Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vga9Bho77N3I87llptA9SONsitM.roa
File: vga9Bho77N3I87llptA9SONsitM.roa (raw, json)
Hash identifier: EpfNh1kI7P9karprLzjOEAB7yOPIlUIvrDprkd/0Zz0=
Subject key identifier: BE:06:BD:06:1A:3B:EC:DD:C8:F3:B9:65:A6:D0:3D:48:E3:6C:8A:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282389E8CE9775E51AC6D2C8C84DA43A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vga9Bho77N3I87llptA9SONsitM.roa
Signing time: Thu 02 Jan 2025 17:50:05 +0000
ROA not before: Thu 02 Jan 2025 17:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 31.57.44.0/23 maxlen: 23
31.57.148.0/23 maxlen: 23
31.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:89:e8:ce:97:75:e5:1a:c6:d2:c8:c8:4d:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be06bd061a3becddc8f3b965a6d03d48e36c8ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:d9:52:6a:59:bc:ce:5d:60:98:64:a2:82:
c4:39:e2:2f:fc:35:fc:cb:99:09:4f:91:d5:7a:95:
a0:c0:21:09:42:49:fa:08:57:f2:43:2f:b2:b8:94:
1a:38:75:3b:90:ff:52:c1:02:05:20:c2:be:b5:17:
dd:9e:b9:b2:7f:54:35:74:0f:ae:7f:26:c7:db:44:
29:40:04:de:51:79:b8:b6:98:b8:40:74:2c:a8:dc:
5a:7b:b9:08:60:00:34:bb:51:bb:78:a4:fa:12:1f:
1d:78:76:04:12:b7:59:14:36:88:58:0c:89:90:52:
4d:38:a8:d6:0e:da:ed:29:b3:4b:db:42:df:27:73:
17:e9:66:b9:c7:bd:0d:fa:81:07:46:9b:d1:3d:11:
1c:72:3f:49:4b:5e:4e:6e:d4:57:8d:55:4c:49:83:
c6:53:61:a2:8c:ff:73:27:fc:47:39:76:5b:1f:47:
b3:ee:ca:a2:0c:7a:e2:47:57:27:28:65:89:bb:53:
53:92:05:31:ea:f4:b2:10:97:da:c7:45:f9:e5:c7:
67:55:29:00:8d:ab:5d:74:d3:ab:ad:79:92:6a:bd:
dc:ac:af:3b:72:1d:d1:0a:4d:40:d7:34:e3:65:05:
26:fe:62:e7:0a:27:e1:03:81:d5:6d:b5:3e:a2:39:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:BD:06:1A:3B:EC:DD:C8:F3:B9:65:A6:D0:3D:48:E3:6C:8A:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vga9Bho77N3I87llptA9SONsitM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.44.0/23
31.57.148.0/23
31.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ef:d7:3e:01:1f:14:ad:7e:a0:47:38:f8:82:80:47:e3:90:
47:2e:15:b4:cd:05:a8:7b:d2:0a:9f:81:4a:bc:48:c4:95:3c:
92:e6:1f:0f:d3:4d:e8:5d:8b:c2:27:4d:6a:b4:1b:04:75:92:
f7:64:43:de:14:84:4a:b9:6b:2d:50:49:71:80:80:4d:95:88:
5d:5f:a9:10:46:9c:8d:6a:0f:60:29:a8:9d:d6:e5:56:81:ec:
19:01:82:9c:8c:5d:aa:83:a2:6f:3c:2e:a0:60:bf:6f:9e:cb:
73:c7:82:7a:82:95:cc:53:e8:63:d5:d2:6c:eb:8f:2c:e9:ab:
68:16:7c:7e:b6:24:46:bc:cf:f4:f5:26:e8:1f:0b:8f:d5:1b:
c5:35:71:53:de:7a:f8:b7:e5:4e:1c:84:f2:0a:01:a7:14:5f:
fa:0d:4a:4b:50:3f:75:d6:8c:ba:6d:45:c4:cd:6f:9b:79:b1:
35:d1:f3:64:88:e6:90:76:8f:4f:a7:3b:45:ef:ea:4f:65:e9:
46:65:bb:56:4b:da:b5:08:43:18:9a:36:fb:6a:79:c5:8a:d5:
7a:91:fa:48:0b:d2:2a:b4:0e:87:f8:57:64:62:9d:8c:eb:06:
b4:55:8a:6f:71:8a:b3:0b:9c:a6:e8:c9:ec:ab:e2:1c:f5:04:
e6:90:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:04 2025 by rpki-client