Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vd0JXgQrvI1_C8XI9RzXSG5xGUU.roa
File: Vd0JXgQrvI1_C8XI9RzXSG5xGUU.roa (raw, json)
Hash identifier: xMtLASX1J4CfIZbmS9HWGeoPQ0FGeHE0V2OZSvKko10=
Subject key identifier: 55:DD:09:5E:04:2B:BC:8D:7F:0B:C5:C8:F5:1C:D7:48:6E:71:19:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282376973F6C47B38228E8FA03EEAAFC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vd0JXgQrvI1_C8XI9RzXSG5xGUU.roa
Signing time: Thu 02 Jan 2025 17:50:00 +0000
ROA not before: Thu 02 Jan 2025 17:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:76:97:3f:6c:47:b3:82:28:e8:fa:03:ee:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55dd095e042bbc8d7f0bc5c8f51cd7486e711945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:e2:66:99:74:88:ce:7b:e2:b1:6f:9a:69:
18:28:ec:b8:ce:8e:44:34:aa:aa:48:15:b9:be:e4:
30:fa:91:7a:d6:42:1a:be:6e:51:41:b1:90:35:55:
59:81:5f:2f:43:35:58:63:20:2f:cf:89:b0:8a:b7:
8b:56:fc:5b:20:ed:93:cb:2d:ed:7c:8c:af:33:98:
a8:50:4f:08:aa:f1:e4:b7:88:4e:f1:bd:2f:88:a3:
91:9f:2f:6e:b0:e6:e8:86:11:35:d2:fc:c0:6d:46:
ac:cf:93:c9:47:30:0f:6b:7d:26:14:96:d5:99:f3:
1b:95:2f:99:35:65:e4:69:ba:56:25:0f:51:a3:03:
99:b1:01:08:25:4a:89:e5:be:58:ca:e5:86:b0:39:
52:ea:e6:34:db:81:4c:16:24:04:22:f7:11:19:b2:
31:a1:7c:e6:40:ea:be:23:45:97:80:17:d7:2a:6a:
3e:70:4d:99:55:bf:66:08:36:c2:41:be:ff:33:79:
3b:01:b7:13:ba:4f:12:0e:13:a3:27:ec:1a:d4:ff:
98:eb:f9:16:9b:68:f8:7d:07:70:07:93:8f:77:59:
43:4f:b4:78:d5:da:c2:ea:3d:a3:31:34:bf:76:d5:
6b:8b:13:00:dc:ca:91:2a:94:fb:8d:57:c7:60:1a:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:09:5E:04:2B:BC:8D:7F:0B:C5:C8:F5:1C:D7:48:6E:71:19:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vd0JXgQrvI1_C8XI9RzXSG5xGUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.200.0/24
31.56.202.0/24
31.57.181.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.255.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1b:f5:3a:06:23:ee:f3:1b:86:62:7b:ab:7d:c6:13:f8:d5:
ca:87:d0:c0:9c:1d:ff:26:20:eb:d0:77:ab:ba:a9:81:08:f3:
1a:2b:54:1f:cf:fc:12:2f:56:84:47:5a:ae:01:42:0d:d5:47:
2e:0b:4b:aa:2c:68:24:e2:67:7f:42:b4:8b:c6:15:96:fc:da:
8e:b0:61:4f:f1:45:57:f2:7b:a5:09:b5:e7:9f:ce:36:66:e2:
56:48:51:ef:21:b6:2c:5e:5a:44:d0:17:ec:52:7c:ce:9a:43:
69:7f:ec:30:fe:a8:05:16:eb:84:cc:ef:06:7e:4d:81:44:6e:
bc:bc:a0:f3:fd:74:7c:b9:67:86:75:d8:31:da:27:c9:07:aa:
2c:9a:a6:89:6c:da:15:f0:94:f1:bb:a8:90:9a:fd:6c:bd:23:
d7:56:a4:1c:74:12:c2:2c:68:cd:82:79:7e:94:25:72:5f:60:
3c:f1:13:7b:02:5b:e7:7b:9d:47:05:17:77:10:13:ca:49:c7:
e0:25:c7:da:b4:7c:65:10:05:ed:97:11:06:ba:c1:ce:0f:d3:
6d:3d:92:4d:3a:d6:b5:74:d4:c4:b7:b1:54:32:49:ea:2a:c9:
35:a3:1a:18:49:05:3f:80:c2:fe:bc:10:d6:5d:83:9d:ff:7b:
64:94:18:b1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQoI3aXP2xHs4Io6PoD7qr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWRkMDk1ZTA0MmJiYzhkN2YwYmM1YzhmNTFjZDc0ODZlNzExOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63biZpl0iM574rFvmmkYKOy4zo5E
NKqqSBW5vuQw+pF61kIavm5RQbGQNVVZgV8vQzVYYyAvz4mwireLVvxbIO2Tyy3t
fIyvM5ioUE8IqvHkt4hO8b0viKORny9usObohhE10vzAbUasz5PJRzAPa30mFJbV
mfMblS+ZNWXkabpWJQ9RowOZsQEIJUqJ5b5YyuWGsDlS6uY024FMFiQEIvcRGbIx
oXzmQOq+I0WXgBfXKmo+cE2ZVb9mCDbCQb7/M3k7AbcTuk8SDhOjJ+wa1P+Y6/kW
m2j4fQdwB5OPd1lDT7R41drC6j2jMTS/dtVrixMA3MqRKpT7jVfHYBoHrwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFFXdCV4EK7yNfwvFyPUc10hucRlFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVmQwSlhnUXJ2STFfQzhYSTlSelhTRzV4R1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHzjIAwQA
HzjKAwQAHzm1AwQAHznXAwQAHznbAwQAHzndAwQAHzn/MA0GCSqGSIb3DQEBCwUA
A4IBAQCQG/U6BiPu8xuGYnurfcYT+NXKh9DAnB3/JiDr0HeruqmBCPMaK1Qfz/wS
L1aER1quAUIN1UcuC0uqLGgk4md/QrSLxhWW/NqOsGFP8UVX8nulCbXnn842ZuJW
SFHvIbYsXlpE0BfsUnzOmkNpf+ww/qgFFuuEzO8Gfk2BRG68vKDz/XR8uWeGddgx
2ifJB6osmqaJbNoV8JTxu6iQmv1svSPXVqQcdBLCLGjNgnl+lCVyX2A88RN7Alvn
e51HBRd3EBPKScfgJcfatHxlEAXtlxEGusHOD9NtPZJNOta1dNTEt7FUMknqKsk1
oxoYSQU/gML+vBDWXYOd/3tklBix
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:12:15 2025 by rpki-client