Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oct9OZze0VHx2_t8tS3fGqWDlp0.roa
File: oct9OZze0VHx2_t8tS3fGqWDlp0.roa (raw, json)
Hash identifier: mv2LSUCO4JG7te1nQbId40FoANrEslGolS9dZSUMGcQ=
Subject key identifier: A1:CB:7D:39:9C:DE:D1:51:F1:DB:FB:7C:B5:2D:DF:1A:A5:83:96:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282334E3E0A617E0CD27344F30B586C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oct9OZze0VHx2_t8tS3fGqWDlp0.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 31.56.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:34:e3:e0:a6:17:e0:cd:27:34:4f:30:b5:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1cb7d399cded151f1dbfb7cb52ddf1aa583969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:e3:cd:de:6c:f3:a3:c2:a2:40:46:2b:71:
7e:04:23:32:41:aa:00:a8:f0:df:1f:56:fa:9a:1d:
a4:35:6e:c3:fc:cd:1f:8c:10:7e:5a:38:61:29:a5:
1d:aa:50:5b:49:b5:60:50:8f:dd:f0:94:89:0b:82:
07:9e:18:3b:9a:8a:c9:a9:f7:1b:f0:5b:75:9f:47:
df:8b:bc:09:c7:05:7c:8c:04:0d:a8:be:cf:34:34:
ea:6b:47:b0:c0:c5:81:62:41:b1:fb:a7:c6:72:bf:
d4:d4:f5:99:2b:95:43:b1:26:07:98:2d:6b:02:20:
89:18:01:15:68:92:52:e0:05:d3:96:a0:12:75:6f:
7e:a2:23:a9:cd:b3:03:e1:81:33:6a:ea:dc:cc:99:
67:a0:7e:f4:70:92:86:13:92:38:3b:43:17:34:4b:
9c:3c:d8:04:57:bf:34:af:6c:df:16:f4:d9:ab:95:
18:cb:96:10:a6:54:69:f9:40:dc:09:1d:55:43:7d:
94:55:4c:98:b5:ff:e6:bc:d7:37:6a:8b:09:a0:5c:
6b:fd:cd:41:78:bb:be:84:3c:d3:7d:42:7e:b2:50:
b6:c6:0c:fc:0f:dd:81:59:7b:04:15:c3:49:b8:14:
1f:3d:68:0f:22:1b:f1:c5:d5:ea:7a:51:40:8a:a1:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:7D:39:9C:DE:D1:51:F1:DB:FB:7C:B5:2D:DF:1A:A5:83:96:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oct9OZze0VHx2_t8tS3fGqWDlp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.106.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:07:31:92:1a:19:fa:73:11:19:81:83:34:3f:11:07:d9:
9a:78:b3:32:6b:49:d7:f7:ce:97:ec:9d:d5:0f:31:30:6b:8a:
d8:10:6e:e1:5e:4e:a3:e9:d3:a2:59:dd:5f:5c:a5:6b:da:67:
5b:7e:2d:1a:a3:ca:03:c2:ce:c7:52:14:ec:dc:ea:d5:58:8d:
fc:4e:13:1b:a6:98:8b:e0:8d:e2:e1:20:ab:08:98:53:2b:56:
fa:57:30:24:8f:89:81:46:89:e7:1f:5c:72:c2:42:18:22:ba:
7f:39:96:ed:67:a2:d0:a7:be:88:dd:da:47:71:28:01:07:75:
c0:83:82:f8:56:27:d4:7b:05:b1:a2:ab:9a:87:2c:88:c8:2a:
b9:91:59:3f:dd:47:8e:55:79:ce:96:33:06:de:3e:50:1a:9e:
61:e2:3c:bf:e8:17:4d:15:dc:91:cf:81:ee:a6:e7:74:50:d2:
b8:95:c0:17:51:e5:52:07:ee:f2:1b:00:be:1c:81:c7:80:af:
3f:31:f1:bf:fd:b1:9f:0d:54:39:7f:73:e0:5f:ee:64:7d:42:
ff:7c:f9:f4:d3:27:9f:3a:46:9f:98:bc:34:09:29:39:4c:c0:
e1:37:0d:74:e5:45:18:53:42:0f:bb:2c:6d:db:07:0b:c3:11:
53:2b:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:14:28 2025 by rpki-client