Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OqNjdwMd9bOV_eJKZoZlJmkhY04.roa
File: OqNjdwMd9bOV_eJKZoZlJmkhY04.roa (raw, json)
Hash identifier: RR2Ns4xuXuzqeugo72nfR3L7ValcYKAcMVUgyGWqi3Q=
Subject key identifier: 3A:A3:63:77:03:1D:F5:B3:95:FD:E2:4A:66:86:65:26:69:21:63:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A7CC2AF261573C4D2E00A5F309340049
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OqNjdwMd9bOV_eJKZoZlJmkhY04.roa
Signing time: Tue 18 Mar 2025 05:48:50 +0000
ROA not before: Tue 18 Mar 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199414
IP address blocks: 31.56.0.0/24 maxlen: 24
31.57.96.0/24 maxlen: 24
31.58.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:cc:2a:f2:61:57:3c:4d:2e:00:a5:f3:09:34:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 18 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aa36377031df5b395fde24a668665266921634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:61:77:3f:b1:c2:dd:c7:51:fa:b1:8e:25:
a3:54:01:48:8c:ec:aa:24:08:f5:5e:f0:a8:06:88:
38:df:88:a1:0b:59:57:6e:34:c6:ac:c8:53:f9:84:
d6:74:76:f2:5c:4f:4e:8f:a9:ae:36:3c:80:e1:cb:
6c:cd:e6:27:c4:61:99:35:22:ee:93:48:d7:7d:36:
12:e0:41:97:8b:c6:de:15:df:25:82:9a:05:d9:3a:
e6:9b:19:30:0c:52:9f:08:fe:34:fb:16:db:56:c0:
a1:f3:a9:ca:28:e3:3c:d8:a7:94:e5:c7:72:b1:3a:
a8:df:94:7a:6a:03:88:3f:32:76:81:79:4a:1d:51:
74:13:a9:9d:d7:39:84:16:24:26:97:d0:30:1f:35:
1c:56:30:59:07:06:93:b8:7b:a3:e9:86:10:63:ec:
b5:48:7d:cb:11:4d:8a:17:d3:87:6b:74:01:4b:da:
92:f0:1f:98:0e:d8:ec:bc:4d:f9:50:45:88:48:0c:
c1:b3:fe:71:71:e2:83:4c:ea:ab:22:e7:94:8f:b4:
6d:83:5a:77:b3:15:62:ca:c5:1e:6f:d3:75:28:2c:
fd:50:41:c5:c4:ce:c7:bd:b4:68:10:db:a2:c3:07:
2f:85:6f:16:c5:84:c5:49:4f:05:6c:c1:8b:fb:14:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:63:77:03:1D:F5:B3:95:FD:E2:4A:66:86:65:26:69:21:63:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OqNjdwMd9bOV_eJKZoZlJmkhY04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
31.57.96.0/24
31.58.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:06:bc:55:a5:ef:64:fb:6c:00:a6:92:43:7f:14:e5:c7:6c:
74:ca:58:58:75:9f:40:05:f9:80:6b:ce:f0:96:e5:d2:bf:ba:
e5:0e:e0:f1:dc:bb:c4:3f:7e:51:70:19:fe:b8:5a:47:16:b1:
f1:d1:6a:54:93:62:62:3f:f6:43:d6:58:bb:0e:a5:96:63:ee:
23:2f:e4:24:66:c6:66:ac:ac:50:4c:95:bc:03:ba:87:94:d1:
da:a5:a5:59:12:69:2f:55:b3:e8:37:b9:ba:ce:6a:fa:16:7c:
8c:5a:52:29:16:d8:b4:32:8e:5c:73:f9:d3:9b:8f:fa:44:d9:
3e:97:89:26:5e:dd:2a:70:05:d4:e0:ab:12:76:37:4b:0a:6c:
42:e8:6b:a5:7d:d1:06:f7:29:d9:69:db:92:66:c1:ff:3a:15:
33:19:2a:06:d0:c1:3d:1b:64:04:ab:c8:5d:a2:ec:8c:a0:fd:
58:dc:29:6f:1d:21:5e:37:04:28:a3:98:f0:33:e4:84:04:39:
f0:42:d1:8d:0c:81:38:40:39:d0:36:4b:22:b6:66:43:a9:57:
5c:98:b0:60:03:2e:29:34:74:cf:a6:67:a4:21:60:e7:67:a7:
ea:9c:64:4a:e5:8f:28:de:ef:ec:b8:2d:a3:b7:db:7c:dc:d0:
6b:1e:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:39 2025 by rpki-client