Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyM3ZirP34f4ItQftcv9VZCFdAA.roa
File: gyM3ZirP34f4ItQftcv9VZCFdAA.roa (raw, json)
Hash identifier: qYfmZ7mQUo3AxNEXnELKYLiiQx9shTbUKPXuTO60ZmA=
Subject key identifier: 83:23:37:66:2A:CF:DF:87:F8:22:D4:1F:B5:CB:FD:55:90:85:74:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282359887B28D46A42FA841147D2CEE9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyM3ZirP34f4ItQftcv9VZCFdAA.roa
Signing time: Thu 02 Jan 2025 17:49:52 +0000
ROA not before: Thu 02 Jan 2025 17:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151704
IP address blocks: 31.58.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:59:88:7b:28:d4:6a:42:fa:84:11:47:d2:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=832337662acfdf87f822d41fb5cbfd5590857400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:ba:8b:d5:5b:fb:ea:59:47:01:a6:4a:33:
d7:8e:36:80:44:32:ed:59:0e:f7:f3:90:7a:ed:ea:
eb:4c:98:68:cd:01:b0:43:13:90:0d:ca:dc:d4:36:
74:b2:f2:7f:c2:67:68:e5:f5:c8:b6:05:5d:8b:e3:
cc:75:90:27:ab:35:6f:33:02:18:71:18:73:57:43:
fc:f2:7d:ec:f0:32:0d:46:24:d0:ed:b9:ae:87:25:
0a:37:d2:44:0c:44:3d:dd:b9:26:4a:71:ff:1e:f4:
74:7b:a6:1d:32:c4:24:b0:d8:da:d8:c6:cc:d9:df:
c6:a3:84:d7:a8:09:9d:be:aa:d5:0b:e6:4c:83:93:
2d:e8:98:71:08:03:b1:e1:cb:94:fe:94:e2:ab:fb:
6e:f1:39:51:9a:e2:a5:da:89:77:8c:ff:a9:42:5c:
b6:e6:f8:7a:54:37:d5:71:65:ab:c3:e7:50:02:82:
49:c0:7a:47:66:46:79:53:6f:db:f4:f0:bf:85:48:
d5:59:ed:06:25:03:ab:01:20:ca:7f:c6:29:42:5d:
9c:ef:7e:b8:e4:c9:ae:3b:49:ac:cc:76:9a:74:d8:
34:32:a0:98:1a:6a:a7:9a:6f:1b:8f:e3:5e:09:98:
c9:27:7c:45:5c:7d:fc:ba:d2:84:91:e2:4c:00:50:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:37:66:2A:CF:DF:87:F8:22:D4:1F:B5:CB:FD:55:90:85:74:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyM3ZirP34f4ItQftcv9VZCFdAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:78:f0:99:29:02:5e:14:e9:4a:4b:ff:35:0f:72:d1:22:f8:
6a:87:11:36:7c:15:cd:a4:e4:35:dd:d0:00:5e:57:c2:36:fc:
58:20:bf:87:c0:b7:54:87:f5:d2:6b:72:46:a0:1e:3a:57:f0:
b3:8f:5c:01:22:b0:bb:9c:a5:43:ee:fc:a9:c1:c0:59:2f:2b:
59:2c:62:b4:d6:45:18:ee:11:51:e0:f7:44:a1:63:cf:ae:f6:
b3:8e:f0:ff:1a:2d:0d:c5:3a:f3:9a:d5:6b:37:55:ed:22:6e:
f8:5c:80:24:00:8e:b1:8b:1c:8d:5f:cf:1e:a9:2c:0b:17:42:
08:73:dc:d5:0e:13:66:a7:13:41:92:a3:47:a9:85:11:7f:1f:
85:3b:a4:82:58:7a:e7:fc:93:57:70:f0:dd:85:a3:44:98:08:
72:0e:2c:7e:e5:96:07:9d:08:e2:3d:d7:d7:9b:97:1e:dd:43:
fa:fe:12:0c:d7:11:19:d1:53:9f:a5:46:ba:32:e7:71:d2:db:
ff:64:57:07:ff:b2:44:5e:2d:a6:d5:14:e4:f5:10:de:ee:57:
45:ef:36:00:63:4d:e1:f2:f0:1c:98:1c:00:d5:79:79:7d:ae:
e7:2d:d1:b3:11:fd:cc:03:6a:05:bb:ad:30:3f:df:96:8e:f8:
31:3e:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:08:23 2025 by rpki-client