Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w4KkGQlwyWRE_O06Z3MD5vUfXWk.roa
File: w4KkGQlwyWRE_O06Z3MD5vUfXWk.roa (raw, json)
Hash identifier: YDobPFLaholGv96qZsJCIt7plMFPi4/VhU7bKIgZFs0=
Subject key identifier: C3:82:A4:19:09:70:C9:64:44:FC:ED:3A:67:73:03:E6:F5:1F:5D:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428233B88A97A59FB677B110BB5D01C47
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w4KkGQlwyWRE_O06Z3MD5vUfXWk.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22418
IP address blocks: 31.58.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3b:88:a9:7a:59:fb:67:7b:11:0b:b5:d0:1c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c382a4190970c96444fced3a677303e6f51f5d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:4a:07:31:21:34:88:11:d4:83:b1:8d:68:
6b:2d:60:f7:06:c7:c1:8e:89:b7:49:fb:87:24:71:
8c:67:8f:81:9e:db:f3:c1:67:d9:d9:d1:99:8e:8d:
a2:28:07:4a:3b:1a:b3:f3:12:af:1d:e7:ac:8a:64:
a1:97:d8:7d:40:9d:07:71:ac:92:ab:42:1d:53:35:
d7:e1:60:22:43:de:d4:3e:96:3f:1e:d0:18:b7:b4:
c0:7f:02:55:ff:3a:23:c0:04:da:52:8e:7e:a5:43:
9d:2d:84:04:5c:61:57:52:eb:77:8f:3f:de:f7:79:
e6:17:96:74:55:4c:b0:b0:f0:ad:d7:64:dc:24:48:
08:88:72:d5:eb:e5:65:37:9d:96:4c:67:7d:a2:0d:
11:2a:95:27:eb:db:ac:4f:b5:28:0c:3b:c6:ae:e1:
82:30:c0:29:70:14:2f:57:ec:44:30:d4:c3:1d:2c:
61:63:5f:93:86:03:d8:03:60:02:7f:dd:9c:fe:66:
31:5c:fb:8d:6b:06:33:48:0b:cd:37:db:12:bc:65:
9e:8d:b5:37:a5:8a:c5:95:2c:fa:75:67:d1:9c:4f:
7d:e6:67:e8:91:97:72:6f:aa:03:82:25:33:a5:c4:
40:4c:b3:67:33:07:c8:c6:6a:68:8d:40:36:df:08:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:A4:19:09:70:C9:64:44:FC:ED:3A:67:73:03:E6:F5:1F:5D:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w4KkGQlwyWRE_O06Z3MD5vUfXWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.135.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5c:f4:27:e2:31:ac:40:c0:45:f9:c7:c1:56:e4:78:7c:c2:
52:73:92:c1:34:7c:ac:6f:9c:a1:33:79:28:12:9b:c2:73:22:
6f:d2:70:ed:b8:58:be:34:32:27:12:83:58:10:89:4a:10:c3:
01:03:3d:fe:3e:57:04:77:d4:23:2e:83:b6:f2:89:fb:07:23:
26:fd:73:7e:f0:52:87:17:b4:0e:46:b6:44:7e:c2:7d:68:49:
c0:41:5e:eb:cd:33:5c:69:d9:77:62:e6:a6:23:8d:38:f7:b2:
73:9e:d2:ee:16:0d:b0:91:f0:4a:6a:71:f8:47:d0:d2:21:c8:
61:d4:16:db:1a:10:28:25:ba:43:f0:3c:fc:a8:a5:a6:18:61:
27:c3:04:4c:05:00:42:6e:22:76:09:64:75:fc:58:69:f9:7c:
dd:11:13:61:cb:44:02:c1:6c:ef:b6:55:8d:3b:3c:e5:fc:e2:
c5:1d:47:96:2f:d2:42:bc:00:3f:6c:58:8b:00:7f:22:71:0e:
98:9a:ad:63:00:9d:b7:3c:d1:d5:68:14:a6:51:5d:c1:08:f8:
5b:e2:86:c0:ee:49:f3:da:a5:f5:4f:95:4d:22:45:6f:55:3f:
6c:59:63:2a:ea:04:21:df:4c:1d:96:55:e3:43:c4:e7:b6:7b:
4e:a0:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:59:47 2025 by rpki-client