Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hC2Ymbs1-qRqkrq4ahva77aK9Ko.roa
File: hC2Ymbs1-qRqkrq4ahva77aK9Ko.roa (raw, json)
Hash identifier: oDwPQztEE6ufPZihKLD/VbL26OCaowjlq2sSpne3m88=
Subject key identifier: 84:2D:98:99:BB:35:FA:A4:6A:92:BA:B8:6A:1B:DA:EF:B6:8A:F4:AA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235F04D1229CE64D3B1FC51E0706FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hC2Ymbs1-qRqkrq4ahva77aK9Ko.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.56.146.0/24 maxlen: 24
31.58.229.0/24 maxlen: 24
31.59.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5f:04:d1:22:9c:e6:4d:3b:1f:c5:1e:07:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=842d9899bb35faa46a92bab86a1bdaefb68af4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:35:31:28:03:b9:b0:6c:31:34:7f:f7:0a:
1a:91:19:7e:28:19:81:df:1e:d2:66:26:ea:5c:54:
e7:d0:6b:80:f7:bb:5b:a7:25:03:7a:65:f7:91:85:
8b:b1:bd:9e:a3:ba:f8:bd:a7:81:b8:f3:7c:a0:02:
19:21:65:2b:5b:58:b4:91:da:a3:0e:58:c3:14:a0:
26:cc:57:73:45:3f:40:ec:f5:e5:40:a9:8d:76:71:
4d:71:8f:ad:4b:3b:ea:af:17:b5:e3:3e:ed:d9:aa:
15:b6:c8:90:87:fc:b6:f8:b0:1c:f4:e4:a7:ac:03:
69:9a:c4:59:51:22:8d:eb:f1:6a:54:3c:1a:c3:5a:
21:66:38:6f:cb:94:9f:98:7f:ef:51:54:28:67:47:
8c:d4:43:77:55:b9:0f:88:99:12:e8:c1:54:bd:ce:
6c:aa:17:c7:47:65:a1:9f:91:df:4b:11:be:de:f4:
a9:4a:e5:a7:ad:59:08:ae:63:7f:c9:25:b4:9e:00:
53:fe:a2:e6:61:3e:07:31:e0:9e:91:b4:f8:2f:d6:
ec:09:8c:36:f9:f3:84:2e:d1:19:ab:63:75:e0:ec:
83:bd:fa:82:a8:0b:29:38:20:67:76:70:cb:79:e7:
36:9b:80:90:7d:5d:03:d8:ee:b9:e6:98:97:43:5c:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:98:99:BB:35:FA:A4:6A:92:BA:B8:6A:1B:DA:EF:B6:8A:F4:AA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hC2Ymbs1-qRqkrq4ahva77aK9Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.146.0/24
31.58.229.0/24
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e0:85:0b:d2:69:a1:0c:1a:06:84:e9:a6:3f:a2:eb:5e:02:
ce:fa:d4:05:eb:50:ea:9e:d6:56:74:42:e5:ff:46:8b:84:c9:
cd:70:55:a3:b1:f0:d5:14:67:1b:fa:21:5a:f3:cb:54:c4:cc:
b1:b2:4f:fa:e5:1f:14:1c:ee:b7:fe:fb:b3:49:34:4c:c0:5e:
82:37:22:1c:70:b6:09:cf:d4:93:e9:e0:cf:48:9a:45:7a:fa:
96:0a:68:aa:5c:28:01:de:09:00:4e:de:9a:6e:91:0c:96:0a:
a2:f1:fd:98:74:88:b6:ac:2a:e8:a2:3a:ac:6b:02:37:b8:a5:
0e:62:b8:83:c9:85:8d:75:1c:cf:3f:a2:e9:3f:6f:1d:d6:61:
8f:9c:8a:ba:30:b9:80:d2:6a:fe:12:c2:de:62:42:3d:00:80:
4a:23:c1:3b:d7:c4:d2:3e:a8:9c:1b:dc:ed:05:6d:2e:2a:f6:
c5:a2:fc:e9:a9:f6:b1:ac:50:37:80:bf:d6:78:73:39:89:e3:
f2:53:00:c6:f7:18:65:e9:16:01:ab:84:60:93:e8:e6:2c:6d:
3b:9e:97:8f:55:01:b0:a0:75:50:2f:7f:33:69:36:a2:b3:0e:
29:1a:66:0c:5d:bf:ce:42:d3:4b:a7:e5:68:43:b5:df:05:12:
7e:c0:8f:97
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoI18E0SKc5k07H8UeBwb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDJkOTg5OWJiMzVmYWE0NmE5MmJhYjg2YTFiZGFlZmI2OGFmNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSg1MSgDubBsMTR/9woakRl+KBmB
3x7SZibqXFTn0GuA97tbpyUDemX3kYWLsb2eo7r4vaeBuPN8oAIZIWUrW1i0kdqj
DljDFKAmzFdzRT9A7PXlQKmNdnFNcY+tSzvqrxe14z7t2aoVtsiQh/y2+LAc9OSn
rANpmsRZUSKN6/FqVDwaw1ohZjhvy5SfmH/vUVQoZ0eM1EN3VbkPiJkS6MFUvc5s
qhfHR2Whn5HfSxG+3vSpSuWnrVkIrmN/ySW0ngBT/qLmYT4HMeCekbT4L9bsCYw2
+fOELtEZq2N14OyDvfqCqAspOCBndnDLeec2m4CQfV0D2O655piXQ1wSiQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIQtmJm7NfqkapK6uGob2u+2ivSqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaEMyWW1iczEtcVJxa3JxNGFodmE3N2FLOUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHziSAwQA
HzrlAwQAHzsjMA0GCSqGSIb3DQEBCwUAA4IBAQCN4IUL0mmhDBoGhOmmP6LrXgLO
+tQF61DqntZWdELl/0aLhMnNcFWjsfDVFGcb+iFa88tUxMyxsk/65R8UHO63/vuz
STRMwF6CNyIccLYJz9ST6eDPSJpFevqWCmiqXCgB3gkATt6abpEMlgqi8f2YdIi2
rCroojqsawI3uKUOYriDyYWNdRzPP6LpP28d1mGPnIq6MLmA0mr+EsLeYkI9AIBK
I8E718TSPqicG9ztBW0uKvbFovzpqfaxrFA3gL/WeHM5iePyUwDG9xhl6RYBq4Rg
k+jmLG07npePVQGwoHVQL38zaTaisw4pGmYMXb/OQtNLp+VoQ7XfBRJ+wI+X
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:54:45 2025 by rpki-client