Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nW_ed0dZUnc2mISed-0IBRKQsOM.roa
File: nW_ed0dZUnc2mISed-0IBRKQsOM.roa (raw, json)
Hash identifier: QsJVpuHWeeyF1crbmFZVHzDvyUg0fy/zvGzDU+YAzho=
Subject key identifier: 9D:6F:DE:77:47:59:52:77:36:98:84:9E:77:ED:08:05:12:90:B0:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282377735B8D46BA96123916EB1F7DFE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nW_ed0dZUnc2mISed-0IBRKQsOM.roa
Signing time: Thu 02 Jan 2025 17:50:00 +0000
ROA not before: Thu 02 Jan 2025 17:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214828
IP address blocks: 31.59.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:77:73:5b:8d:46:ba:96:12:39:16:eb:1f:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d6fde77475952773698849e77ed08051290b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:28:77:6a:15:2f:92:37:9c:ca:6b:ec:ac:
01:8b:50:26:30:d5:44:71:4b:87:94:57:14:2b:11:
2e:80:77:6a:3f:3f:06:85:81:f5:60:1b:ff:da:7c:
a2:72:51:6f:40:bd:2f:97:e0:c6:9c:3a:42:11:40:
76:d6:19:fe:e9:a7:92:56:54:71:83:43:b6:d3:94:
11:6a:23:6b:b4:61:7d:60:d2:14:99:c9:d0:0b:e1:
a7:fc:d7:52:40:b7:83:16:a0:66:8f:53:41:fd:81:
88:18:92:06:bb:39:94:9d:62:4c:1c:38:20:46:af:
2e:84:42:04:2f:16:f9:3d:5d:24:02:a4:00:54:24:
ef:50:e9:aa:8e:50:26:66:5f:a8:06:b0:20:e5:00:
d4:2a:01:79:2c:0f:84:12:98:e9:60:94:82:ca:47:
f4:5f:d8:7d:e8:cb:2e:b9:ad:9f:e2:55:33:28:57:
b4:1e:8d:3c:93:55:b3:50:21:b6:39:3a:50:38:3a:
8b:9e:48:fa:cf:ef:1a:94:dc:9a:1d:a5:2d:a4:73:
90:7a:14:bd:96:9b:ca:7a:20:35:c7:70:44:9f:67:
1f:2a:cd:1d:38:41:00:57:5d:90:43:df:ea:7d:22:
72:52:b7:01:48:9f:86:e8:5a:89:6c:58:9e:5f:fa:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:DE:77:47:59:52:77:36:98:84:9E:77:ED:08:05:12:90:B0:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nW_ed0dZUnc2mISed-0IBRKQsOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d9:45:b3:50:da:ef:46:4d:e9:f1:66:49:41:2f:0c:4d:0d:
8f:cf:aa:f5:93:94:5b:0f:41:c9:8f:5d:2d:c8:31:3a:cc:cf:
0e:f6:56:bc:02:e1:9d:92:d5:cb:bf:88:59:57:ec:b3:a3:75:
1e:e4:02:fc:d4:04:9c:3d:e7:5f:61:40:5f:8a:98:4f:df:32:
c5:11:a9:f9:e7:a0:82:93:ce:43:3d:9a:71:2e:be:fc:d6:d3:
06:02:f3:72:a1:c8:57:87:f8:dc:57:6a:78:e1:82:da:9c:d9:
fc:e1:24:75:2e:f9:f2:b2:29:c6:d5:03:df:51:36:16:a6:0c:
b3:5f:6f:66:b3:7a:f0:c3:51:af:11:20:24:3a:c2:d0:a9:f2:
53:4c:ba:ff:11:c4:b3:03:00:09:da:0e:ad:cf:27:0e:3a:28:
07:47:49:87:16:fe:68:7d:b0:6a:2c:a2:dd:2b:c5:51:74:cd:
67:85:9e:93:80:24:b1:b3:77:fa:55:fe:f4:a1:09:ea:64:13:
e4:d2:b1:28:68:4a:c5:98:7d:96:6a:09:a3:a2:67:62:e8:d5:
9e:5e:ae:75:3f:0b:37:31:d7:d6:53:95:4a:71:7c:df:a0:7d:
ee:f0:46:90:8c:4f:b1:ac:25:04:61:c0:4e:76:0c:e5:4c:ee:
32:a0:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:02:03 2025 by rpki-client