Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RmmggP9Kq74SDlH83TgCK_Ngly8.roa
File: RmmggP9Kq74SDlH83TgCK_Ngly8.roa (raw, json)
Hash identifier: mpNmp9+G4lWGAb1/5/2xX2Gxxu9vG8hecXCOX5k/rY8=
Subject key identifier: 46:69:A0:80:FF:4A:AB:BE:12:0E:51:FC:DD:38:02:2B:F3:60:97:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823381F2DA31C6CE2929F6BC590D561
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RmmggP9Kq74SDlH83TgCK_Ngly8.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 31.57.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:38:1f:2d:a3:1c:6c:e2:92:9f:6b:c5:90:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4669a080ff4aabbe120e51fcdd38022bf360972f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:36:2f:cb:e9:54:61:89:47:86:0b:b6:bb:
11:c5:b3:d8:14:2c:4d:fe:8b:e8:e2:d8:b2:e8:75:
b4:4b:ff:b4:f5:3d:af:1c:dc:45:bd:e9:63:04:09:
4e:23:ce:65:e0:97:cb:03:fb:2a:b7:76:fa:76:43:
e2:a4:a5:c2:9e:c9:87:70:09:f1:20:b3:cd:9c:f2:
7a:a8:ae:c1:a7:85:17:31:9a:4a:51:63:7b:ae:21:
e7:5a:48:4c:54:45:54:af:7d:c2:0a:02:94:2f:fc:
9b:3e:19:e9:13:52:d7:af:25:46:79:a1:34:09:fe:
75:96:22:fc:ad:63:df:40:84:b1:c7:bf:51:fb:a1:
76:b3:1b:8f:a5:04:34:08:08:6c:4e:89:3a:ed:fa:
78:7e:3c:65:41:2a:e4:62:06:a9:4c:3c:56:cb:b1:
80:f3:dc:60:62:d3:b7:fc:a4:b7:ad:89:60:87:a6:
01:70:95:f4:d5:26:43:2d:0d:07:6c:64:fd:a1:3e:
21:1b:80:2e:b9:1d:39:f0:19:ef:d5:e6:09:ac:3a:
31:42:08:93:8c:a9:16:f6:09:7b:1c:69:aa:87:01:
cf:94:91:2c:02:e5:d0:22:5e:6a:33:5b:9a:5a:22:
b1:c9:c8:b2:2e:df:34:c6:72:8e:2c:84:dc:67:ab:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:A0:80:FF:4A:AB:BE:12:0E:51:FC:DD:38:02:2B:F3:60:97:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RmmggP9Kq74SDlH83TgCK_Ngly8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7b:14:0e:73:f5:b4:65:f7:d6:6f:57:58:5e:2b:dc:cc:0e:
90:1e:0b:c6:05:37:0f:ce:b4:e4:ad:b9:72:05:43:f7:3d:29:
d3:2c:ac:00:01:90:22:2e:5f:ee:bd:f1:d2:b3:50:6d:8d:de:
86:e7:9c:74:5c:b4:4d:3a:ea:b3:ce:ea:3a:5e:3d:bb:cb:02:
35:b9:e5:b2:10:48:40:6a:63:82:e3:b1:ce:85:51:c8:4d:6e:
34:33:c8:02:dd:81:b2:35:42:d3:9f:b9:a4:2f:4c:e4:60:05:
40:f1:ef:77:09:a7:b7:b3:34:84:1d:72:f9:4f:b1:78:4f:77:
a6:d7:cf:18:52:0c:fe:3a:37:19:40:f0:6c:a7:ab:d4:e9:13:
ea:90:ce:3c:9b:30:27:ec:00:2b:89:5a:14:d0:5d:db:db:04:
5c:80:42:9d:3c:02:f6:2e:74:88:37:11:6c:3e:66:82:ec:4c:
7e:ee:fd:de:05:ed:5c:ad:7f:24:4e:59:74:07:8e:e5:28:ea:
13:34:c1:b1:53:1f:c4:4b:be:48:de:e2:ac:aa:4c:43:4d:54:
b7:fa:54:60:b9:b0:64:29:b2:68:ff:b0:ed:98:84:d5:0c:bc:
7f:e3:e6:db:69:7f:d8:4e:78:81:c9:0c:aa:54:28:95:9a:f8:
86:98:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:07:25 2025 by rpki-client