Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRtCh-o0zGk3gJ8lTTYMtI58Nw0.roa
File: NRtCh-o0zGk3gJ8lTTYMtI58Nw0.roa (raw, json)
Hash identifier: RAQZAI93eq+YmCwLefRBEtcHJiGrLbknHVHqHWUI6Fk=
Subject key identifier: 35:1B:42:87:EA:34:CC:69:37:80:9F:25:4D:36:0C:B4:8E:7C:37:0D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E1EC339F8183AAE59E9D04D660612E57
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRtCh-o0zGk3gJ8lTTYMtI58Nw0.roa
Signing time: Fri 07 Feb 2025 19:39:00 +0000
ROA not before: Fri 07 Feb 2025 19:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214311
IP address blocks: 31.57.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:ec:33:9f:81:83:aa:e5:9e:9d:04:d6:60:61:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 19:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351b4287ea34cc6937809f254d360cb48e7c370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:a4:e4:15:c2:31:69:a2:d0:41:00:a3:12:
54:dd:8b:1c:ae:6f:f4:64:e7:03:a5:11:1d:dd:d9:
be:e2:24:3e:b9:4e:f8:6f:ff:21:10:2f:6a:3b:96:
1c:31:61:08:c3:af:e6:94:ea:86:1b:c9:b9:59:dc:
5a:7e:b2:96:c5:98:5b:90:4e:dc:bd:b1:f2:84:d5:
97:30:46:79:d9:4a:4d:24:9e:8f:a5:71:42:2d:1b:
09:6a:b0:95:7f:6f:18:73:91:45:0a:51:f0:e1:b3:
f2:22:25:cc:94:4e:e7:24:3c:2d:00:d6:b0:b4:55:
7a:d3:62:ef:79:ae:24:68:8f:fb:a3:df:d2:af:f7:
77:41:43:0e:ce:4c:d4:57:8d:75:10:ab:07:cb:53:
4f:96:7a:b5:cf:74:66:49:6a:b0:8b:ab:b2:ff:5a:
40:26:4a:6a:7f:4d:9a:5e:54:e4:3a:ee:d1:72:8d:
d2:1d:b5:b5:55:a0:b7:4c:7d:1a:ae:a1:79:2a:59:
ff:bf:d0:26:f4:bd:b2:5c:24:43:4d:f7:8f:35:b6:
45:68:50:82:0a:35:61:be:a3:92:77:05:1a:1b:8e:
3e:30:82:d9:52:f7:e7:6f:7d:c8:7c:f8:a5:c4:43:
4f:f6:d1:e4:b6:5b:98:46:b4:a0:a9:91:22:3b:b6:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:42:87:EA:34:CC:69:37:80:9F:25:4D:36:0C:B4:8E:7C:37:0D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRtCh-o0zGk3gJ8lTTYMtI58Nw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:2b:b3:1b:d7:14:34:5c:93:d7:cb:d7:b7:09:ca:a4:11:4d:
27:fc:51:02:83:f5:20:e3:ae:16:63:2c:63:18:16:8b:4a:01:
6b:4e:4c:d5:64:e1:5c:55:92:0d:5f:42:a8:99:c4:a4:0f:45:
c9:39:13:fe:3e:72:4d:6a:23:09:da:fe:b5:5b:a6:7d:fc:f6:
45:a6:33:ac:30:f5:5b:16:2e:f6:8b:7a:78:c3:29:39:55:66:
63:c8:be:2c:6d:af:c7:d4:83:82:d5:54:48:86:4b:92:58:c5:
45:29:f6:77:d2:3a:62:12:38:c2:68:51:ad:a8:9a:55:b1:8d:
22:4f:0e:3b:f8:47:cb:f8:59:f5:c7:dc:17:df:58:c8:81:aa:
59:0b:c4:77:9a:08:1a:19:0d:28:82:84:42:ab:de:02:54:7e:
af:87:55:32:b6:be:99:b4:4d:54:e2:d0:2f:4c:92:95:44:87:
f9:94:23:be:00:56:14:af:78:0c:95:4b:27:03:4d:3e:1b:43:
32:71:93:58:60:9c:04:0b:78:e5:eb:9a:d9:e3:b8:61:a1:61:
fa:62:d6:a4:bf:f0:00:f6:f0:88:63:e6:d2:1f:0f:e8:93:4b:
15:03:04:15:f3:79:2b:6e:90:2c:04:3a:0a:7a:ee:ba:04:96:
64:23:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client