:54:d7:17:5f:b8:0d:ae:41:b4:7d:d0:ee:20:ab:25:72:
d5:e2:46:c1:49:89:54:3e:84:7b:f0:ee:3e:5e:be:26:5c:7b:
9d:8a:38:65:15:f1:9b:3f:79:6d:b3:83:e7:39:96:68:91:6d:
c3:e7:52:a0:ac:41:98:93:cb:0b:04:13:e0:66:56:66:29:60:
6f:bc:24:ba:8e:1d:2c:cb:91:a4:6c:c8:ac:f5:23:ef:0d:43:
ef:c7:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:28 2025 by rpki-client