Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boQshAAYb8llhjoMWG775DdhPpA.roa
File: boQshAAYb8llhjoMWG775DdhPpA.roa (raw, json)
Hash identifier: sLmsXZvTEoV59+uVVBvE9iXMp94wN9hPOpMjB1tNBi4=
Subject key identifier: 6E:84:2C:84:00:18:6F:C9:65:86:3A:0C:58:6E:FB:E4:37:61:3E:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282369BF5492080CA9DAD89291490844
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boQshAAYb8llhjoMWG775DdhPpA.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213660
IP address blocks: 31.57.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:69:bf:54:92:08:0c:a9:da:d8:92:91:49:08:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e842c8400186fc965863a0c586efbe437613e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:16:f0:6b:29:2f:be:35:18:83:e2:87:92:
b5:e2:d7:b8:81:6a:c5:08:9a:ad:c6:b3:08:22:2e:
e1:57:f5:c1:3a:a5:c5:2b:2f:03:f8:2a:eb:4e:eb:
a3:04:02:7e:b9:b0:37:df:41:5d:6c:68:4c:37:7a:
82:b7:1b:72:61:a7:5c:45:f9:f5:74:27:1f:d9:ee:
0f:75:b1:9a:04:07:cf:62:4c:e4:cd:f0:49:01:c6:
30:36:7c:fc:18:ed:f2:c6:24:be:2f:a5:8a:10:b8:
fa:cc:7a:69:ba:78:7e:e8:8f:ed:20:c5:f5:76:f2:
00:e4:39:48:e6:bd:be:61:d6:cd:2b:db:b6:90:8f:
40:73:ab:db:f9:0e:20:75:1a:8f:27:21:59:c8:91:
73:43:f6:58:a4:25:0e:9b:96:fe:42:5f:61:6b:94:
e9:0d:55:f1:ea:b0:ca:b7:c1:be:0e:d3:b0:8c:08:
0a:78:11:fb:a5:a1:c5:b0:35:98:56:62:9c:84:7f:
1a:60:f6:ee:40:69:2f:50:4b:93:c4:94:f8:a9:02:
62:85:ae:96:11:1e:3c:0b:63:c5:da:b3:78:f9:e0:
3b:59:75:95:82:f5:11:ca:26:1c:f7:63:ed:5e:df:
22:d3:91:d7:8a:32:c8:8a:50:9f:ca:a3:13:48:04:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:2C:84:00:18:6F:C9:65:86:3A:0C:58:6E:FB:E4:37:61:3E:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boQshAAYb8llhjoMWG775DdhPpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6d:d0:bc:c7:11:7e:3a:a2:95:d5:58:eb:77:c7:5c:ce:cb:
3e:95:93:b9:6a:1f:e6:5a:c1:60:7b:6e:87:39:82:7f:67:b7:
87:57:29:03:fe:3b:0e:a1:56:05:3a:43:c0:de:ff:55:ae:23:
f6:cc:28:fb:83:48:ff:2a:20:a8:fa:d9:f3:d5:ec:bc:eb:15:
7c:5e:54:b7:2c:fc:49:94:d6:8e:fa:57:15:7e:ab:d0:d9:6c:
b1:38:bc:f2:ac:2d:a7:7b:1a:fe:38:52:0c:d7:9b:51:48:81:
c5:88:7a:a4:f9:fa:be:c8:41:aa:9c:87:be:a1:06:b8:86:d7:
d1:ec:55:ae:6b:aa:9c:ea:cc:ff:74:72:41:c6:b2:9f:4e:54:
d1:56:07:1a:4d:9f:6f:4c:c4:45:fd:eb:b6:4e:35:ba:4c:2f:
06:06:4e:0b:e8:0d:ff:98:46:f9:6a:cf:23:2d:b4:e8:00:02:
31:09:57:22:a5:5b:50:d4:34:5a:17:5e:eb:15:d1:d6:69:80:
d6:2c:d7:9e:9b:56:0b:96:12:03:7e:f6:18:08:8f:d6:27:07:
5c:b1:1f:4e:09:1b:90:42:1e:dd:4e:0a:7b:86:05:58:fc:9f:
7a:53:1c:4a:7c:c5:47:f6:ae:40:0b:d3:cd:72:10:0b:e6:07:
6e:f1:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:07:48 2025 by rpki-client