Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wA4G1d-vlmgrxAf6jV87hFnXa1c.roa
File: wA4G1d-vlmgrxAf6jV87hFnXa1c.roa (raw, json)
Hash identifier: jbAsKV1glBSaILYRBLcRj3+4ra3fFVm/YLQZNkYS/1w=
Subject key identifier: C0:0E:06:D5:DF:AF:96:68:2B:C4:07:FA:8D:5F:3B:84:59:D7:6B:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282370614F780C7DA124BD1E0905CC54
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wA4G1d-vlmgrxAf6jV87hFnXa1c.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214138
IP address blocks: 31.56.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:70:61:4f:78:0c:7d:a1:24:bd:1e:09:05:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c00e06d5dfaf96682bc407fa8d5f3b8459d76b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:29:ef:e3:ac:d5:25:43:28:d6:e9:ee:ac:
02:87:3e:b1:13:41:61:d2:32:de:5d:3d:d1:5c:c3:
c3:5f:31:62:0a:34:17:ed:b0:c4:f3:ea:72:cd:1b:
26:fe:8e:9e:87:a6:3d:fb:58:5d:0a:94:d8:4b:d6:
a3:0a:d2:ea:db:c3:de:9d:57:36:2f:8b:d7:38:1c:
36:b7:c5:59:42:35:05:77:94:3b:09:85:3e:18:b0:
76:d3:0f:cd:0a:35:dc:93:ec:1e:02:5a:bf:2a:52:
4a:62:23:61:37:47:0d:29:95:3d:49:ab:9e:30:d9:
fb:b0:01:f0:ca:e2:f8:ae:c6:13:26:94:43:a8:2d:
ac:e1:2e:45:9a:62:4f:db:c6:2e:76:d0:7e:3e:ef:
f5:62:8a:4e:96:5f:e2:ab:65:17:5e:f7:16:06:a3:
c3:9e:0e:f4:b4:b6:e8:a1:57:5b:c2:03:b1:f6:e7:
74:21:ff:5f:8b:9a:95:de:aa:41:d3:cd:79:de:6d:
f6:13:4f:ac:21:50:bb:d1:1a:02:08:e2:c2:1f:5d:
a6:f2:9e:93:38:cf:7f:ff:96:17:0d:1b:61:22:92:
0b:10:3e:d2:94:4a:39:74:9e:74:06:2f:07:f3:03:
ec:e2:9b:1c:45:19:f3:5b:17:da:3f:de:67:d1:98:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0E:06:D5:DF:AF:96:68:2B:C4:07:FA:8D:5F:3B:84:59:D7:6B:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wA4G1d-vlmgrxAf6jV87hFnXa1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.45.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f4:80:eb:11:bd:22:0b:16:59:c4:6a:35:48:22:a9:fc:4e:
33:d0:55:b9:ae:8f:f4:a4:b8:7f:ea:ba:ab:39:4d:ad:5c:e5:
fe:11:c1:03:78:64:7e:f3:bf:f0:57:82:b5:f5:8e:fc:8e:17:
cc:ee:0e:ea:27:52:6e:32:b5:74:8c:4b:c4:81:3f:7c:ca:a9:
45:6f:c0:71:ca:ca:ab:13:af:69:bf:cc:5f:b9:6a:56:4d:1a:
2b:b9:28:49:13:49:00:b4:02:97:66:09:e6:ed:c2:03:fa:93:
84:31:c5:1c:ed:4e:07:18:d2:b3:fc:20:ba:29:64:c9:96:0e:
98:6e:25:51:05:29:07:39:f6:a7:b3:b1:7f:0f:ad:2d:e5:93:
0e:47:5e:0e:95:42:67:ff:d3:70:a8:6c:3a:8d:e9:c1:af:0c:
13:9d:66:a8:ff:57:b7:ec:a5:df:a8:2b:24:dd:26:99:df:b1:
1b:d2:a9:8f:40:14:0b:4d:cb:86:36:d8:a2:f3:a6:54:25:bd:
b1:f9:d1:7b:48:f2:43:bd:88:01:70:d5:c9:13:4c:bc:0b:f8:
17:9f:d7:2e:6e:c8:ed:4e:85:4f:c1:02:45:13:ee:3a:41:4f:
5d:fa:24:4c:fc:a7:5e:96:b9:ec:b9:64:e3:54:f5:22:72:4c:
07:46:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:56:47 2025 by rpki-client