Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_mumEac5A-6KKRKFEIsY1MAyJzg.roa
File: _mumEac5A-6KKRKFEIsY1MAyJzg.roa (raw, json)
Hash identifier: t1MOyJ9LyZ21wqPJFfHf9m+6ULlEyAcAsYic+1hI9DE=
Subject key identifier: FE:6B:A6:11:A7:39:03:EE:8A:29:12:85:10:8B:18:D4:C0:32:27:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194733CF152E238A5FE635389161F63163D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_mumEac5A-6KKRKFEIsY1MAyJzg.roa
Signing time: Fri 17 Jan 2025 07:49:21 +0000
ROA not before: Fri 17 Jan 2025 07:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.115.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.193.0/24 maxlen: 24
31.57.195.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.57.234.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:3c:f1:52:e2:38:a5:fe:63:53:89:16:1f:63:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 17 07:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6ba611a73903ee8a291285108b18d4c0322738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:6a:1e:98:8d:64:51:05:02:8c:8c:eb:3f:
a5:cc:8d:e3:98:f4:29:3d:c4:14:a7:a4:c6:21:1f:
f2:e8:9b:2f:23:f7:fe:d9:af:e0:6b:bc:96:cd:d1:
76:4f:7a:15:90:2b:be:bb:a4:bc:d7:66:dd:56:a1:
a9:5e:e6:eb:f0:4f:09:81:a1:7d:4e:2d:1f:44:2a:
2b:bf:1f:68:6b:c7:02:f8:f2:18:5e:9b:57:dd:30:
8e:ee:ff:5f:35:42:6d:49:5e:57:12:40:6d:21:4f:
cc:6a:c0:da:38:af:ab:b4:50:dd:c8:33:17:f4:a0:
6d:74:a1:73:8e:87:2e:a7:db:e6:a6:41:df:70:f3:
31:d7:28:cc:ec:b5:a3:ad:ab:1f:41:5f:a8:a9:8e:
4d:79:68:05:e2:9f:8f:55:9f:4e:11:54:b3:db:24:
37:a2:29:9e:53:e1:62:c7:1b:36:b7:89:a1:11:a7:
a9:79:ba:e3:22:8d:c1:24:f4:21:19:e0:ef:5e:c1:
63:ff:47:a3:9a:96:51:1c:c9:ae:7f:ba:6e:b9:c4:
b7:24:49:c9:2c:35:1c:64:bd:ee:a1:cc:d5:d1:ca:
6f:db:be:9f:8c:c7:7c:cc:bd:d3:73:45:2f:4c:4b:
83:5d:65:47:20:ba:d1:b9:33:70:fb:c7:8d:b1:6e:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:A6:11:A7:39:03:EE:8A:29:12:85:10:8B:18:D4:C0:32:27:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_mumEac5A-6KKRKFEIsY1MAyJzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.115.0-31.56.116.255
31.56.125.0/24
31.56.127.0/24
31.57.192.0/23
31.57.195.0/24
31.57.232.0/22
31.58.145.0/24
31.58.148.0/23
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
28:60:51:d4:5b:c6:a2:80:b8:b9:ba:03:32:20:21:ac:6f:d5:
8f:3e:4f:e5:ae:b5:9f:38:1f:34:2e:87:96:27:60:44:80:54:
bd:3a:45:04:df:b5:34:f2:0f:3b:1f:f7:10:1d:b9:db:0e:2a:
be:be:2d:ff:20:ae:ff:5f:0c:47:76:39:92:77:c7:0b:f8:5e:
cb:70:8e:36:a5:7e:42:15:63:80:c2:85:63:c0:62:cd:66:63:
44:7a:30:c4:3b:a8:33:a7:19:e7:ef:75:30:b8:fb:ec:5f:b4:
bc:0f:9a:f0:a0:8a:e0:0d:3d:d8:76:e1:e8:79:4d:13:ef:d2:
a1:a7:c0:bc:a0:63:c5:7a:59:c7:c9:46:c5:e8:35:ad:7c:39:
49:36:b4:52:41:df:70:ab:b4:15:97:3b:c1:4e:c9:79:fe:a6:
84:26:80:16:d2:41:e0:48:89:7b:a8:df:15:97:fe:60:d8:7d:
14:d7:c8:6d:97:99:b2:b0:80:4c:6b:be:67:05:a4:e6:9f:83:
24:08:a0:10:8f:08:e5:52:11:6d:ad:81:58:cf:21:9c:c6:88:
09:69:4a:3d:82:bf:4a:db:56:f7:f1:7b:f8:c5:01:f7:0b:ed:
15:06:51:58:cb:03:d1:75:a7:75:2f:83:07:23:69:fe:bd:f5:
2a:39:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:57:14 2025 by rpki-client