Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZQYf_xaFt4c4zCkBMtefZJN-XiA.roa
File: ZQYf_xaFt4c4zCkBMtefZJN-XiA.roa (raw, json)
Hash identifier: MgKCxsTd79wCMUNH36KR4KGIscnBtBgNkqrsdR9/GXY=
Subject key identifier: 65:06:1F:FF:16:85:B7:87:38:CC:29:01:32:D7:9F:64:93:7E:5E:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282362ED8533ECDA565D6328B7C2CD01
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZQYf_xaFt4c4zCkBMtefZJN-XiA.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 31.58.18.0/24 maxlen: 24
31.58.22.0/24 maxlen: 24
31.58.28.0/24 maxlen: 24
31.58.32.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.20.0/24 maxlen: 24
31.59.21.0/24 maxlen: 24
31.59.27.0/24 maxlen: 24
31.59.28.0/24 maxlen: 24
31.59.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:62:ed:85:33:ec:da:56:5d:63:28:b7:c2:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65061fff1685b78738cc290132d79f64937e5e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:e0:a3:f2:42:93:c7:69:37:46:bf:1f:9c:
71:1e:de:16:db:1d:cf:39:50:55:5c:91:c7:59:36:
dc:1d:1b:f6:7d:3a:53:d0:68:1b:23:06:08:f4:f1:
48:fe:0b:57:1e:2d:30:93:ea:b4:bf:ce:7e:d1:a7:
b9:c2:c5:d0:e5:d5:5e:80:06:6b:49:92:ed:2e:40:
08:42:94:5d:ef:03:01:8a:86:22:69:3a:f9:aa:66:
5c:c1:e1:38:a3:91:a3:c9:78:0a:6b:89:3c:0f:9b:
7f:e1:cb:77:ce:00:a6:c2:52:e1:5c:5d:b7:e3:38:
3f:33:9e:14:8a:03:b0:04:f4:fb:96:29:a8:b3:bf:
0f:27:83:8a:1f:b2:de:b1:e4:e6:ef:6c:7c:56:ed:
cf:01:5c:90:55:5b:ba:db:2d:be:5d:79:63:c8:30:
f2:32:44:72:7a:88:01:22:b0:bd:ec:c8:cb:7d:16:
5b:6e:3f:aa:10:38:df:ad:1b:fc:25:e1:6f:cb:b5:
22:5e:09:81:de:a9:23:34:29:77:e9:4b:e7:4f:62:
b7:49:82:30:ae:0a:5f:1a:f9:5d:dd:0e:79:e3:8f:
55:b7:ef:4f:de:78:67:ac:ad:cb:2d:8e:8a:65:f5:
ca:c5:f4:f1:33:2b:2f:50:25:c6:a1:e5:02:34:ec:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:1F:FF:16:85:B7:87:38:CC:29:01:32:D7:9F:64:93:7E:5E:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZQYf_xaFt4c4zCkBMtefZJN-XiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.18.0/24
31.58.22.0/24
31.58.28.0/24
31.58.32.0/24
31.59.15.0/24
31.59.20.0/23
31.59.27.0-31.59.28.255
31.59.33.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ba:05:8c:9f:c0:ca:ed:9e:ab:84:a6:8b:fd:45:85:e0:c6:
a7:35:02:17:75:d7:19:42:17:3b:eb:8e:a0:2f:24:f6:df:38:
7a:61:3f:55:b5:77:a4:d5:52:3d:3e:0e:87:08:22:f6:e6:84:
d5:8d:b6:70:64:d8:a9:4a:2e:62:ab:dd:90:26:94:99:98:a4:
43:89:ea:5c:e2:e4:dd:e9:76:57:a6:c2:06:8c:96:4b:c6:27:
b3:dc:94:90:46:e6:ca:84:6c:ce:ac:b7:c8:cd:cc:c2:a4:fe:
4e:5c:ac:fe:d1:27:fe:4f:5c:1f:6b:76:a3:ee:08:69:0f:6a:
8f:14:a4:d8:70:56:9a:0c:3b:79:a2:5f:1a:4c:21:63:6f:4f:
be:18:8c:7a:c2:32:8e:0b:08:da:d3:67:a7:ec:d3:fa:e8:41:
a2:4f:7e:5c:88:74:d6:d4:13:a7:c1:14:4b:b2:a5:b7:84:95:
57:0d:5f:c6:bd:ad:f4:35:47:51:16:1d:ac:c0:1c:64:a8:04:
db:1e:11:3e:e3:5e:c1:25:f0:a8:5d:43:b0:79:4d:60:b5:d2:
77:31:c3:37:2a:3c:36:34:ed:b8:f6:9b:0f:04:8c:17:0f:0f:
6d:f2:ae:54:59:48:d8:ea:84:af:62:fa:d0:ae:b7:33:2e:68:
49:c5:81:b5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQoI2LthTPs2lZdYyi3ws0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTA2MWZmZjE2ODViNzg3MzhjYzI5MDEzMmQ3OWY2NDkzN2U1ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJDgo/JCk8dpN0a/H5xxHt4W2x3P
OVBVXJHHWTbcHRv2fTpT0GgbIwYI9PFI/gtXHi0wk+q0v85+0ae5wsXQ5dVegAZr
SZLtLkAIQpRd7wMBioYiaTr5qmZcweE4o5GjyXgKa4k8D5t/4ct3zgCmwlLhXF23
4zg/M54UigOwBPT7limos78PJ4OKH7LeseTm72x8Vu3PAVyQVVu62y2+XXljyDDy
MkRyeogBIrC97MjLfRZbbj+qEDjfrRv8JeFvy7UiXgmB3qkjNCl36UvnT2K3SYIw
rgpfGvld3Q55449Vt+9P3nhnrK3LLY6KZfXKxfTxMysvUCXGoeUCNOwACwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGUGH/8WhbeHOMwpATLXn2STfl4gMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWlFZZl94YUZ0NGM0ekNrQk10ZWZaSk4tWGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAHzoSAwQA
HzoWAwQAHzocAwQAHzogAwQAHzsPAwQBHzsUMAwDBAAfOxsDBAAfOxwDBAAfOyEw
DQYJKoZIhvcNAQELBQADggEBABO6BYyfwMrtnquEpov9RYXgxqc1Ahd11xlCFzvr
jqAvJPbfOHphP1W1d6TVUj0+DocIIvbmhNWNtnBk2KlKLmKr3ZAmlJmYpEOJ6lzi
5N3pdlemwgaMlkvGJ7PclJBG5sqEbM6st8jNzMKk/k5crP7RJ/5PXB9rdqPuCGkP
ao8UpNhwVpoMO3miXxpMIWNvT74YjHrCMo4LCNrTZ6fs0/roQaJPflyIdNbUE6fB
FEuypbeElVcNX8a9rfQ1R1EWHazAHGSoBNseET7jXsEl8KhdQ7B5TWC10ncxwzcq
PDY07bj2mw8EjBcPD23yrlRZSNjqhK9i+tCutzMuaEnFgbU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:59:15 2025 by rpki-client