Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfeoFn_vze940hc17r5lxkBURGs.roa
File: bfeoFn_vze940hc17r5lxkBURGs.roa (raw, json)
Hash identifier: og69mhrseRPLgMv5daWcRLf6i0HpPr3c5xLzBZ3bMQs=
Subject key identifier: 6D:F7:A8:16:7F:EF:CD:EF:78:D2:17:35:EE:BE:65:C6:40:54:44:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282366077C539C1840C77947A3BB9368
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfeoFn_vze940hc17r5lxkBURGs.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211114
IP address blocks: 31.57.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:66:07:7c:53:9c:18:40:c7:79:47:a3:bb:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df7a8167fefcdef78d21735eebe65c64054446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:00:6e:e3:c5:a4:a2:77:4a:05:e5:56:36:
5b:02:7e:f9:6a:3e:c0:89:f7:ee:7c:f3:8e:af:b9:
da:c7:20:a0:77:e1:fe:b2:d7:95:74:96:35:03:78:
6d:72:a1:b7:58:75:bc:4b:59:c2:de:b5:2c:f9:59:
83:c2:7c:47:ce:03:3b:d1:b6:5a:7d:11:e4:7f:da:
a0:21:07:31:47:fa:6a:60:8f:1f:fe:29:7a:c6:00:
96:31:bc:3f:28:eb:3d:b1:b1:c2:bd:e1:5d:a9:a9:
83:47:18:ca:d3:2f:2a:1d:b4:3d:86:48:74:d4:cb:
4a:a8:a4:45:16:33:32:ed:d9:88:b0:23:9c:fd:54:
7d:56:3e:cb:4b:29:10:fc:fb:8b:d3:71:e0:b9:ac:
87:12:ca:2f:40:bc:e5:18:0e:1a:5b:79:f9:38:7b:
8f:9e:0f:3b:df:5b:ee:c9:f2:e8:95:21:d7:96:40:
59:4a:c4:97:0f:1b:c2:15:fe:52:24:9f:94:c7:35:
2e:10:f4:73:58:c3:1f:a6:df:1a:86:64:25:ff:b7:
1d:2a:d5:03:43:44:97:d5:29:99:9e:04:76:11:2c:
3b:fc:11:d2:df:81:02:9f:3e:c7:f6:8f:a4:a4:93:
1d:08:c5:bd:ee:76:45:01:ef:08:0b:3c:8d:3f:ca:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:A8:16:7F:EF:CD:EF:78:D2:17:35:EE:BE:65:C6:40:54:44:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bfeoFn_vze940hc17r5lxkBURGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.225.0/24
Signature Algorithm: sha256WithRSAEncryption
77:26:18:08:0e:52:8e:b9:5c:52:3f:a6:41:95:34:1e:9e:aa:
3d:16:a8:63:30:e3:e2:13:ee:78:4d:3c:e4:22:9a:a4:d4:30:
1f:c5:2e:85:8f:12:ee:f4:b9:ae:92:a1:5c:30:8d:5e:d5:e0:
fb:62:b6:d7:96:ce:13:a9:4b:4c:68:12:1a:9e:d5:51:4d:7d:
60:e9:6b:2c:ad:43:2c:42:8c:ff:da:d4:0a:79:48:14:53:8b:
37:6e:4e:e7:4c:0e:8d:92:1a:4a:ea:ca:e8:28:26:88:e8:ce:
e0:6f:0f:c4:f8:6b:04:82:34:6e:37:80:ea:fa:9c:53:a5:16:
12:08:10:16:ce:cc:bf:80:1f:a6:46:05:cc:41:c6:4d:f8:23:
01:aa:c2:5b:47:30:2a:3e:35:29:e5:81:f8:b8:01:e5:07:9e:
e3:1d:a3:9e:be:43:6c:18:56:ee:4d:a5:1d:03:0d:97:0e:33:
29:24:a9:23:a1:1a:d4:c7:1d:e5:61:d6:6c:e2:05:31:0e:bb:
3b:1a:09:db:46:c1:b4:ee:f2:f5:9c:3a:05:17:be:2c:0e:e7:
51:12:57:74:42:98:7f:5f:73:6a:df:24:e4:4a:f5:c6:d7:7e:
f6:f4:05:e3:ff:5a:cd:f5:6f:de:27:a9:20:10:d8:ba:ba:92:
00:83:99:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI2YHfFOcGEDHeUeju5NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGY3YTgxNjdmZWZjZGVmNzhkMjE3MzVlZWJlNjVjNjQwNTQ0NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrUAbuPFpKJ3SgXlVjZbAn75aj7A
iffufPOOr7naxyCgd+H+steVdJY1A3htcqG3WHW8S1nC3rUs+VmDwnxHzgM70bZa
fRHkf9qgIQcxR/pqYI8f/il6xgCWMbw/KOs9sbHCveFdqamDRxjK0y8qHbQ9hkh0
1MtKqKRFFjMy7dmIsCOc/VR9Vj7LSykQ/PuL03HguayHEsovQLzlGA4aW3n5OHuP
ng8731vuyfLolSHXlkBZSsSXDxvCFf5SJJ+UxzUuEPRzWMMfpt8ahmQl/7cdKtUD
Q0SX1SmZngR2ESw7/BHS34ECnz7H9o+kpJMdCMW97nZFAe8ICzyNP8qu3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG33qBZ/783veNIXNe6+ZcZAVERrMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYmZlb0ZuX3Z6ZTk0MGhjMTdyNWx4a0JVUkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznhMA0G
CSqGSIb3DQEBCwUAA4IBAQB3JhgIDlKOuVxSP6ZBlTQenqo9FqhjMOPiE+54TTzk
Ipqk1DAfxS6FjxLu9LmukqFcMI1e1eD7YrbXls4TqUtMaBIantVRTX1g6WssrUMs
Qoz/2tQKeUgUU4s3bk7nTA6NkhpK6sroKCaI6M7gbw/E+GsEgjRuN4Dq+pxTpRYS
CBAWzsy/gB+mRgXMQcZN+CMBqsJbRzAqPjUp5YH4uAHlB57jHaOevkNsGFbuTaUd
Aw2XDjMpJKkjoRrUxx3lYdZs4gUxDrs7GgnbRsG07vL1nDoFF74sDudREld0Qph/
X3Nq3yTkSvXG13729AXj/1rN9W/eJ6kgENi6upIAg5lK
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:06:36 2025 by rpki-client