Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDJFZa8OJRhuTZzJFtwQ-snHMkQ.roa
File: pDJFZa8OJRhuTZzJFtwQ-snHMkQ.roa (raw, json)
Hash identifier: 2/AaZue4pWscr6DMvoLdVQgAW3FlOoHx28hLXWtkom4=
Subject key identifier: A4:32:45:65:AF:0E:25:18:6E:4D:9C:C9:16:DC:10:FA:C9:C7:32:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823487B69C5644C787D58F9C3C887D6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDJFZa8OJRhuTZzJFtwQ-snHMkQ.roa
Signing time: Thu 02 Jan 2025 17:49:48 +0000
ROA not before: Thu 02 Jan 2025 17:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 31.58.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:48:7b:69:c5:64:4c:78:7d:58:f9:c3:c8:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4324565af0e25186e4d9cc916dc10fac9c73244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:e6:45:fb:99:c2:7a:d6:d8:69:ba:c2:9b:
13:7a:e5:36:0f:2d:5c:77:95:25:eb:24:41:47:4d:
9d:82:64:11:ce:76:07:9e:47:0c:1d:0d:66:d9:49:
11:20:83:8a:a1:d5:91:d9:af:a7:69:74:b9:72:56:
31:ad:65:70:c2:be:fd:c9:7b:13:14:59:08:f0:c9:
08:99:80:a1:33:86:f8:ce:3f:93:23:d5:5b:6f:fa:
a5:60:47:69:d8:e4:19:e8:a0:91:b6:b7:01:fa:c0:
76:1d:c4:d1:f4:e4:4b:d9:a7:18:f6:d3:70:b8:63:
60:f7:2c:01:cf:01:77:7f:e5:93:fa:4c:09:b5:c0:
15:eb:58:88:f4:a0:a7:cb:65:5e:ed:41:9e:7f:26:
39:51:47:95:cd:40:a6:62:fc:c5:f6:23:79:d6:ff:
06:e1:30:b6:0f:0b:64:06:a8:95:d3:b3:8d:6a:3e:
cf:49:e4:a9:8e:8b:76:50:76:17:78:66:b3:e2:0a:
b7:43:cc:3f:aa:df:5d:09:98:4d:54:bd:1c:af:14:
8b:c2:c9:88:9f:22:0e:83:cd:eb:55:64:76:e1:4c:
c1:3f:8c:ab:55:31:3c:3d:3d:bd:e9:a2:d3:e4:ce:
3f:59:0e:60:41:5f:70:37:62:da:d9:a7:25:c3:a3:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:45:65:AF:0E:25:18:6E:4D:9C:C9:16:DC:10:FA:C9:C7:32:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDJFZa8OJRhuTZzJFtwQ-snHMkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:26:05:f1:c1:4f:03:22:c1:29:09:f2:bb:b1:47:8b:d5:4c:
f1:cb:c0:78:c4:da:4f:18:f2:73:b1:e0:bf:47:62:31:7c:d9:
84:4f:bf:f3:c1:3f:9c:97:e5:1b:52:38:e8:bd:cc:f0:1b:5b:
f5:0d:f3:17:6f:70:f2:c6:56:a2:fd:64:51:60:45:6e:6e:92:
50:5e:08:16:c6:43:51:f3:6c:86:6f:9d:c9:2a:d9:ed:c1:db:
3b:54:1a:89:e7:ec:75:b3:73:24:2b:1d:34:28:91:4c:8c:8e:
39:dd:ce:ae:0f:67:8f:4d:72:7e:55:c6:da:de:b7:ec:7a:82:
07:f8:9f:db:85:b2:fd:72:77:17:0f:9e:a4:78:4f:0f:01:c3:
5a:b2:5f:0c:c4:8e:c6:48:ca:6b:f2:6e:aa:fd:f0:30:51:ee:
17:1b:33:e0:91:6a:5e:ab:1b:43:39:cd:38:a7:df:75:9f:eb:
1b:60:14:9b:e4:18:ef:a5:0b:ab:8e:54:59:cf:81:13:1d:9f:
66:af:bf:08:be:be:2f:cf:e9:10:35:b6:8b:b3:cf:df:80:68:
e1:8a:e6:73:0e:b8:92:bd:a4:1b:be:76:42:ff:1b:2e:45:63:
9b:e0:55:2e:e0:a3:5a:3f:d6:82:70:be:a6:4d:10:05:3e:1e:
98:74:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:52:30 2025 by rpki-client