Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gEgGWCqkDfzKCm4vvsTPxfHF-fQ.roa
File: gEgGWCqkDfzKCm4vvsTPxfHF-fQ.roa (raw, json)
Hash identifier: YsNnkLaEgJxLk2TwoKMm0xUsvtHBrChwDdCi7RbVYD4=
Subject key identifier: 80:48:06:58:2A:A4:0D:FC:CA:0A:6E:2F:BE:C4:CF:C5:F1:C5:F9:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F6EC35D77C49E4E60D40AEFA966B0E07
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gEgGWCqkDfzKCm4vvsTPxfHF-fQ.roa
Signing time: Wed 02 Apr 2025 14:33:50 +0000
ROA not before: Wed 02 Apr 2025 14:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 31.58.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:ec:35:d7:7c:49:e4:e6:0d:40:ae:fa:96:6b:0e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 14:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=804806582aa40dfcca0a6e2fbec4cfc5f1c5f9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:3d:d4:b4:cb:97:01:ac:8d:bc:9e:8f:a5:
e1:e3:60:b7:b9:20:cc:c3:bb:7a:a7:bc:d5:d4:d1:
d6:a3:1c:c4:bb:1b:c0:fd:63:d0:6c:82:64:79:7e:
ba:33:7c:9a:75:b4:07:a2:f9:f8:8a:05:7c:87:61:
31:25:3b:0f:4e:87:c0:ed:13:6f:6c:fe:d7:e3:5d:
aa:7e:12:c9:b6:68:f1:ec:83:79:fb:ac:7f:c2:0f:
31:e7:f4:c8:bd:07:11:87:8a:c0:bc:91:8e:d5:cf:
f3:64:7c:9a:59:42:3c:c1:c0:1a:01:22:f4:b3:d0:
20:5d:5d:ba:31:37:08:cb:92:2a:55:fd:d9:2e:4e:
4d:bf:fb:e7:f6:72:8d:7a:10:43:45:e5:59:d6:d1:
e5:ad:11:da:28:95:34:12:95:21:54:be:99:2f:c3:
13:28:80:5a:88:00:26:91:30:41:82:93:43:e8:d5:
b5:12:01:4b:4d:da:56:f5:67:e0:4a:39:3c:13:b9:
43:f2:e8:90:69:bd:9e:cf:ae:f0:08:99:cc:ab:03:
65:79:54:37:e0:f4:2b:a6:2c:73:78:fa:d9:cd:64:
ff:1c:b5:8b:c7:f2:a7:28:c8:78:e0:75:2a:2e:4d:
d2:20:20:fe:cb:01:38:19:59:be:59:3e:2e:3b:b9:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:06:58:2A:A4:0D:FC:CA:0A:6E:2F:BE:C4:CF:C5:F1:C5:F9:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gEgGWCqkDfzKCm4vvsTPxfHF-fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:97:41:06:39:fe:88:59:21:93:f0:f9:bf:3c:77:9e:2f:3e:
e4:11:a1:0d:b2:cc:56:37:be:2c:91:1e:de:04:21:31:e5:18:
f8:e2:1e:95:71:45:eb:40:e3:3d:fe:6b:4f:42:53:6e:22:70:
f7:bd:1d:a4:26:ef:8c:6c:d3:d6:a7:6d:33:30:bf:4f:73:8b:
94:cf:10:13:ab:e4:a5:55:af:7f:ce:7f:90:ae:3b:38:c6:48:
ce:21:1f:3f:53:9b:9f:d6:c3:48:86:eb:64:3a:8d:6d:5b:39:
ff:fa:c5:6d:78:c6:71:11:5d:e1:f7:c9:0a:b7:d3:ff:b6:7a:
46:93:4f:c4:2b:5a:91:48:98:1c:46:78:d0:b3:8d:3a:4d:92:
76:95:d2:f6:4d:16:fb:e9:e8:97:63:fb:72:f3:77:d2:05:0f:
f2:75:b7:2a:fc:2a:36:a4:b2:8f:2f:2d:0e:c5:4d:3a:2e:ec:
93:13:92:6a:9b:45:40:41:28:8a:aa:9d:01:c6:1e:21:7f:f4:
6b:9e:c5:3d:65:ba:eb:31:75:72:07:80:e4:3e:bc:77:1e:6b:
17:ad:a9:9d:a7:63:8e:79:48:71:56:c8:7c:02:1b:ff:17:e7:
7f:7f:18:52:f3:02:aa:0e:ff:b7:b6:9d:19:0d:79:c4:2a:5b:
ed:08:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:40 2025 by rpki-client