Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SUnzFj6X7nKPhyi6EqC6eQMPq70.roa
File: SUnzFj6X7nKPhyi6EqC6eQMPq70.roa (raw, json)
Hash identifier: orsRdJbMR1tJnXcGLr7nM/FJRXJI3C+FsZOzWms8wd8=
Subject key identifier: 49:49:F3:16:3E:97:EE:72:8F:87:28:BA:12:A0:BA:79:03:0F:AB:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282352683D5DD23A57CCC72A4859135F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SUnzFj6X7nKPhyi6EqC6eQMPq70.roa
Signing time: Thu 02 Jan 2025 17:49:50 +0000
ROA not before: Thu 02 Jan 2025 17:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134677
IP address blocks: 31.58.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:52:68:3d:5d:d2:3a:57:cc:c7:2a:48:59:13:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4949f3163e97ee728f8728ba12a0ba79030fabbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:ed:c4:2f:bb:86:72:07:4c:3a:9a:62:51:
1a:59:32:69:84:5e:87:88:90:1d:c0:c4:68:13:98:
59:85:f4:e8:cc:e9:42:69:69:66:cb:58:68:5b:ac:
d4:30:59:0b:30:82:f1:57:92:9b:32:0a:f5:aa:e1:
9e:f4:d9:00:20:6e:85:42:97:d9:66:ea:4a:3f:fa:
3a:5b:dd:f4:8c:e5:7c:fd:ad:f1:4a:ae:ea:2b:82:
a3:24:29:53:da:ba:db:5b:63:a6:6d:d6:cf:47:19:
80:89:a7:11:f6:4c:64:33:90:a8:1a:1e:44:15:7f:
69:6c:cf:a7:27:8b:30:9f:78:0d:db:3a:e6:75:d5:
5a:ff:84:72:e2:cf:b2:95:9a:29:c2:c1:71:c5:32:
e7:a8:9b:2e:5a:9a:17:30:f4:d6:bf:c2:90:9c:9a:
21:05:73:e5:7a:3f:a0:1a:ce:a2:1b:2f:5d:c3:c8:
8c:80:8d:9e:a1:ed:1b:46:ba:15:68:e9:2f:a0:f0:
47:92:d6:a8:12:de:64:1e:7f:c3:0f:fa:ff:5f:13:
e6:7e:29:08:ae:94:ef:1f:d8:43:e4:a1:f7:bc:6c:
62:72:65:35:f0:d4:30:a5:75:67:a6:d7:a3:41:e0:
05:66:6f:25:72:1c:27:79:96:36:6e:fa:f3:5b:e9:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:49:F3:16:3E:97:EE:72:8F:87:28:BA:12:A0:BA:79:03:0F:AB:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SUnzFj6X7nKPhyi6EqC6eQMPq70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:60:18:e6:4c:eb:ef:af:6d:9c:94:ae:9d:a4:a1:54:cb:9b:
7d:23:37:fc:09:4d:30:68:55:a0:b5:bf:f3:06:f4:1c:a7:73:
ba:b6:6c:0c:12:ae:fe:33:3d:b0:5f:f8:2e:6e:9a:71:2d:bd:
e9:2d:b6:2d:5b:ea:f7:1d:ca:c0:a5:7e:e1:c9:e7:cf:9d:0a:
1f:3b:84:96:42:52:e4:6b:e8:af:4d:47:43:91:ee:48:ee:9b:
b7:ae:8a:f8:22:b4:7c:47:19:15:b1:14:3b:d3:d3:0e:1d:20:
3d:1c:c3:a4:38:46:45:5e:33:5a:1d:fa:e6:02:bc:73:34:2c:
cf:f0:a2:8e:4e:6b:35:5f:73:2e:9f:22:03:e7:67:ab:7c:6b:
5b:58:a9:fc:e8:e3:42:20:f2:e1:86:ac:e0:d0:d6:bf:d6:0a:
78:96:54:8b:2a:2b:78:96:f4:3d:7d:cb:44:a6:ba:8b:d2:84:
eb:45:0d:2f:81:2d:27:f8:ec:38:f8:4e:f1:88:01:ff:cf:00:
84:f5:3b:bc:96:d0:0c:3a:05:d9:ca:4f:51:01:54:fe:45:13:
0f:62:4b:9e:0f:6d:49:f1:86:e9:75:fe:82:0e:a1:c9:50:be:
77:d3:fc:46:b7:9e:bd:f3:1d:80:21:50:37:e2:06:d3:4a:95:
01:e8:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:51:44 2025 by rpki-client