Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gJ0D9uP7UEu3M6BfCrBDzwq1VJM.roa
File: gJ0D9uP7UEu3M6BfCrBDzwq1VJM.roa (raw, json)
Hash identifier: lwEgXSmcXu/m1regQ+ltYMYTWGn8VgjDSDgDmu7L0L8=
Subject key identifier: 80:9D:03:F6:E3:FB:50:4B:B7:33:A0:5F:0A:B0:43:CF:0A:B5:54:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019517BE0483125B1F007EC420DBE3674BE3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gJ0D9uP7UEu3M6BfCrBDzwq1VJM.roa
Signing time: Tue 18 Feb 2025 06:28:03 +0000
ROA not before: Tue 18 Feb 2025 06:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215599
IP address blocks: 31.56.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:be:04:83:12:5b:1f:00:7e:c4:20:db:e3:67:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 06:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=809d03f6e3fb504bb733a05f0ab043cf0ab55493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:71:3e:83:a1:ec:e0:98:82:0b:75:a6:1e:
4f:cd:b9:b3:78:79:f7:a5:39:99:32:68:a8:2f:b0:
06:d8:da:6b:34:52:47:22:ee:bc:ff:ec:19:30:e2:
64:fb:47:1a:03:96:51:61:1c:74:7d:a2:bb:39:0c:
7d:69:7c:83:96:be:1a:55:b1:7a:68:ae:0b:8a:0b:
fc:2c:52:83:c6:df:95:a4:f2:81:aa:0b:84:47:e4:
f4:48:d9:a7:50:20:f9:a2:fe:8d:c0:ef:74:4b:b7:
e6:f3:27:2d:4c:29:b7:5e:29:06:0a:89:60:38:b5:
22:79:56:46:3d:35:34:3b:b4:2b:93:c8:55:b5:60:
52:e1:05:e1:59:f3:02:70:1f:d7:77:68:80:df:e8:
13:c1:73:4e:9f:48:19:b1:92:8b:32:b1:d4:e6:8a:
34:da:08:a0:73:c2:49:53:69:94:90:b4:76:78:6e:
7c:ef:1d:5a:72:15:e2:e4:14:7b:9c:f1:68:8f:28:
73:6a:aa:c0:03:39:a1:7a:f5:15:fa:96:c8:37:47:
23:07:29:4b:0d:f0:34:a8:02:4b:7e:6c:b1:11:fb:
11:ff:d8:77:1f:72:79:97:94:1b:8c:59:f5:e2:da:
ec:96:d1:3a:53:69:0c:86:41:6b:2a:29:85:25:60:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:03:F6:E3:FB:50:4B:B7:33:A0:5F:0A:B0:43:CF:0A:B5:54:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gJ0D9uP7UEu3M6BfCrBDzwq1VJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.58.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a0:d3:ff:30:ef:2b:3e:72:89:53:31:cb:50:e9:88:f2:d0:
01:72:52:78:77:ca:23:9e:c4:36:7a:cf:91:d6:2b:71:d5:58:
97:65:06:b0:1e:d7:49:c4:d8:f9:9a:0c:c5:eb:77:26:3f:45:
d1:04:02:41:d9:57:b4:90:0e:4b:10:e1:c0:3b:2e:42:bd:17:
43:a3:c2:2e:54:05:c6:67:ce:4c:e1:d4:bb:21:58:42:0e:a2:
b6:8a:72:99:26:b0:2e:48:a3:ff:7a:88:e0:fd:06:cb:04:30:
29:9b:9c:2a:f4:01:2f:94:6b:48:81:96:03:d5:af:ac:0c:22:
82:d7:5f:d6:86:3c:71:85:c8:89:e0:da:b2:07:8a:0a:b5:aa:
50:f2:af:5f:42:01:90:04:05:ad:a0:bf:2d:7d:08:29:61:a8:
b9:fa:76:de:c5:fe:ac:0a:37:35:b7:dd:07:52:0f:65:e0:66:
c5:46:8d:15:3f:c7:21:52:f5:a7:f0:7e:5e:1f:27:66:c6:19:
47:57:2a:89:1d:31:90:7e:ea:bd:14:b2:63:b3:9f:bd:ca:94:
d5:38:8d:16:77:1a:e0:d6:e4:02:b2:1a:07:5d:e9:4c:06:45:
1f:b6:6c:cc:20:2b:08:57:dc:5c:3e:de:9a:91:0a:c1:ed:a2:
99:38:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:57 2025 by rpki-client