Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e6j5HgWiWbypgta3xbUN4CNCdVw.roa
File: e6j5HgWiWbypgta3xbUN4CNCdVw.roa (raw, json)
Hash identifier: Gy+OHoKpUuzWqgoQ45kLsMrUO9qFu6Jv6zTfk2pkNnw=
Subject key identifier: 7B:A8:F9:1E:05:A2:59:BC:A9:82:D6:B7:C5:B5:0D:E0:23:42:75:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428236179918A27317CD21137215A60B1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e6j5HgWiWbypgta3xbUN4CNCdVw.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204755
IP address blocks: 31.56.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:61:79:91:8a:27:31:7c:d2:11:37:21:5a:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba8f91e05a259bca982d6b7c5b50de02342755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:70:f5:f9:a3:6f:c6:aa:07:c2:56:58:55:
34:4c:c9:55:24:c7:b6:5e:ae:f4:49:fa:11:24:eb:
f7:94:64:17:97:b9:5b:e1:42:60:04:18:17:55:66:
2b:cd:12:c3:ba:d2:f4:dd:19:74:22:f4:31:f3:33:
c9:78:ab:6d:8f:7e:3c:ea:eb:30:2c:8d:e5:bd:0b:
e9:dc:e4:72:f6:62:11:b4:93:62:cd:83:aa:27:2f:
25:80:f2:24:ed:1f:d2:65:e2:23:da:b4:c1:86:73:
b2:47:16:fe:46:1c:54:36:4a:09:87:42:14:37:94:
3e:17:98:e1:db:d0:28:04:ce:11:0a:a0:ff:46:a1:
fc:cd:c2:e9:a6:03:ec:50:d2:7e:ee:62:d8:e2:6a:
25:38:59:27:de:9e:34:6d:e4:3a:d0:b7:97:22:11:
b8:46:58:3b:6a:4c:e7:e8:0d:b5:36:a0:a9:bb:a8:
f3:2a:a6:11:59:bf:e1:d8:08:61:92:f7:56:b4:a5:
d2:bf:9d:2d:51:ec:54:3f:e7:3f:b4:d9:c2:58:1f:
00:f2:6d:61:08:b6:15:f6:8b:1f:69:a0:b9:ff:9c:
e4:13:04:37:7c:6c:01:33:a0:b3:39:cd:ad:7f:fd:
cf:28:8f:cc:74:4c:b4:a8:9d:00:ab:92:d4:5f:70:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:F9:1E:05:A2:59:BC:A9:82:D6:B7:C5:B5:0D:E0:23:42:75:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e6j5HgWiWbypgta3xbUN4CNCdVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3e:7f:bb:9c:7d:d8:6a:d8:c2:45:85:7f:35:b2:ba:ab:59:
ff:38:aa:37:c1:c2:83:ec:9c:0c:ea:34:70:0b:15:23:3f:5e:
f2:ac:95:c2:1e:36:af:db:7e:e1:66:71:4a:6c:f9:3e:86:b4:
21:28:e6:86:bc:9e:e9:96:81:d2:ec:5e:b5:3b:01:1b:4e:2b:
13:70:32:66:e7:b5:65:cb:13:5e:0b:47:a2:d3:7a:b7:c1:72:
58:61:f5:05:36:d2:77:70:a1:94:50:41:7d:8f:dc:d6:64:f3:
12:a9:7d:5a:ab:a1:9b:48:28:d5:6e:93:2e:4b:6b:9b:3a:51:
5d:5b:f8:f5:94:c4:67:d7:c6:be:dc:54:32:2b:dc:98:62:85:
e5:7c:8a:93:4a:64:7f:b7:76:ee:c7:56:cf:f2:76:2e:37:75:
15:2b:da:73:5e:b9:4b:89:66:0a:e1:c0:90:54:aa:a1:9e:d9:
ca:a9:bd:c3:e1:2b:a1:6b:59:16:20:14:0f:1e:9e:ea:e1:fc:
51:65:e0:a4:ee:94:21:53:f8:2b:b2:51:6f:54:79:5b:cf:56:
9b:91:1c:9b:ea:ed:eb:00:20:10:f9:e6:46:89:f3:12:5d:d8:
de:ae:99:4f:fb:7b:64:0c:38:4f:91:a2:9b:ae:10:e0:04:54:
3b:2c:fd:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI2F5kYonMXzSETchWmCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE4ZjkxZTA1YTI1OWJjYTk4MmQ2YjdjNWI1MGRlMDIzNDI3NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58xw9fmjb8aqB8JWWFU0TMlVJMe2
Xq70SfoRJOv3lGQXl7lb4UJgBBgXVWYrzRLDutL03Rl0IvQx8zPJeKttj3486usw
LI3lvQvp3ORy9mIRtJNizYOqJy8lgPIk7R/SZeIj2rTBhnOyRxb+RhxUNkoJh0IU
N5Q+F5jh29AoBM4RCqD/RqH8zcLppgPsUNJ+7mLY4molOFkn3p40beQ60LeXIhG4
Rlg7akzn6A21NqCpu6jzKqYRWb/h2AhhkvdWtKXSv50tUexUP+c/tNnCWB8A8m1h
CLYV9osfaaC5/5zkEwQ3fGwBM6CzOc2tf/3PKI/MdEy0qJ0Aq5LUX3DYLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuo+R4Folm8qYLWt8W1DeAjQnVcMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZTZqNUhnV2lXYnlwZ3RhM3hiVU40Q05DZFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhuMA0G
CSqGSIb3DQEBCwUAA4IBAQB4Pn+7nH3YatjCRYV/NbK6q1n/OKo3wcKD7JwM6jRw
CxUjP17yrJXCHjav237hZnFKbPk+hrQhKOaGvJ7ploHS7F61OwEbTisTcDJm57Vl
yxNeC0ei03q3wXJYYfUFNtJ3cKGUUEF9j9zWZPMSqX1aq6GbSCjVbpMuS2ubOlFd
W/j1lMRn18a+3FQyK9yYYoXlfIqTSmR/t3bux1bP8nYuN3UVK9pzXrlLiWYK4cCQ
VKqhntnKqb3D4Suha1kWIBQPHp7q4fxRZeCk7pQhU/grslFvVHlbz1abkRyb6u3r
ACAQ+eZGifMSXdjerplP+3tkDDhPkaKbrhDgBFQ7LP2z
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:51 2025 by rpki-client