Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vX0B01_Wwed-xPSADO3aWPwcaxM.roa
File: vX0B01_Wwed-xPSADO3aWPwcaxM.roa (raw, json)
Hash identifier: vqZH+nklAJ1MpV91FDFzIYDvHpAPFdZIBtQNya6uxOI=
Subject key identifier: BD:7D:01:D3:5F:D6:C1:E7:7E:C4:F4:80:0C:ED:DA:58:FC:1C:6B:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823755357F064A083AC8FA710DE2578
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vX0B01_Wwed-xPSADO3aWPwcaxM.roa
Signing time: Thu 02 Jan 2025 17:49:59 +0000
ROA not before: Thu 02 Jan 2025 17:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 31.59.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:75:53:57:f0:64:a0:83:ac:8f:a7:10:de:25:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd7d01d35fd6c1e77ec4f4800cedda58fc1c6b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:a1:1c:d4:4b:87:9f:d6:1c:bb:f6:4d:42:
4f:17:1a:58:42:7d:8d:31:43:63:40:6b:42:26:cf:
1d:db:db:9f:bb:74:83:b5:34:8c:b1:cf:f3:20:72:
c0:02:bc:ba:af:d6:fa:fc:1e:d4:a5:6e:ab:a8:f1:
4d:c1:dd:20:ae:54:7c:ed:33:1b:58:40:2a:88:f1:
e3:d2:0e:aa:97:e3:31:40:2d:2a:28:a9:99:ec:bf:
f1:ae:ab:49:da:26:76:a7:6c:b6:98:84:1f:23:a6:
c2:8c:10:0b:e9:34:8a:d2:1f:68:54:57:f7:f6:73:
62:98:e8:e7:47:ec:fb:13:f4:6d:e1:9a:73:9a:07:
dd:89:b8:39:e7:76:65:08:e6:16:92:81:ce:80:25:
ef:18:5c:1f:7c:e4:69:b8:19:9d:67:db:ff:4b:dd:
fa:7c:09:6e:f2:b8:6f:52:4d:c1:5e:21:4b:da:89:
07:04:d6:ef:40:8f:f9:46:43:f1:ce:1a:70:e4:29:
0c:75:4c:a6:4e:e3:f3:76:19:a2:44:9d:67:eb:40:
3b:f1:72:80:ad:84:56:62:98:78:94:44:ac:6a:26:
47:62:e2:e5:b5:e7:c1:55:18:5b:9a:09:60:98:06:
ab:56:57:9e:44:ce:dd:c9:26:04:13:95:33:9a:90:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:01:D3:5F:D6:C1:E7:7E:C4:F4:80:0C:ED:DA:58:FC:1C:6B:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vX0B01_Wwed-xPSADO3aWPwcaxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:8e:53:7f:ae:57:9e:bc:67:cc:de:09:f3:4d:8e:69:e9:57:
7e:39:37:cb:c1:9c:84:7c:f5:45:a9:5b:b4:4b:19:32:5b:c5:
f2:0c:ad:85:81:df:7c:85:9b:6b:dd:32:d6:cb:4c:42:81:ed:
b3:20:d7:62:46:2a:4c:22:16:f3:22:06:46:2e:8d:61:07:3f:
48:b0:18:07:92:90:49:f1:56:e2:8a:c1:ff:42:67:e9:07:e1:
0d:00:63:a8:7f:08:87:ed:4e:83:0b:ff:29:c8:94:e0:10:59:
85:9b:bb:18:48:2b:e7:3d:09:ad:a1:60:f3:d4:f7:d7:6e:5e:
bc:3a:1c:a8:b8:c9:e0:33:08:3b:1c:11:77:4c:7c:fc:67:f6:
db:fa:15:9f:16:72:2a:7b:28:b4:d6:72:01:88:69:f5:93:ab:
6c:b6:84:9e:58:42:0f:43:67:18:9d:d5:d4:10:31:73:3f:41:
85:9c:e6:33:5a:81:7e:cf:aa:23:d8:0c:5a:9f:7f:fc:eb:1e:
ee:fd:e2:01:7e:e8:15:40:69:83:5c:e8:a7:f7:96:56:9a:3b:
42:cf:45:21:a6:37:d5:9e:40:ee:84:54:ea:bf:3c:e7:6d:09:
51:ad:be:68:f9:db:be:53:9c:91:aa:c3:55:34:7e:9f:8b:5e:
67:c7:cb:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI3VTV/BkoIOsj6cQ3iV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDdkMDFkMzVmZDZjMWU3N2VjNGY0ODAwY2VkZGE1OGZjMWM2YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKWhHNRLh5/WHLv2TUJPFxpYQn2N
MUNjQGtCJs8d29ufu3SDtTSMsc/zIHLAAry6r9b6/B7UpW6rqPFNwd0grlR87TMb
WEAqiPHj0g6ql+MxQC0qKKmZ7L/xrqtJ2iZ2p2y2mIQfI6bCjBAL6TSK0h9oVFf3
9nNimOjnR+z7E/Rt4Zpzmgfdibg553ZlCOYWkoHOgCXvGFwffORpuBmdZ9v/S936
fAlu8rhvUk3BXiFL2okHBNbvQI/5RkPxzhpw5CkMdUymTuPzdhmiRJ1n60A78XKA
rYRWYph4lESsaiZHYuLltefBVRhbmglgmAarVleeRM7dySYEE5UzmpDl4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL19AdNf1sHnfsT0gAzt2lj8HGsTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdlgwQjAxX1d3ZWQteFBTQURPM2FXUHdjYXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuBMA0G
CSqGSIb3DQEBCwUAA4IBAQC0jlN/rleevGfM3gnzTY5p6Vd+OTfLwZyEfPVFqVu0
SxkyW8XyDK2Fgd98hZtr3TLWy0xCge2zINdiRipMIhbzIgZGLo1hBz9IsBgHkpBJ
8VbiisH/QmfpB+ENAGOofwiH7U6DC/8pyJTgEFmFm7sYSCvnPQmtoWDz1PfXbl68
OhyouMngMwg7HBF3THz8Z/bb+hWfFnIqeyi01nIBiGn1k6tstoSeWEIPQ2cYndXU
EDFzP0GFnOYzWoF+z6oj2Axan3/86x7u/eIBfugVQGmDXOin95ZWmjtCz0UhpjfV
nkDuhFTqvzznbQlRrb5o+du+U5yRqsNVNH6fi15nx8td
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:14:41 2025 by rpki-client