Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pvHxUFv3MpsjbO5MFr2SVAnDLWI.roa
File: pvHxUFv3MpsjbO5MFr2SVAnDLWI.roa (raw, json)
Hash identifier: IKEhKuBQo1XynZ57uB71kd0QOiK0CrWdBxSO/u55du4=
Subject key identifier: A6:F1:F1:50:5B:F7:32:9B:23:6C:EE:4C:16:BD:92:54:09:C3:2D:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195B3E2A665DB8F68E003CFB7F837C2E2FB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pvHxUFv3MpsjbO5MFr2SVAnDLWI.roa
Signing time: Thu 20 Mar 2025 14:08:50 +0000
ROA not before: Thu 20 Mar 2025 14:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:e2:a6:65:db:8f:68:e0:03:cf:b7:f8:37:c2:e2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 20 14:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6f1f1505bf7329b236cee4c16bd925409c32d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:46:3c:0b:6a:e5:fe:0d:76:55:46:68:c1:
0f:59:ae:b2:ac:81:8a:e4:d7:64:48:d0:67:8d:e9:
18:9b:2f:2b:91:8a:f4:98:19:f3:17:80:da:e3:cd:
44:70:b8:a7:72:8e:04:f6:49:16:83:f4:ca:9f:f5:
db:0c:a6:96:bc:fd:dd:08:16:d7:1d:47:7e:2b:32:
b8:f1:ce:a0:1a:f1:ff:69:50:21:b0:d0:c0:8a:2a:
6f:72:1d:c5:4c:70:dd:a6:24:d7:a7:8d:ad:ba:5e:
00:d4:d5:b1:c3:ad:74:e5:95:0b:49:cc:37:ae:b9:
38:f9:9f:0b:b6:39:99:05:d9:f4:f4:47:8b:e5:11:
8e:6d:43:5d:14:e1:16:c6:49:b7:06:c9:6b:cb:2c:
0b:68:8d:9f:07:b6:44:f0:ef:cd:37:cc:75:f8:4a:
9f:5c:cd:4e:07:7c:f8:18:ba:03:b7:5e:f9:98:5a:
c4:62:a1:59:50:3e:18:61:b2:82:77:39:4c:87:14:
b4:41:05:08:b5:7f:d6:a4:4a:43:3a:30:a7:cd:87:
22:87:07:25:d8:37:89:7d:53:25:6e:3d:01:2d:20:
97:60:c2:70:9e:0a:ec:06:fc:20:53:aa:5e:66:6f:
dd:5a:89:90:24:5d:ea:c1:da:ac:29:6d:d8:7d:ab:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:F1:50:5B:F7:32:9B:23:6C:EE:4C:16:BD:92:54:09:C3:2D:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pvHxUFv3MpsjbO5MFr2SVAnDLWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.112.0/21
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:84:62:ab:b2:ac:52:f7:ca:20:98:30:95:06:4c:3e:a6:1c:
74:66:f8:88:87:48:d9:6d:7c:11:be:47:f8:7b:b9:92:15:28:
c8:a0:69:e9:53:c4:92:28:c8:ee:f3:b5:93:c8:40:b7:d1:43:
df:26:47:4f:90:29:70:8c:9a:80:5e:8e:a5:87:c6:3b:0d:27:
6e:bb:f9:c6:1a:e2:8f:0e:f9:77:11:bb:78:6d:77:de:0a:f3:
fe:4b:4a:48:bb:b7:d9:5d:36:d6:b8:fe:70:f5:68:94:07:93:
c3:d4:8c:92:84:81:70:85:0b:0a:95:8f:0e:f5:bd:ce:17:5e:
b8:9e:2b:5e:25:16:13:58:36:b0:93:1a:6d:dc:83:1d:3c:e9:
0b:d5:cd:ff:b9:64:24:3c:49:9d:08:81:0a:9a:61:f7:fb:f1:
68:29:5d:ba:4d:d9:6c:9e:1a:aa:a4:83:51:1a:e4:ba:73:72:
36:90:b6:04:56:a4:d4:f9:ba:1e:29:61:cc:1b:d0:8b:8f:90:
89:a1:70:65:19:f2:3b:85:da:06:a6:7e:24:a4:de:b5:64:47:
2d:79:d3:ab:fe:3d:dd:1e:ca:53:15:f0:05:61:ba:bf:da:e0:
c2:27:4c:63:3a:69:76:c9:bf:3a:19:f2:90:71:37:95:51:9c:
73:4a:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:00 2025 by rpki-client