Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uIeNWa_DV_IjkUdTLv5gToOd6Po.roa
File: uIeNWa_DV_IjkUdTLv5gToOd6Po.roa (raw, json)
Hash identifier: t6I0ddsgUu+SWD1Jj5jJX+gltvvLj1I8GAEBrXUrhmA=
Subject key identifier: B8:87:8D:59:AF:C3:57:F2:23:91:47:53:2E:FE:60:4E:83:9D:E8:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235D07F4DD6A4097EAC0B9B1A77817
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uIeNWa_DV_IjkUdTLv5gToOd6Po.roa
Signing time: Thu 02 Jan 2025 17:49:53 +0000
ROA not before: Thu 02 Jan 2025 17:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199414
IP address blocks: 31.56.0.0/24 maxlen: 24
31.58.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5d:07:f4:dd:6a:40:97:ea:c0:b9:b1:a7:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8878d59afc357f2239147532efe604e839de8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:7c:0a:8f:c6:c5:86:56:6c:f0:ff:66:75:
03:c1:56:e7:1b:8d:63:b0:12:e5:69:49:7d:e6:ff:
20:6d:52:21:d6:ee:3c:f1:d2:65:d6:7a:9b:c0:e8:
f3:dc:88:7a:8b:1b:3e:27:71:8c:02:f7:76:5d:bd:
32:9d:53:d3:44:c2:81:df:cf:c6:98:86:c7:c8:09:
9f:c6:68:2e:b3:fc:bf:6c:50:b9:2a:a9:7a:33:ca:
ac:7e:1a:b2:78:9a:ac:2f:78:4b:ca:dc:18:d1:87:
cd:02:98:ec:5b:65:59:e7:c5:06:64:a0:69:c2:3e:
46:13:d8:b7:4a:39:3d:5a:98:8f:f8:ed:6b:7e:ac:
68:01:5d:8b:95:65:9e:73:aa:49:d5:bb:e8:9a:06:
f7:d2:ca:d4:d9:0e:c8:4a:1a:3c:46:d5:e5:3c:d2:
20:69:df:e6:1a:e0:ff:e4:13:7e:a1:82:16:d5:03:
0d:2b:fc:2d:e6:0b:a4:93:be:8c:f0:46:a2:f3:29:
a7:ac:77:fd:f6:a2:b3:f9:b2:d6:00:ab:6d:2a:69:
04:ab:19:c8:e5:56:09:c0:53:21:fd:45:ab:b3:2a:
50:8c:d4:8f:50:f2:d6:a7:47:ff:18:3d:76:21:c1:
60:50:71:08:f4:e8:d7:ab:d0:d7:62:fb:72:41:f1:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:8D:59:AF:C3:57:F2:23:91:47:53:2E:FE:60:4E:83:9D:E8:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uIeNWa_DV_IjkUdTLv5gToOd6Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
31.58.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:eb:7a:00:a9:6e:e0:8d:e1:1d:6e:75:a7:00:92:12:26:54:
c5:ed:81:78:18:05:a0:d2:ea:0c:a5:b9:f8:72:3b:13:d3:b8:
60:04:69:9d:e3:af:9a:10:43:58:f3:12:b9:3f:c7:f6:3f:55:
34:bd:c7:ec:47:63:59:ec:f7:43:13:28:1a:e0:2c:8a:78:1a:
08:58:4b:92:09:76:54:a0:86:04:88:e4:ee:e3:1c:55:31:0e:
79:c3:17:02:8b:19:59:33:0d:6b:0f:ce:dd:52:78:86:0f:8c:
9b:b1:f8:10:9d:ee:18:bc:82:d0:91:50:19:1c:d4:ea:f3:11:
33:b0:74:29:18:dd:5a:ff:63:58:98:a6:d7:0e:cb:13:23:7b:
18:17:f4:91:af:b0:35:c6:1c:aa:aa:3b:69:37:02:60:d3:a4:
6b:0b:e5:8b:dd:2a:7d:a9:ae:bd:8b:39:5c:ef:dd:a5:ae:f2:
a6:e1:eb:61:cf:46:ad:cd:6e:6b:5a:47:07:24:51:f4:27:b4:
b0:6b:bd:67:b3:20:c4:89:79:73:60:17:8e:31:cf:7b:d8:9a:
13:42:4d:02:33:fe:0e:c2:4c:39:6e:05:12:fd:af:5e:db:25:
77:8b:0b:13:7c:68:f0:ac:dc:9f:8e:aa:6e:c5:a1:94:cc:55:
37:ea:d7:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI10H9N1qQJfqwLmxp3gXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg3OGQ1OWFmYzM1N2YyMjM5MTQ3NTMyZWZlNjA0ZTgzOWRlOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrl8Co/GxYZWbPD/ZnUDwVbnG41j
sBLlaUl95v8gbVIh1u488dJl1nqbwOjz3Ih6ixs+J3GMAvd2Xb0ynVPTRMKB38/G
mIbHyAmfxmgus/y/bFC5Kql6M8qsfhqyeJqsL3hLytwY0YfNApjsW2VZ58UGZKBp
wj5GE9i3Sjk9WpiP+O1rfqxoAV2LlWWec6pJ1bvomgb30srU2Q7ISho8RtXlPNIg
ad/mGuD/5BN+oYIW1QMNK/wt5gukk76M8Eai8ymnrHf99qKz+bLWAKttKmkEqxnI
5VYJwFMh/UWrsypQjNSPUPLWp0f/GD12IcFgUHEI9OjXq9DXYvtyQfHmPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLiHjVmvw1fyI5FHUy7+YE6Dnej6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdUllTldhX0RWX0lqa1VkVEx2NWdUb09kNlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgAAwQA
HzrkMA0GCSqGSIb3DQEBCwUAA4IBAQCw63oAqW7gjeEdbnWnAJISJlTF7YF4GAWg
0uoMpbn4cjsT07hgBGmd46+aEENY8xK5P8f2P1U0vcfsR2NZ7PdDEyga4CyKeBoI
WEuSCXZUoIYEiOTu4xxVMQ55wxcCixlZMw1rD87dUniGD4ybsfgQne4YvILQkVAZ
HNTq8xEzsHQpGN1a/2NYmKbXDssTI3sYF/SRr7A1xhyqqjtpNwJg06RrC+WL3Sp9
qa69izlc792lrvKm4ethz0atzW5rWkcHJFH0J7Swa71nsyDEiXlzYBeOMc972JoT
Qk0CM/4Owkw5bgUS/a9e2yV3iwsTfGjwrNyfjqpuxaGUzFU36tda
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:12:13 2025 by rpki-client