Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4gYubH0pxi4CDWI8KrgQsvMmgI.roa
File: W4gYubH0pxi4CDWI8KrgQsvMmgI.roa (raw, json)
Hash identifier: H7jjf34tt8fKdpTS9eogM8vADQHimTVQyapAcrgHrCg=
Subject key identifier: 5B:88:18:B9:B1:F4:A7:18:B8:08:35:88:F0:AA:E0:42:CB:CC:9A:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194CA8B7E0AC2121F59A75608B6F2E6F776
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4gYubH0pxi4CDWI8KrgQsvMmgI.roa
Signing time: Mon 03 Feb 2025 06:42:06 +0000
ROA not before: Mon 03 Feb 2025 06:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 31.56.7.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.58.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:8b:7e:0a:c2:12:1f:59:a7:56:08:b6:f2:e6:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 3 06:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b8818b9b1f4a718b8083588f0aae042cbcc9a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:d8:64:71:0a:28:d6:e6:ce:2a:db:34:5d:
07:29:4f:96:54:8c:2c:dc:9d:e6:fd:12:5c:95:80:
21:dc:6d:3c:eb:eb:30:a9:49:71:55:f3:bf:fd:9e:
db:b5:08:46:a8:49:63:8e:47:18:55:c6:63:05:82:
d4:d2:02:3c:52:a0:b9:39:b7:c2:3c:07:6c:d5:37:
7a:03:48:84:e2:f5:c0:f7:05:81:ff:ec:85:5d:95:
22:58:c3:9a:b7:85:4c:b2:23:d9:7f:67:5c:c9:6a:
da:4d:83:d7:c0:32:f4:07:ce:b7:e1:80:67:8c:05:
71:f0:aa:44:d3:1e:85:57:7b:8b:e4:35:6a:0a:80:
53:57:2a:a7:24:04:13:75:be:eb:93:7c:4f:59:44:
e4:3c:4f:ba:69:0d:78:44:dc:6c:6b:20:4d:d6:32:
83:6f:73:9f:d0:0e:c3:03:1f:0e:76:a1:02:9f:4d:
23:12:47:a9:2d:bf:bf:c8:73:fd:3a:38:36:98:dc:
4e:0f:78:d7:0f:71:a9:8c:8f:3c:b1:20:c3:6f:fd:
bd:96:11:e7:7f:24:88:f8:a7:9b:66:68:5b:ff:b2:
6a:b3:ce:f0:46:55:c5:7c:28:e8:4f:1b:af:59:82:
5d:03:e7:14:b4:0e:a0:02:90:07:ae:dd:e2:88:47:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:18:B9:B1:F4:A7:18:B8:08:35:88:F0:AA:E0:42:CB:CC:9A:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4gYubH0pxi4CDWI8KrgQsvMmgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.7.0/24
31.56.26.0/24
31.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1f:b4:0d:fc:ff:58:c4:10:b2:b2:fb:2c:39:97:a3:9d:5c:
79:d3:4e:39:f4:8c:53:13:5f:7d:9a:7d:3c:9b:33:82:7b:9f:
e4:ed:18:fc:03:79:50:48:ee:b4:96:6e:9e:06:c8:c2:35:f8:
cf:f5:78:75:05:12:94:b5:64:25:1b:77:a7:2c:61:b4:70:f3:
4b:3b:25:26:1c:b7:1d:fc:1f:20:8c:8b:1a:37:46:e2:1c:22:
84:54:10:ce:cb:ab:96:ef:4a:f1:d9:90:d3:2d:90:3b:67:83:
06:56:03:44:ae:e1:20:41:3f:63:7c:a9:eb:c2:41:ab:b8:c0:
93:d2:7a:be:84:df:30:20:dc:0b:e9:d6:f1:e0:9c:76:f3:df:
fa:aa:93:17:73:50:7b:ed:1d:55:f0:fb:77:01:68:a5:fd:75:
97:4a:a4:36:bf:41:45:54:51:42:c8:d1:bb:42:58:5b:a3:bf:
94:55:0d:41:a6:1c:39:30:36:54:d6:b5:a1:a6:cb:cb:fd:98:
d9:5f:6e:94:63:ff:e4:35:55:b1:6b:95:88:b7:8a:28:94:f7:
6d:4d:08:e1:b9:98:02:03:2d:e5:7e:47:9d:e3:58:a0:f6:f0:
83:b5:09:56:58:1b:e5:a6:c6:0e:00:7e:57:d6:67:1a:fd:6d:
9c:35:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:11 2025 by rpki-client