Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VUhpEosQ2Pl-_2ahb4wQxMJ3RJc.roa
File: VUhpEosQ2Pl-_2ahb4wQxMJ3RJc.roa (raw, json)
Hash identifier: aoOrhokcgi8Vr8bo6vCeNo1Z6M9gd+rKm3T+LF6aUAU=
Subject key identifier: 55:48:69:12:8B:10:D8:F9:7E:FF:66:A1:6F:8C:10:C4:C2:77:44:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428236F6E76BCF26E76C395AA815C1EDE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VUhpEosQ2Pl-_2ahb4wQxMJ3RJc.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 31.57.190.0/24 maxlen: 24
31.58.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6f:6e:76:bc:f2:6e:76:c3:95:aa:81:5c:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554869128b10d8f97eff66a16f8c10c4c2774497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:70:4c:17:95:7f:e2:c9:93:30:5f:1d:24:
2b:d4:29:cc:d1:36:be:da:c1:de:0c:c8:8e:55:20:
85:9a:64:bf:e5:34:bc:ba:e0:b6:23:e1:25:96:bf:
9c:77:78:ec:81:4e:ff:fb:b8:e7:3b:98:b4:56:df:
c3:b7:c3:1a:f8:25:8a:e0:fb:14:3b:29:71:ad:2f:
51:5e:4b:c6:98:53:ab:34:66:69:c1:73:16:f0:34:
94:cf:a4:c2:19:58:d4:1e:cd:43:6e:94:1b:58:56:
b0:43:9e:fc:e7:70:46:57:9f:11:1b:e8:b6:f8:93:
86:bd:46:78:4a:db:a5:0a:df:55:fa:23:0b:7f:dd:
17:3d:2f:6e:f8:df:ca:6f:78:3e:e0:73:d2:d5:09:
f8:c0:5e:04:cb:e5:d3:6d:b0:18:37:85:4d:23:58:
88:f8:5b:99:47:1d:8a:e6:e3:77:9c:9a:6b:3e:72:
93:5a:ac:a6:d7:75:91:1a:23:3f:40:9b:8a:53:ab:
20:a8:5a:e7:7d:58:f1:f9:3e:da:28:f7:7f:8c:4f:
c4:13:88:c5:22:fb:54:8a:66:9b:6c:16:21:ae:6d:
fa:1d:51:7e:a2:53:29:88:21:b2:1f:e3:1e:62:0f:
b1:dd:8f:0e:4b:ac:14:30:1f:ad:4e:a2:45:44:39:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:69:12:8B:10:D8:F9:7E:FF:66:A1:6F:8C:10:C4:C2:77:44:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VUhpEosQ2Pl-_2ahb4wQxMJ3RJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.190.0/24
31.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
46:25:54:87:14:64:87:78:0d:8c:cb:69:c0:20:3f:ad:84:09:
49:62:78:9c:46:57:78:9f:b7:66:5b:84:a8:a0:a0:1a:69:47:
32:db:be:04:e5:8c:51:9f:b8:8e:57:37:b4:ae:ab:f6:9d:66:
aa:7c:15:6e:41:6b:7e:93:2f:1f:bd:55:1b:e5:6c:0a:59:67:
2e:cb:54:0e:34:77:e8:81:c2:8d:22:33:78:34:23:54:01:4e:
96:9b:c6:2a:bd:35:07:45:a1:9e:0c:f5:e3:1a:28:22:16:0f:
f5:d7:c0:40:a5:32:53:db:74:f5:48:35:22:11:f9:aa:e3:3f:
c8:ef:3f:c7:6d:3f:ce:b2:e3:55:9c:3b:1c:dd:97:5c:fe:b5:
c1:66:d7:e0:05:fa:0b:e2:12:05:b8:a6:31:3b:db:6c:0b:dc:
9f:93:7e:9a:7d:aa:51:83:85:97:2d:2d:30:3a:25:aa:50:cf:
a2:87:5b:5b:4b:5b:18:ee:cb:97:8f:15:67:86:59:ad:a7:d2:
cf:d7:b7:9a:fc:9d:69:f7:cd:5b:79:90:68:8b:d0:00:0a:b0:
e0:8f:32:b4:2d:be:cc:ff:2a:fd:8c:53:a6:d6:f2:ae:a1:e0:
99:1a:22:a8:a1:dc:48:14:4d:8a:b6:3a:b3:6f:bf:f5:49:08:
d4:84:aa:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI29udrzybnbDlaqBXB7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQ4NjkxMjhiMTBkOGY5N2VmZjY2YTE2ZjhjMTBjNGMyNzc0NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OJwTBeVf+LJkzBfHSQr1CnM0Ta+
2sHeDMiOVSCFmmS/5TS8uuC2I+Ellr+cd3jsgU7/+7jnO5i0Vt/Dt8Ma+CWK4PsU
OylxrS9RXkvGmFOrNGZpwXMW8DSUz6TCGVjUHs1DbpQbWFawQ57853BGV58RG+i2
+JOGvUZ4StulCt9V+iMLf90XPS9u+N/Kb3g+4HPS1Qn4wF4Ey+XTbbAYN4VNI1iI
+FuZRx2K5uN3nJprPnKTWqym13WRGiM/QJuKU6sgqFrnfVjx+T7aKPd/jE/EE4jF
IvtUimabbBYhrm36HVF+olMpiCGyH+MeYg+x3Y8OS6wUMB+tTqJFRDl4uQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFVIaRKLENj5fv9moW+MEMTCd0SXMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVlVocEVvc1EyUGwtXzJhaGI0d1F4TUozUkpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzm+AwQA
HzqqMA0GCSqGSIb3DQEBCwUAA4IBAQBGJVSHFGSHeA2My2nAID+thAlJYnicRld4
n7dmW4SooKAaaUcy274E5YxRn7iOVze0rqv2nWaqfBVuQWt+ky8fvVUb5WwKWWcu
y1QONHfogcKNIjN4NCNUAU6Wm8YqvTUHRaGeDPXjGigiFg/118BApTJT23T1SDUi
Efmq4z/I7z/HbT/OsuNVnDsc3Zdc/rXBZtfgBfoL4hIFuKYxO9tsC9yfk36afapR
g4WXLS0wOiWqUM+ih1tbS1sY7suXjxVnhlmtp9LP17ea/J1p981beZBoi9AACrDg
jzK0Lb7M/yr9jFOm1vKuoeCZGiKoodxIFE2Ktjqzb7/1SQjUhKqX
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:00:28 2025 by rpki-client