Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sOmuwnkKJRY0sQGpeR_E5VkkD30.roa
File: sOmuwnkKJRY0sQGpeR_E5VkkD30.roa (raw, json)
Hash identifier: hY4vU3mOqrC/f7OZYQ/1ak+YQNgaBmMvNTWEsSHvw64=
Subject key identifier: B0:E9:AE:C2:79:0A:25:16:34:B1:01:A9:79:1F:C4:E5:59:24:0F:7D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019460C2446A441836690A3829D12DB2FDE0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sOmuwnkKJRY0sQGpeR_E5VkkD30.roa
Signing time: Mon 13 Jan 2025 17:42:11 +0000
ROA not before: Mon 13 Jan 2025 17:42:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:c2:44:6a:44:18:36:69:0a:38:29:d1:2d:b2:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 13 17:42:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0e9aec2790a251634b101a9791fc4e559240f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:09:8b:dd:52:71:11:04:c5:a5:7f:b9:50:
95:04:9e:c8:71:df:6e:dc:16:1d:6c:e4:e7:07:b4:
85:ad:79:e7:db:72:26:68:4b:02:dd:eb:4d:b5:53:
3e:76:a2:31:5c:53:c0:74:26:a5:e0:71:70:ef:92:
f8:0c:a5:e9:02:0c:25:da:f6:9d:53:b0:aa:b3:e6:
b3:f4:bb:1c:cc:67:c4:b0:02:a8:86:12:0a:d6:b8:
61:0e:aa:2c:76:dc:9a:8e:b3:3e:47:b5:99:77:6e:
d2:9c:55:67:fa:cf:05:20:86:ed:4a:5e:4a:b9:b3:
ae:87:e3:d9:34:59:63:1a:ed:0e:fd:78:35:28:df:
9f:be:3a:66:0b:e0:bf:4d:37:86:3d:38:c1:bb:f6:
af:88:8a:6e:f0:b8:e5:73:7e:8b:50:31:56:20:27:
77:12:d6:93:29:84:a0:3d:61:b1:20:45:62:f6:0e:
cc:9e:bc:de:02:20:e7:f4:bf:90:36:8c:c6:fe:2e:
28:5d:c4:19:ae:47:fc:43:4c:64:26:25:e0:ed:73:
0a:b5:61:00:e5:77:fa:09:8f:e8:bb:4e:a2:48:a1:
23:38:d6:57:a3:aa:a5:69:24:2b:10:02:46:c3:4c:
61:1b:42:4f:66:00:d6:23:de:cc:8e:39:0a:86:77:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:AE:C2:79:0A:25:16:34:B1:01:A9:79:1F:C4:E5:59:24:0F:7D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sOmuwnkKJRY0sQGpeR_E5VkkD30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
a2:c8:4a:ad:b9:56:1b:56:d8:b9:df:2c:a6:e1:c8:23:94:85:
5a:11:4e:1f:6f:7b:53:79:7c:3a:b0:d1:44:86:6e:ad:9c:64:
18:1f:48:68:46:e3:27:f4:06:28:92:01:ee:d1:06:1e:16:cd:
73:de:98:12:4a:55:6c:ed:ed:fc:44:6c:df:e9:c1:2c:e3:db:
85:ea:4e:7a:52:47:84:4c:59:a5:7a:7c:3d:c0:63:7c:68:eb:
62:6a:14:dd:c7:ca:82:ec:d3:77:56:3c:c0:58:da:c4:aa:85:
7e:99:9c:f7:c5:0b:db:74:8b:c0:49:07:62:54:99:ef:99:19:
49:76:df:b5:11:bc:ff:94:8f:49:7c:a4:b4:29:da:30:b9:14:
b2:2e:61:55:de:29:d0:7d:e0:23:ef:e8:2c:ba:90:12:9d:b0:
e0:d3:6f:60:19:de:91:9c:ab:37:bc:b2:36:86:16:b7:9f:52:
d8:3e:f2:2f:8e:cc:01:bf:0c:af:f3:36:8c:5f:94:be:c9:7d:
df:d6:1b:83:87:3b:92:07:8e:ec:a2:1c:11:1d:9c:a5:1e:ea:
1f:09:7e:c4:9f:e3:cc:b1:a6:14:83:9c:9e:28:69:00:b2:9c:
36:9f:aa:ee:d3:f6:59:8b:99:e2:a8:8b:fb:7c:76:7f:90:5e:
4b:88:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:53:31 2025 by rpki-client