Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMoH8J-BjS0cxZ4mCtkURQC2zNI.roa
File: SMoH8J-BjS0cxZ4mCtkURQC2zNI.roa (raw, json)
Hash identifier: 072tbpabFWUOn+5v4uk0vObKIBLxzm16lPlRuw/w65s=
Subject key identifier: 48:CA:07:F0:9F:81:8D:2D:1C:C5:9E:26:0A:D9:14:45:00:B6:CC:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282374D62E92FC8F752D42EE70E3ED60
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMoH8J-BjS0cxZ4mCtkURQC2zNI.roa
Signing time: Thu 02 Jan 2025 17:49:59 +0000
ROA not before: Thu 02 Jan 2025 17:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214453
IP address blocks: 31.57.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:74:d6:2e:92:fc:8f:75:2d:42:ee:70:e3:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ca07f09f818d2d1cc59e260ad9144500b6ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:b4:df:e5:40:be:16:9e:59:9b:99:e1:35:
c6:ec:f2:f7:8e:69:16:d2:4b:18:d2:f5:52:8f:1a:
1d:97:d3:03:ed:ca:6b:c7:87:fa:c3:a0:a4:55:be:
ea:33:01:72:96:2c:22:96:89:74:73:f0:5c:d2:43:
52:9b:27:e9:f8:df:1d:47:33:e4:aa:52:c4:d4:b3:
a2:ac:1f:a3:a3:95:19:11:0c:07:06:2d:15:d6:a2:
18:9f:9d:18:8f:14:67:34:d4:ae:7f:09:f9:d6:fd:
f3:4d:24:e8:24:4f:aa:50:62:9b:06:ac:54:67:3f:
c9:6c:be:68:61:ca:a4:db:45:96:24:c4:77:4b:71:
4c:dc:50:aa:9b:88:23:2d:e2:7b:e8:95:66:f9:c7:
30:b0:e1:c4:71:b5:e6:05:42:38:93:aa:d7:d9:e5:
74:2d:e9:20:3a:e0:23:b3:dc:69:d9:5d:ed:00:12:
26:0f:b2:52:d0:9e:c4:f2:aa:08:16:1e:b4:6d:5a:
10:47:3c:c2:50:80:ee:e4:56:59:c0:f3:05:fc:96:
b9:a4:ee:f8:3e:2c:a1:12:25:65:d9:46:71:6b:13:
62:66:87:bd:d6:1e:af:77:04:53:ec:ec:2a:31:be:
4d:2e:d8:d8:e5:da:44:33:6c:36:61:f6:98:29:76:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CA:07:F0:9F:81:8D:2D:1C:C5:9E:26:0A:D9:14:45:00:B6:CC:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMoH8J-BjS0cxZ4mCtkURQC2zNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e8:a1:5e:d6:66:35:e3:f2:e0:74:4a:3a:f5:07:b7:d7:2d:
de:32:37:da:91:80:ef:2f:e1:a4:0e:65:52:e4:68:31:5b:ea:
e4:3e:b0:49:d2:f6:f4:5f:26:50:71:68:e4:da:16:89:dc:d2:
b0:db:c5:ab:95:d7:67:99:b4:05:11:93:ce:bc:b4:f3:2c:38:
62:c2:58:0e:ed:ea:70:0b:a7:20:72:ae:0c:11:ee:29:ec:c3:
e3:f0:9d:76:30:85:7b:3c:69:f7:91:dd:ba:45:ec:ae:7d:61:
d9:4f:27:42:23:e8:6d:ee:22:81:e8:f0:22:e6:44:6d:05:d5:
d1:35:5e:a0:75:e7:e2:ec:6f:a2:68:8c:bb:56:99:28:b6:50:
ab:19:16:fa:6a:d9:a2:11:26:c6:fa:d5:ff:ac:4b:ff:aa:d0:
b5:4d:8b:fd:62:43:85:19:33:35:97:56:f8:82:ed:20:e2:17:
c8:c8:98:37:11:61:d3:73:90:70:09:7d:4d:fa:4f:4e:7b:2c:
7f:d4:34:cd:0c:90:90:9b:25:cf:89:65:d9:f7:75:82:18:10:
b2:bd:9a:15:db:aa:e8:6c:ac:a0:fa:b1:e4:c7:0a:81:89:d3:
29:82:4e:99:d6:2b:c3:41:d1:7c:3c:9d:2f:45:29:ad:a1:0c:
bb:b3:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:13:38 2025 by rpki-client