Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vmEHchh_ykfmBYVwWZfmCBywCjY.roa
File: vmEHchh_ykfmBYVwWZfmCBywCjY.roa (raw, json)
Hash identifier: pRkkPRJwaabHnjb2aHNSYRN/vxheJXYmal0A6x93cMo=
Subject key identifier: BE:61:07:72:18:7F:CA:47:E6:05:85:70:59:97:E6:08:1C:B0:0A:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428237C1D0ACC2AB65FB0E077BAD16954
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vmEHchh_ykfmBYVwWZfmCBywCjY.roa
Signing time: Thu 02 Jan 2025 17:50:01 +0000
ROA not before: Thu 02 Jan 2025 17:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 31.56.117.0/24 maxlen: 24
31.59.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7c:1d:0a:cc:2a:b6:5f:b0:e0:77:ba:d1:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be610772187fca47e60585705997e6081cb00a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:91:2c:cf:25:0a:75:13:18:a3:41:ca:07:
3d:34:e1:52:b0:9d:dc:e0:ab:b7:bf:b8:ee:72:5c:
02:7a:47:5e:b2:de:15:57:8f:08:28:00:74:96:29:
aa:85:f5:11:e5:18:be:99:33:09:53:1b:33:9d:96:
10:78:a7:af:13:4f:39:3e:65:8b:33:2d:71:26:fc:
ee:1e:ce:ea:4b:ad:21:49:a7:c3:ba:9b:76:9d:ef:
c2:ec:eb:a6:df:13:5d:39:0d:a7:b5:f9:9c:1b:4a:
72:e6:77:71:85:69:65:28:fc:4a:00:e4:33:d7:6e:
7d:a3:e1:fa:dd:21:e7:a0:d9:b3:43:87:92:98:71:
76:f9:03:74:6d:2e:ac:3a:dc:53:83:95:b0:85:a5:
43:02:87:1b:90:d0:94:5a:9c:29:b0:94:7f:b4:cd:
f6:b9:4a:ab:bd:02:b3:7d:1c:c3:7a:43:9c:60:c5:
43:d6:ab:b5:88:30:88:1c:ef:67:14:30:de:b5:8e:
12:4a:64:c1:a5:60:dd:75:dc:f6:29:03:6c:51:6b:
01:d7:50:3b:55:1a:1b:c9:75:bd:1e:c9:fc:b2:5c:
eb:39:10:28:c3:42:d6:b4:3c:31:67:23:31:37:53:
11:2d:cb:af:77:30:0b:93:63:3c:29:d4:7c:54:b2:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:07:72:18:7F:CA:47:E6:05:85:70:59:97:E6:08:1C:B0:0A:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vmEHchh_ykfmBYVwWZfmCBywCjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.117.0/24
31.59.131.0/24
Signature Algorithm: sha256WithRSAEncryption
65:72:7e:fd:58:c3:62:c4:de:f8:c4:c1:d7:41:af:c4:4e:54:
21:fd:65:ef:a4:5d:5c:97:8c:00:a3:ec:d2:35:d1:6f:23:a0:
6b:af:30:d4:b6:cd:5a:73:36:67:27:62:3e:d3:ab:7c:d8:61:
cb:b7:bd:49:89:64:de:d3:e4:2b:21:63:bf:8e:93:dd:3b:01:
e9:44:a1:22:f8:f1:9e:fb:30:b3:3c:62:ff:83:2e:fe:19:a8:
7b:16:ff:24:49:e2:7f:5f:e7:23:6c:56:12:81:9d:34:e3:25:
4e:7f:58:25:b7:48:a7:41:56:18:ed:db:df:89:2d:79:55:67:
81:43:aa:33:b1:c1:53:48:f3:ce:e5:57:ce:cb:f5:7f:61:10:
c1:a6:36:db:3c:ea:fe:da:39:47:de:73:57:f7:80:97:0b:59:
8d:81:4a:bd:7a:40:5c:b9:ad:a9:3e:d1:5c:f2:21:4e:7d:1c:
e9:4f:f7:83:31:7e:cf:99:9a:38:49:b1:d7:3f:23:4f:8b:7d:
da:93:d0:f9:e7:d6:f2:81:94:d5:05:f5:f6:34:62:1b:80:3e:
0f:b5:5a:04:28:25:5b:2f:97:52:a3:f5:94:d3:77:5f:ec:a4:
bd:08:2a:22:51:8c:aa:47:87:56:bf:3b:df:0f:a8:64:ff:41:
9c:e8:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:08:02 2025 by rpki-client