Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eMg7WhSlbSciulW36wmAEwYbYE4.roa
File: eMg7WhSlbSciulW36wmAEwYbYE4.roa (raw, json)
Hash identifier: z7JdkZ58a0L6lYwl3VOXkgOeOjAL6Scw15wInwlPtp8=
Subject key identifier: 78:C8:3B:5A:14:A5:6D:27:22:BA:55:B7:EB:09:80:13:06:1B:60:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282378348463A095FD9AFD2FB7EC94F9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eMg7WhSlbSciulW36wmAEwYbYE4.roa
Signing time: Thu 02 Jan 2025 17:50:00 +0000
ROA not before: Thu 02 Jan 2025 17:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214879
IP address blocks: 31.57.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:78:34:84:63:a0:95:fd:9a:fd:2f:b7:ec:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c83b5a14a56d2722ba55b7eb098013061b604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:07:83:2d:3b:06:7f:75:20:36:6e:30:56:
6f:cd:1a:41:1f:61:91:b6:3d:06:5b:80:3a:ce:23:
30:cc:45:74:8b:c9:48:60:c5:46:f0:73:aa:32:ba:
af:eb:6f:85:24:21:4e:95:c7:6b:ee:18:93:14:7a:
cc:6e:59:a4:5f:5c:b3:8d:a0:fd:bd:c7:de:ac:9d:
16:57:82:4f:f6:08:10:98:48:d1:85:b6:86:5b:a1:
df:6d:b6:07:93:3b:68:ee:c6:f5:b6:69:23:51:c8:
0f:bf:8b:70:25:c5:32:ae:f9:7e:ac:fb:02:1d:1b:
1f:20:c7:42:e1:b5:41:9f:4a:31:a4:0f:c8:8f:b8:
da:ba:d2:38:5a:8d:4e:b7:bf:df:53:9d:a1:18:cf:
ac:48:75:b5:95:7d:71:c9:88:e1:3c:ea:3d:1a:1c:
dc:8b:6e:f0:ba:42:c9:d2:e4:ff:c2:c0:c6:5a:88:
ca:38:32:31:b0:a2:86:2c:6a:fa:e5:02:15:4d:e0:
56:a2:fd:e0:90:7d:44:f9:a4:ad:74:4a:14:52:5b:
a3:7e:bd:3f:b1:08:8a:bd:98:77:71:c8:64:b7:c0:
d3:01:9d:e5:51:87:b7:ea:87:88:cc:be:d1:1c:ae:
64:96:b3:cf:ac:f6:9b:ea:b3:da:0c:55:cf:ba:4d:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:3B:5A:14:A5:6D:27:22:BA:55:B7:EB:09:80:13:06:1B:60:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eMg7WhSlbSciulW36wmAEwYbYE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.128.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9c:1d:46:b9:22:a4:27:32:fc:7f:a8:c9:4e:b0:00:37:56:
f9:d0:fa:93:9b:df:51:cb:3c:53:27:5f:28:79:ba:58:5f:00:
88:6c:1c:52:c6:ff:56:d4:85:75:c1:b6:e6:ca:5e:a2:ea:73:
2e:77:51:ed:da:a2:1d:6d:27:09:3a:69:31:61:be:b5:a3:e3:
ee:7d:35:a1:3b:1b:bb:0b:44:0c:bf:e4:5f:27:7c:03:01:74:
60:3b:cd:80:97:11:75:21:9f:10:68:34:2b:61:c9:22:65:76:
41:0e:b2:64:c7:2f:b2:1a:0f:89:51:a1:77:0b:bd:ce:01:fd:
36:3e:f4:7b:8c:8b:27:ee:aa:f9:f1:11:92:cc:dd:d1:04:ee:
c3:aa:99:c8:d2:91:39:7d:34:96:e4:ad:48:7f:de:e8:32:3d:
4f:47:d8:1a:70:7f:0d:17:91:96:b9:e7:63:7b:b7:ed:65:32:
25:16:7c:cc:a8:87:29:e1:8b:74:e7:ca:b8:10:7f:d1:5a:9e:
ed:33:e9:b0:3e:ef:bc:ab:c7:58:2e:af:93:6e:20:4f:3c:f4:
71:97:21:0a:47:b0:1b:80:dd:78:a7:f1:0d:a9:a4:da:ba:9e:
18:9a:cf:12:02:86:df:d0:31:fe:39:4b:96:65:f9:87:42:b1:
23:30:2a:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI3g0hGOglf2a/S+37JT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGM4M2I1YTE0YTU2ZDI3MjJiYTU1YjdlYjA5ODAxMzA2MWI2MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKsHgy07Bn91IDZuMFZvzRpBH2GR
tj0GW4A6ziMwzEV0i8lIYMVG8HOqMrqv62+FJCFOlcdr7hiTFHrMblmkX1yzjaD9
vcferJ0WV4JP9ggQmEjRhbaGW6HfbbYHkzto7sb1tmkjUcgPv4twJcUyrvl+rPsC
HRsfIMdC4bVBn0oxpA/Ij7jautI4Wo1Ot7/fU52hGM+sSHW1lX1xyYjhPOo9Ghzc
i27wukLJ0uT/wsDGWojKODIxsKKGLGr65QIVTeBWov3gkH1E+aStdEoUUlujfr0/
sQiKvZh3cchkt8DTAZ3lUYe36oeIzL7RHK5klrPPrPab6rPaDFXPuk2WHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjIO1oUpW0nIrpVt+sJgBMGG2BOMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZU1nN1doU2xiU2NpdWxXMzZ3bUFFd1liWUU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmAMA0G
CSqGSIb3DQEBCwUAA4IBAQAjnB1GuSKkJzL8f6jJTrAAN1b50PqTm99RyzxTJ18o
ebpYXwCIbBxSxv9W1IV1wbbmyl6i6nMud1Ht2qIdbScJOmkxYb61o+PufTWhOxu7
C0QMv+RfJ3wDAXRgO82AlxF1IZ8QaDQrYckiZXZBDrJkxy+yGg+JUaF3C73OAf02
PvR7jIsn7qr58RGSzN3RBO7DqpnI0pE5fTSW5K1If97oMj1PR9gacH8NF5GWuedj
e7ftZTIlFnzMqIcp4Yt058q4EH/RWp7tM+mwPu+8q8dYLq+TbiBPPPRxlyEKR7Ab
gN14p/ENqaTaup4Yms8SAobf0DH+OUuWZfmHQrEjMCpl
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:01:59 2025 by rpki-client