Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_YFTmKhexOXJqIhYkRn9P641Nk.roa
File: r_YFTmKhexOXJqIhYkRn9P641Nk.roa (raw, json)
Hash identifier: gVUpQsr0QDkN7JKf7nNzb3uuzWQX2XXwnxt5rv9QRnU=
Subject key identifier: AF:F6:05:4E:62:A1:7B:13:97:26:A2:21:62:44:67:F4:FE:B8:D4:D9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194D505FEC1615947EBD5154821A6BBB0C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_YFTmKhexOXJqIhYkRn9P641Nk.roa
Signing time: Wed 05 Feb 2025 07:32:07 +0000
ROA not before: Wed 05 Feb 2025 07:32:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216221
IP address blocks: 31.57.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:05:fe:c1:61:59:47:eb:d5:15:48:21:a6:bb:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 5 07:32:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff6054e62a17b139726a221624467f4feb8d4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:ff:72:7d:33:72:63:92:c5:e9:b6:d6:24:
4c:2d:f0:f8:fb:a6:3b:51:98:00:ae:0a:7b:cd:a9:
f5:44:09:ef:bb:27:d8:0b:7c:ab:14:a0:3f:84:f2:
d1:ee:c5:41:03:02:67:75:f0:e9:ae:4f:8b:3c:77:
10:41:ec:2f:58:b3:49:e6:af:d2:99:3e:af:85:f3:
4b:5d:fd:82:ae:e2:25:cc:bb:7d:22:58:49:3a:7c:
11:7f:5f:eb:5c:b2:c8:0b:a2:32:43:ed:93:b0:74:
d8:0f:a9:ab:de:28:e4:28:41:35:9d:ae:5d:09:98:
4e:52:ba:fe:99:73:b0:50:34:48:6d:8c:43:96:d5:
48:16:40:f2:ed:e5:9c:96:fe:95:42:74:91:1a:00:
75:65:b9:6f:af:74:3a:6f:ab:92:c0:66:8b:25:08:
6c:bb:ee:0e:ac:1f:d5:a5:aa:b8:f5:b7:da:b0:31:
8b:a4:71:1a:28:53:58:94:99:99:9f:ac:2d:07:eb:
46:58:f4:35:6f:ce:94:6c:80:2b:12:a3:d0:e4:10:
ba:65:94:ec:43:51:10:8c:fc:95:10:37:73:eb:55:
88:48:fb:d0:6f:6d:00:30:a1:92:90:16:54:ca:31:
c1:2e:14:dc:1d:9e:3d:8b:5c:30:75:f0:2b:e6:cc:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:05:4E:62:A1:7B:13:97:26:A2:21:62:44:67:F4:FE:B8:D4:D9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/r_YFTmKhexOXJqIhYkRn9P641Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a2:47:11:f5:f0:e1:8c:43:64:2a:61:62:f0:d9:3c:b1:0b:
c9:96:9b:53:17:88:b3:78:6f:b5:78:e2:7c:dc:c7:71:48:31:
e6:f8:66:ce:fb:b5:70:49:59:36:53:fd:49:4b:70:dc:0d:04:
9e:b1:f4:1a:16:d7:9f:8f:61:c6:56:c0:8f:f2:8e:de:cd:18:
c2:65:6d:00:a7:14:d5:6e:99:73:f6:16:b7:4e:49:06:ae:12:
16:0b:a4:6b:34:ab:26:32:e2:c1:af:be:a2:69:0b:e1:5e:38:
79:0d:f9:42:ae:7b:ca:01:ae:ea:33:b6:db:a5:a0:06:4b:b8:
a8:a8:9e:c9:aa:13:2f:2f:19:4d:80:cc:61:9e:eb:3c:74:0f:
21:27:7d:75:07:64:cc:d4:24:06:32:35:4a:12:95:0b:02:23:
fd:7e:b2:a0:22:b6:26:b0:b9:24:64:1a:f2:56:90:b6:fd:cc:
7e:63:6b:7a:11:e0:24:f1:61:7e:d0:44:3d:86:00:54:08:15:
36:3f:a3:c1:4b:7b:54:09:60:75:12:ff:1d:53:68:a0:76:f2:
99:85:92:9b:9f:b7:d5:f4:ff:1e:55:64:2a:f7:96:e4:5e:7f:
0a:9e:76:23:54:c9:46:d9:e5:fb:f8:8a:ca:c0:01:22:98:23:
07:7a:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:08 2025 by rpki-client