Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sUL59bxKoxbW9MnmlJbtdYCNcI8.roa
File: sUL59bxKoxbW9MnmlJbtdYCNcI8.roa (raw, json)
Hash identifier: GCs4NqUUk+vCwmdjg+JWua+YUfuKQJfmU/4ap+ahbEM=
Subject key identifier: B1:42:F9:F5:BC:4A:A3:16:D6:F4:C9:E6:94:96:ED:75:80:8D:70:8F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944175DDB438306F40ABA3143A34BA9D25
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sUL59bxKoxbW9MnmlJbtdYCNcI8.roa
Signing time: Tue 07 Jan 2025 15:50:30 +0000
ROA not before: Tue 07 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 31.57.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:75:dd:b4:38:30:6f:40:ab:a3:14:3a:34:ba:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 7 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b142f9f5bc4aa316d6f4c9e69496ed75808d708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:26:e0:e5:9c:29:09:20:b0:b5:b7:7b:97:
4e:ee:f8:a2:52:9e:3f:ac:0b:c7:30:3c:89:01:b4:
eb:f7:ba:95:13:69:c5:b9:f8:8d:7c:29:6c:b6:2a:
e1:af:4e:d9:2c:2d:f6:c1:de:c0:fb:ff:a6:bc:a1:
95:b9:4d:3e:ed:7c:03:7b:d8:80:22:63:7d:08:18:
4d:79:e5:b7:f9:4e:5b:75:4d:b3:26:6e:75:1f:35:
02:b8:77:0e:0e:41:39:0a:96:15:0a:80:cd:8d:ed:
ea:f0:81:a7:e5:56:48:9f:97:6c:cb:52:6f:60:fd:
7b:40:e8:42:34:34:27:f1:d0:7a:87:8a:41:53:30:
b3:54:9c:af:f2:4c:99:8e:13:37:42:09:fc:45:9a:
c2:b4:56:f0:cc:1f:20:53:8f:0a:e5:3d:83:1b:84:
20:04:66:8b:88:a1:15:01:b6:f2:06:1a:c9:a6:43:
34:32:0e:a2:19:a4:f9:25:a7:34:18:27:7a:1a:5e:
67:e5:66:55:68:12:f3:5e:ea:cc:5e:66:d4:1d:d6:
d4:7f:b5:4f:a0:e9:3e:a2:a9:b7:40:32:d1:a5:4d:
17:9a:1e:12:cc:ed:34:c8:77:8e:2e:46:c1:1e:b6:
60:a5:86:4d:d2:ea:47:41:d5:75:55:31:99:9a:6d:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:F9:F5:BC:4A:A3:16:D6:F4:C9:E6:94:96:ED:75:80:8D:70:8F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sUL59bxKoxbW9MnmlJbtdYCNcI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6d:62:a4:0d:4f:ce:d8:e2:18:1d:6e:b4:6f:17:67:b2:81:
e1:9f:bd:eb:77:38:d6:40:03:c6:9c:a6:55:a9:8d:16:a4:c3:
44:75:b5:21:20:77:4a:2d:50:57:02:c3:d7:e7:4c:0f:16:ab:
8a:d0:61:83:e3:fa:00:93:55:7a:ff:11:6d:b7:ca:63:8b:b5:
cd:86:52:75:28:d2:cd:c9:15:be:f7:71:ce:f7:46:7e:13:64:
4c:07:4c:b8:43:c9:9f:e7:9c:3e:c5:9e:40:12:c4:08:e4:d4:
67:02:23:85:70:20:38:6c:20:fa:bf:13:1f:ec:03:4a:bb:f1:
be:b7:b7:4a:b5:ca:3c:9c:9c:c6:6e:04:e0:41:43:83:87:17:
47:53:d4:70:1c:7e:42:96:d5:d4:79:8f:ec:d0:41:03:f8:0a:
fd:11:96:0d:25:2b:44:f1:66:f4:5a:b7:4c:1a:ae:07:c8:14:
6e:62:c9:62:b3:b4:87:ac:3c:e7:a4:87:87:1a:c2:27:bd:2b:
5a:12:96:66:19:e1:ee:e2:b3:48:b6:35:2e:ce:9e:27:0e:7d:
b2:d4:c2:07:8e:55:89:f8:5a:4d:da:6a:29:97:24:16:a4:e8:
6f:a1:26:8d:db:26:c0:6b:bf:78:ec:f6:e1:29:2b:96:2a:1d:
94:1e:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:13:45 2025 by rpki-client