Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klSra_v7eDQzfIZjL7f3huyY4to.roa
File: klSra_v7eDQzfIZjL7f3huyY4to.roa (raw, json)
Hash identifier: zdw1CdA9ACilVwNvzv/JA7TwDe3E3EdzVmi48RmGgJg=
Subject key identifier: 92:54:AB:6B:FB:FB:78:34:33:7C:86:63:2F:B7:F7:86:EC:98:E2:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01948EB977B9F06167ED86EB95ADE0D26972
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klSra_v7eDQzfIZjL7f3huyY4to.roa
Signing time: Wed 22 Jan 2025 15:55:06 +0000
ROA not before: Wed 22 Jan 2025 15:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 31.56.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:b9:77:b9:f0:61:67:ed:86:eb:95:ad:e0:d2:69:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 22 15:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9254ab6bfbfb7834337c86632fb7f786ec98e2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:09:a4:a3:96:62:28:42:ec:5b:01:b4:80:
fa:e8:e0:2b:02:61:a2:3a:ab:14:99:67:28:36:2a:
03:2b:72:9c:94:31:6a:2b:9e:f1:08:4a:e5:bc:97:
06:03:ca:f4:28:89:27:d5:94:08:80:d0:36:c6:a7:
f2:e9:c0:da:78:b5:cd:2d:9c:0a:10:83:47:9a:89:
7a:5f:7b:02:d0:e3:10:0e:66:ac:a5:86:92:45:24:
1a:a6:22:b1:2b:37:67:c1:d9:f4:93:83:20:9e:5e:
d6:cf:77:bb:1b:9e:d2:24:94:80:f3:9e:fa:3c:52:
43:cc:9a:f8:d4:79:bf:52:f3:ce:3d:08:33:d5:d7:
83:e5:3c:54:81:be:cf:2a:95:8a:27:42:80:1d:b8:
4d:49:02:83:f2:d5:7e:be:60:b9:97:9f:7e:39:f8:
ca:7d:37:f7:1b:da:5f:df:07:1a:62:f3:80:e1:f5:
63:c1:b7:af:49:5c:40:8d:66:7b:7e:3c:4c:4e:e2:
c6:11:ed:4a:51:ea:f1:61:7f:f7:3b:47:13:73:4c:
be:53:bd:d3:9d:c8:d7:bb:6a:ba:43:eb:a5:a7:c3:
64:28:5d:b7:21:6e:57:2d:01:2e:f6:e5:33:09:67:
c2:c1:92:8e:64:fa:51:5b:61:19:d8:6e:6f:45:81:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:AB:6B:FB:FB:78:34:33:7C:86:63:2F:B7:F7:86:EC:98:E2:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/klSra_v7eDQzfIZjL7f3huyY4to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:12:ff:51:e1:5d:93:ac:45:6c:53:9e:dd:42:ae:42:d1:05:
fa:15:96:52:7d:cd:32:4e:da:3d:d6:90:ea:64:68:d1:e7:fd:
ae:a1:d4:94:33:21:76:fe:1a:ec:11:9d:55:bf:03:c6:16:0c:
5c:c5:50:a8:4c:c8:77:b8:5c:3b:2f:e8:71:26:fc:89:6e:fb:
73:fc:81:7e:3d:78:33:01:a5:5c:86:a7:5e:84:8b:73:b1:9f:
11:43:fe:36:32:24:13:0b:de:89:bf:e1:e1:5f:44:13:9e:ab:
0d:e6:63:b5:df:7b:c4:f6:8e:d9:fc:f2:51:e2:2d:23:4a:6f:
c2:ad:60:56:3c:e6:83:34:cd:9d:2b:3c:b2:68:9e:a0:11:8d:
55:bf:e0:a4:e8:64:22:aa:98:22:59:e5:49:d0:ab:ff:6e:b6:
ae:ad:f6:ae:49:8c:8d:95:b1:0a:d9:67:30:7b:45:57:12:39:
f8:da:45:ce:d7:31:c7:76:d1:2d:51:62:5f:4a:bc:a5:23:7f:
ba:02:5b:2e:54:d2:0f:f2:de:34:dc:48:46:cb:f7:56:49:c8:
10:e7:1c:df:dd:f4:37:83:f4:68:16:e6:0b:5c:c9:e3:e3:40:
c6:75:75:91:8d:30:0c:75:bd:ba:0e:c9:e2:07:95:9d:e3:ec:
bd:0b:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client