Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SlV9AGwNVRj_3ByNI6q0r4b8-18.roa
File: SlV9AGwNVRj_3ByNI6q0r4b8-18.roa (raw, json)
Hash identifier: Yv5mm1yqMe16UFYHl70EBnH968HhPRIm4XLl7UgQYpc=
Subject key identifier: 4A:55:7D:00:6C:0D:55:18:FF:DC:1C:8D:23:AA:B4:AF:86:FC:FB:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E941088A7434EDF8FC449E3658376CDA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SlV9AGwNVRj_3ByNI6q0r4b8-18.roa
Signing time: Sun 09 Feb 2025 05:49:00 +0000
ROA not before: Sun 09 Feb 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272011
IP address blocks: 31.59.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e9:41:08:8a:74:34:ed:f8:fc:44:9e:36:58:37:6c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 9 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a557d006c0d5518ffdc1c8d23aab4af86fcfb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:95:c7:84:8f:3c:a4:d3:ec:23:2f:b8:fb:
57:13:de:73:5c:4d:d2:19:b0:e3:44:11:bd:2e:2a:
4c:99:34:8d:f5:82:1e:68:9c:67:91:ac:78:76:c5:
30:3f:83:fe:b7:a7:72:44:49:18:d6:43:f6:06:2e:
02:65:63:b9:2a:24:fc:4f:c0:d0:cd:9a:77:df:8b:
11:ec:bb:d0:fb:31:8d:2f:52:89:8d:3a:e5:68:8c:
2c:db:95:53:a5:53:1c:d0:54:6c:7c:26:71:0a:82:
ae:ba:13:01:71:83:a4:a0:1e:f4:c4:a2:1a:bf:5c:
27:82:ca:e6:63:59:a8:03:6e:a2:31:70:9b:5b:ba:
b9:13:23:e5:17:96:7f:e4:65:92:10:96:09:da:4a:
f2:b9:f6:d5:3e:55:c2:b6:d3:44:40:12:db:75:86:
5c:94:30:30:86:b1:5d:96:0b:9e:60:11:93:4c:e8:
2e:85:e5:17:c0:8c:fa:c8:e8:5b:01:6d:0a:e4:70:
a1:43:9e:a2:f0:a6:33:bb:92:85:76:e7:24:ac:4f:
3d:8c:f8:94:5d:46:c8:8f:ec:ef:62:3d:35:78:c0:
7a:ed:52:19:3c:09:d8:e8:f2:7c:aa:5d:ae:17:b3:
e6:0d:2a:a5:2b:23:1c:95:15:f1:b5:cd:c3:ce:ba:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:7D:00:6C:0D:55:18:FF:DC:1C:8D:23:AA:B4:AF:86:FC:FB:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SlV9AGwNVRj_3ByNI6q0r4b8-18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d8:47:85:c1:26:b9:05:22:ad:4f:5c:47:a1:06:9d:d5:53:
6d:46:ea:27:31:27:18:fd:d1:19:17:7a:0d:6d:db:d1:e5:37:
6b:9c:6d:07:23:7f:f8:06:8b:ab:ab:72:6b:12:10:47:31:4e:
dc:a5:bb:a1:13:fc:87:2c:b2:c9:db:96:96:82:3d:c6:84:7c:
c5:e5:61:e4:01:4b:fb:a8:88:f7:9e:03:43:06:ac:8d:c0:49:
6d:1f:07:8f:4e:f0:bb:dd:48:e6:98:be:c4:3d:4a:3e:2e:38:
d6:22:63:bf:f4:98:f7:8a:0c:41:33:8f:b7:a3:70:4f:cd:ea:
c5:4f:bb:83:ee:b7:29:74:3a:7c:92:9b:13:be:2c:64:fe:b9:
61:d7:43:40:bd:5c:18:51:76:48:75:5f:ec:07:d0:72:fe:80:
00:ea:d5:42:22:fa:92:25:4e:ff:01:1b:2b:72:75:4e:4b:e8:
b9:2a:05:ee:ec:cb:7f:08:20:35:35:09:56:da:8a:f0:60:30:
0a:64:c9:65:49:ff:87:3a:af:00:bb:00:47:d9:49:be:24:17:
17:28:93:57:c9:44:53:55:1c:c5:29:88:27:55:7b:d3:97:2e:
92:60:e9:45:fb:95:da:6c:e0:9b:18:33:74:71:14:27:ec:28:
29:ea:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:39 2025 by rpki-client