Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WJusXiBKSN379qgdSI13OLzfVyY.roa
File: WJusXiBKSN379qgdSI13OLzfVyY.roa (raw, json)
Hash identifier: +wKQ91uLtxhI7tux2Y1IOiR8dPHRG/yN4LIwQJ0LXYc=
Subject key identifier: 58:9B:AC:5E:20:4A:48:DD:FB:F6:A8:1D:48:8D:77:38:BC:DF:57:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A4F0A911FC166B88A561DC2DEFB0887E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WJusXiBKSN379qgdSI13OLzfVyY.roa
Signing time: Mon 17 Mar 2025 16:29:50 +0000
ROA not before: Mon 17 Mar 2025 16:29:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20470
IP address blocks: 31.58.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:f0:a9:11:fc:16:6b:88:a5:61:dc:2d:ef:b0:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 16:29:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589bac5e204a48ddfbf6a81d488d7738bcdf5726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:e1:8d:eb:90:fb:da:e5:97:09:fc:42:14:
d2:7a:5d:d5:c4:d7:e9:8c:0e:99:83:df:1f:ca:76:
9d:a5:d0:03:71:e3:ba:8c:e4:54:a6:a2:c9:55:37:
06:ac:28:7f:7d:15:74:73:c4:f0:3e:be:b9:20:86:
6f:3e:98:12:2b:44:2b:4f:d6:b8:ca:d9:70:88:a8:
2c:40:be:d0:1e:b4:d5:6c:76:17:e7:ef:35:fd:b4:
ea:bc:f7:19:b6:d5:de:c8:a3:de:b2:ec:74:bf:3d:
7f:c1:1e:6e:7a:f9:aa:dd:35:6e:85:2c:dc:51:df:
29:19:d3:e7:68:55:16:5a:df:01:22:cc:97:da:4b:
45:b4:2e:19:7c:7c:fd:84:5b:c2:ef:b7:3a:81:bf:
55:db:e1:bd:87:ff:7f:fc:38:49:aa:18:93:21:04:
7c:a1:f3:72:7d:9a:32:a3:f9:1d:03:48:2f:c9:ec:
64:39:46:7f:b5:35:e5:c0:18:ba:4c:bf:f6:ab:89:
02:80:37:ba:dd:28:38:28:86:0a:f2:5a:34:cd:9a:
ea:fe:3e:4b:7a:e6:5d:7f:8a:41:15:34:66:52:db:
9a:b1:5f:ac:8a:26:d9:bf:66:c7:a2:f4:81:cf:02:
0b:da:bb:0b:04:c6:06:e4:71:e3:55:57:9a:a8:6f:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:AC:5E:20:4A:48:DD:FB:F6:A8:1D:48:8D:77:38:BC:DF:57:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WJusXiBKSN379qgdSI13OLzfVyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:8f:8c:f9:9e:fb:c7:d6:97:a6:a3:c9:c2:12:15:41:5e:d1:
8a:11:7c:6c:b2:56:66:0a:fa:f4:4d:4d:9b:36:83:fc:43:d5:
94:ca:0e:fc:e4:06:7a:ff:e5:8b:c6:ef:55:89:b3:7b:04:ee:
99:74:c6:af:79:a8:f8:e4:ea:b5:87:5c:6f:ee:d3:3d:4e:d5:
c5:e2:33:4a:05:c1:9a:a5:28:34:68:9d:c2:9d:48:d8:97:a6:
3f:d9:95:9f:37:97:28:96:f5:63:e3:08:93:b3:8c:68:14:13:
fd:a4:c2:18:47:48:18:08:39:54:4d:35:36:f3:b6:15:75:1d:
a2:94:b9:58:47:55:26:a0:63:a8:bb:6a:5b:f4:23:65:47:e7:
45:db:f7:98:e3:1f:74:e9:cd:d5:e4:b0:e8:7c:d4:ce:b3:e1:
55:65:eb:51:f7:ac:e5:6a:68:72:50:ed:0a:5e:4e:84:11:ec:
a5:16:ac:5b:81:93:96:f4:e5:7b:1a:4c:c0:de:33:83:a0:37:
59:e5:18:51:b2:a4:ab:b3:bb:9f:72:a7:b4:88:fe:f5:19:49:
40:81:7c:72:0a:6f:de:f7:39:c8:80:c1:aa:91:f7:86:52:17:
aa:2e:84:4d:7c:8b:27:4a:b0:6a:bc:b3:a7:ac:62:f3:3e:82:
12:9c:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:49 2025 by rpki-client