Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dI0mVOetjV0VSrxQMEbCGQdzEjQ.roa
File: dI0mVOetjV0VSrxQMEbCGQdzEjQ.roa (raw, json)
Hash identifier: 83L+vfFnRR+fHeMO+sD5/8o3x4/E3C4mQrDa0gUyth0=
Subject key identifier: 74:8D:26:54:E7:AD:8D:5D:15:4A:BC:50:30:46:C2:19:07:73:12:34
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428234DDD5B3FB41A3B7AA0360E88DD08
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dI0mVOetjV0VSrxQMEbCGQdzEjQ.roa
Signing time: Thu 02 Jan 2025 17:49:49 +0000
ROA not before: Thu 02 Jan 2025 17:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61254
IP address blocks: 31.58.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4d:dd:5b:3f:b4:1a:3b:7a:a0:36:0e:88:dd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=748d2654e7ad8d5d154abc503046c21907731234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:c9:7e:a8:b9:a4:c2:03:67:2c:13:e5:1f:
49:d8:ee:ed:1b:e6:ab:09:0d:06:e5:ec:3c:1a:f5:
a8:b4:30:45:66:15:27:b5:e6:78:5b:42:49:fd:e9:
73:99:0c:fd:8b:99:27:9f:4c:be:0a:c0:e6:80:9e:
3c:0b:fd:91:15:7a:fd:fd:aa:c8:a0:a0:37:1c:da:
13:ed:64:c6:c2:1e:c7:f5:c6:3a:b1:11:bf:ad:75:
53:e5:8d:d6:2f:3b:09:01:40:ec:dc:d0:88:34:37:
3d:c8:96:80:f7:93:47:64:1d:45:8c:4f:58:79:73:
4b:e0:cb:97:15:ea:93:90:42:1d:9a:8f:7e:41:69:
d9:bc:10:07:1a:c3:56:d6:21:36:8c:64:f6:03:ce:
cb:4b:20:36:ed:1c:17:13:8e:f0:63:75:97:24:6b:
66:88:e2:32:1b:42:ca:66:2e:29:43:26:2f:a9:cc:
6d:be:c6:67:e6:32:58:a0:d5:cc:78:93:d6:c8:3f:
21:51:fb:81:eb:77:96:7a:2f:dc:9d:4f:87:cf:7c:
7b:c2:8b:93:48:a7:f4:a4:49:2e:b4:62:bd:64:f8:
b4:35:75:be:d6:7d:5d:48:d8:67:f1:db:09:53:16:
36:72:41:42:43:b8:bb:3f:32:cd:89:47:a6:b5:d0:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:26:54:E7:AD:8D:5D:15:4A:BC:50:30:46:C2:19:07:73:12:34
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dI0mVOetjV0VSrxQMEbCGQdzEjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:42:e8:34:e3:cf:b8:50:00:11:24:8a:ec:25:49:ac:35:ce:
9f:74:33:35:f6:6c:76:60:4d:2c:3e:89:b0:6c:9a:57:5e:1f:
78:06:f2:73:d1:fb:96:1d:21:a2:1a:df:c9:66:16:31:cb:cc:
25:24:d1:7a:ed:95:5c:0b:2b:93:18:62:ec:d6:d3:8e:27:20:
61:38:02:6c:02:90:de:de:86:d9:e0:ed:1e:66:b3:0a:cb:b9:
2e:bd:73:94:7a:83:51:5a:84:45:38:47:92:04:6a:30:c2:9e:
f1:48:7d:77:9e:4d:ec:20:83:08:6c:ac:14:cb:c7:4f:b6:ad:
55:1b:4c:b0:5a:15:48:f3:cb:31:76:04:49:0f:25:0d:b6:b1:
50:89:2e:1d:ee:15:82:5c:d3:75:d2:60:43:7e:f7:21:e0:17:
21:d2:03:e2:6c:a9:0a:67:68:ba:02:dd:dd:24:7c:9b:73:9f:
0c:63:c3:c6:06:c6:99:a8:b7:3b:f8:d3:4b:d3:6e:ea:bf:af:
3c:8f:f9:8d:30:b2:d4:c5:d4:79:b1:ab:73:2b:63:14:9b:95:
26:2c:3d:b1:98:d9:ff:53:68:8b:ff:59:09:8b:36:d0:82:8f:
ed:60:76:9d:f7:d8:91:4d:ec:c3:32:4f:bd:9c:83:3b:4b:85:
43:55:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:51:19 2025 by rpki-client