Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SolYoCjRAn2YGv0QUo2LFfbXXKQ.roa
File: SolYoCjRAn2YGv0QUo2LFfbXXKQ.roa (raw, json)
Hash identifier: /g/HBcDdqXgPlsfxdMcncl0DjA+Vr/0tcsDuO6xVFQo=
Subject key identifier: 4A:89:58:A0:28:D1:02:7D:98:1A:FD:10:52:8D:8B:15:F6:D7:5C:A4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195CE0469691D33FD268D0B05878F63A350
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SolYoCjRAn2YGv0QUo2LFfbXXKQ.roa
Signing time: Tue 25 Mar 2025 15:55:50 +0000
ROA not before: Tue 25 Mar 2025 15:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 31.58.237.0/24 maxlen: 24
217.60.199.0/24 maxlen: 24
217.60.237.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
217.60.246.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:04:69:69:1d:33:fd:26:8d:0b:05:87:8f:63:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 15:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8958a028d1027d981afd10528d8b15f6d75ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:69:5f:b4:3a:99:0e:99:ec:84:9b:c5:a2:
33:fb:e5:06:55:43:af:13:43:92:5f:f9:28:f2:ec:
fb:4c:ee:43:b5:ca:57:d8:d5:72:0b:0e:40:c5:3e:
f8:43:03:1b:fc:25:a3:7b:c9:bb:2b:5c:96:c1:e5:
66:03:0e:fd:40:01:aa:ea:3a:03:32:b2:04:17:c1:
08:c6:de:cc:ef:87:f5:95:57:23:41:eb:28:5b:5b:
df:b3:41:07:01:08:08:b6:7a:5d:df:cd:42:ce:4b:
07:26:a7:c3:dd:e9:a6:da:31:86:82:dc:6d:92:49:
4a:3a:c5:43:c4:7b:06:e0:f6:4a:89:11:ab:70:04:
3a:ff:61:3e:3c:53:c4:1d:dd:23:9c:6a:29:0f:0b:
e8:dd:57:30:90:74:1c:6a:e8:25:ef:20:42:39:c6:
42:5e:7f:bd:8f:0a:a4:09:ee:52:ae:4f:cc:89:3b:
84:2c:32:45:1a:5e:4a:9f:92:21:ce:5a:a3:58:fe:
1a:ba:83:5f:32:dd:6f:e0:10:ba:5b:3a:dc:82:83:
3f:ef:cd:60:64:b0:6f:63:af:24:ad:e2:4d:71:c3:
c7:ff:85:cc:bb:45:0f:8c:69:b8:20:18:f6:e2:31:
82:8b:a8:52:2d:ce:9a:e4:af:31:2b:a8:9c:aa:a8:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:58:A0:28:D1:02:7D:98:1A:FD:10:52:8D:8B:15:F6:D7:5C:A4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SolYoCjRAn2YGv0QUo2LFfbXXKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.237.0/24
217.60.199.0/24
217.60.237.0-217.60.238.255
217.60.243.0/24
217.60.246.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d7:c0:db:bd:0c:5c:51:63:51:d8:8d:c4:6b:c6:5b:bb:58:
39:d2:66:45:01:b4:32:6a:7a:66:00:94:39:d5:46:c0:64:fb:
a1:e1:7d:63:33:cc:87:40:e1:bb:53:c2:16:ee:51:05:17:69:
be:58:fe:5b:c7:9b:f4:e2:14:48:3c:2d:e0:3a:b9:e7:d1:c9:
12:98:47:6d:4a:18:e1:11:27:4a:bf:91:4e:50:a4:9b:11:14:
5e:4e:35:0c:49:37:d8:45:a5:a2:1d:96:1f:d8:be:47:e2:aa:
e3:36:e1:19:1e:9d:a5:c5:9c:a1:d5:77:85:ea:ed:80:e4:30:
b1:d3:98:dd:31:3a:65:b2:3d:01:91:55:51:1e:64:32:92:47:
7c:d9:c2:07:62:4c:d3:f1:73:25:b8:88:49:56:d7:a8:e7:c9:
f1:2f:ee:c1:ca:34:cd:d1:5e:37:a8:8a:36:62:0f:e2:6a:43:
2d:b6:ed:d2:0d:3c:a5:dd:d7:8c:9a:64:ee:82:11:5d:81:18:
4c:34:f2:7f:c8:ce:27:ac:34:c6:e5:f5:f6:bf:61:68:51:5a:
e6:4e:76:c3:36:ed:9e:d0:07:6e:1a:94:12:dc:43:f3:47:dd:
10:28:2a:ae:8f:e0:b3:66:03:a9:82:56:ef:91:64:c8:95:3e:
3e:da:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:31 2025 by rpki-client