Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cyZRvc9l0o8GEaTir9LxtDhJhBA.roa
File: cyZRvc9l0o8GEaTir9LxtDhJhBA.roa (raw, json)
Hash identifier: qI1K/WrIKAKEyRKY7ibXDHIIsf/B87DdvfoWBKvE0rg=
Subject key identifier: 73:26:51:BD:CF:65:D2:8F:06:11:A4:E2:AF:D2:F1:B4:38:49:84:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282386AAB036C147732021718CC59129
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cyZRvc9l0o8GEaTir9LxtDhJhBA.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270564
IP address blocks: 31.56.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:86:aa:b0:36:c1:47:73:20:21:71:8c:c5:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=732651bdcf65d28f0611a4e2afd2f1b438498410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:7f:52:cb:73:71:e7:40:e3:8e:a8:3f:91:
9a:03:b8:70:29:19:fc:34:a5:e9:ef:8b:ca:4e:27:
0c:f8:ab:b1:ae:9f:bd:e4:25:f6:1b:e9:93:f9:c0:
58:45:28:01:c0:80:5e:89:a3:17:db:f2:6d:69:0e:
a4:ec:b4:bf:81:7d:15:25:8d:69:6b:a3:14:3e:31:
61:df:f8:63:80:71:22:61:ac:07:44:32:64:3d:9c:
46:ef:2a:40:f1:0b:20:66:29:09:d6:3d:d9:2e:98:
d1:c5:13:4e:45:b2:77:a9:e3:3e:ee:9d:24:26:97:
30:3d:7c:18:e0:1b:a8:e4:ca:f2:74:77:07:f8:80:
ad:dc:84:85:5d:64:cd:fe:5b:b9:38:1e:a1:ab:47:
25:9f:d7:cf:5f:cb:85:57:78:37:15:ea:b4:c7:6e:
7c:67:84:c9:c5:69:ff:d9:2e:87:94:2b:30:f7:a3:
08:2d:e4:91:52:b1:ac:e0:98:04:f2:95:16:a0:64:
6e:ec:82:08:c2:8c:3c:bb:a4:4a:98:42:33:ee:28:
e2:9a:f9:f3:e6:65:0d:20:a3:08:74:4b:f6:66:b0:
0a:68:98:8d:2a:52:be:90:97:ec:0e:98:c6:6f:23:
f3:f3:90:bd:c1:59:65:8e:4c:1c:5b:d7:6a:3b:ed:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:51:BD:CF:65:D2:8F:06:11:A4:E2:AF:D2:F1:B4:38:49:84:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cyZRvc9l0o8GEaTir9LxtDhJhBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:96:58:d5:d3:a3:ac:b4:72:27:6e:e5:3d:e4:4c:83:24:71:
1a:93:ac:70:4e:14:a3:2f:4c:f0:e9:9d:e7:29:7b:01:f7:cb:
45:af:bb:6c:e0:29:a5:df:20:1c:1a:d1:49:7b:20:ff:67:57:
aa:34:cc:d1:78:30:dd:81:77:d1:48:02:01:09:48:0f:49:c6:
9f:9e:8e:34:34:d0:dd:1f:7c:9c:c8:48:97:7e:89:41:7b:24:
94:f7:48:99:9b:b7:cb:45:aa:fe:2d:c7:7d:24:2d:70:ee:9b:
9c:9f:d2:e1:6c:c0:03:f0:dc:71:61:0d:1c:7c:9f:b5:54:1c:
25:d7:65:85:55:0b:da:69:a6:df:d1:14:96:bd:30:11:a5:8e:
65:ad:d2:a3:28:26:fd:08:73:27:92:2f:a5:00:8e:19:00:16:
7b:d2:d4:ef:6b:e2:89:af:74:4e:83:08:61:28:87:28:b4:dd:
a1:71:64:e7:c5:3d:f9:0e:ef:1a:89:83:4a:ee:4a:c7:49:27:
a4:a4:c7:1d:bc:d4:91:92:3b:b8:cb:63:c1:37:a5:d3:c4:0a:
ed:26:c8:91:ec:83:75:b9:04:a6:b6:9b:c5:50:59:f7:d7:45:
26:58:30:e3:93:13:bd:85:04:38:54:db:1b:ce:b9:14:20:6a:
ca:35:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:00 2025 by rpki-client