Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xPqUl8outI9M63_FWacDmKv2VIM.roa
File: xPqUl8outI9M63_FWacDmKv2VIM.roa (raw, json)
Hash identifier: 919pKL64fXfVUXF4VMWq43Plt6m6EOtaZPyRcFQE0g0=
Subject key identifier: C4:FA:94:97:CA:2E:B4:8F:4C:EB:7F:C5:59:A7:03:98:AB:F6:54:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823841F54ED13490A7776E60F3427BF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xPqUl8outI9M63_FWacDmKv2VIM.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 31.57.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:84:1f:54:ed:13:49:0a:77:76:e6:0f:34:27:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4fa9497ca2eb48f4ceb7fc559a70398abf65483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:41:04:c4:b4:bf:b7:e9:e9:70:e4:f0:d9:
ef:1c:16:f9:35:fd:92:26:5f:cc:47:b2:8e:b7:da:
b5:3d:f6:98:bc:e8:bd:0c:cb:c4:a7:75:68:b5:53:
31:d7:47:f8:99:18:87:73:1c:6d:2d:d7:fc:7e:fc:
2c:61:54:9c:de:cc:1d:32:91:bf:17:9a:dd:b8:4b:
65:e1:1d:dd:ab:d4:3d:2f:a3:57:a2:48:c3:63:10:
ba:1d:a9:fd:eb:8f:e4:9c:56:15:61:37:dc:b5:aa:
d8:90:5c:9d:61:13:d6:cd:f4:e8:63:c0:41:72:b8:
12:17:36:76:22:17:3d:5f:36:08:7b:a6:3e:1b:1b:
25:9f:f4:92:54:57:b0:83:b2:69:80:a5:d0:f0:ee:
4d:6e:76:6d:49:cd:de:d3:10:f0:86:19:20:bf:d8:
bb:47:18:41:69:2a:11:a5:e0:13:49:7b:ec:3b:c8:
f7:96:10:b7:c0:81:e7:a9:35:fe:13:2b:8e:6f:75:
21:74:b5:7c:d6:26:47:52:3b:20:a8:bc:62:43:33:
26:a0:fc:5d:fb:88:7a:01:ad:a9:8e:d7:d2:88:3b:
f2:7b:97:77:80:89:d5:f9:fb:0b:cf:a9:73:f8:88:
3c:12:9d:bb:c5:0d:cc:eb:f3:e1:01:70:eb:de:a7:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:94:97:CA:2E:B4:8F:4C:EB:7F:C5:59:A7:03:98:AB:F6:54:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xPqUl8outI9M63_FWacDmKv2VIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.243.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d8:4c:9b:2a:29:bd:b9:85:b5:7f:60:09:da:bf:ac:8b:d1:
fe:41:33:00:c4:62:c1:40:4a:69:5a:7f:9d:0d:15:a2:79:af:
b3:82:f5:32:38:1e:f4:56:d7:3c:2f:8e:06:78:97:70:ee:06:
1d:9c:26:12:45:6a:f5:43:13:e4:1a:80:ec:10:4f:b0:3d:56:
82:3f:56:b4:a6:2f:f8:85:a2:50:2b:3a:51:3c:15:2a:2e:89:
55:2e:20:c5:66:2b:39:ca:02:84:e9:5b:7c:70:a9:fb:ef:bf:
ae:79:8a:1c:6d:71:cf:5e:94:a3:d3:2a:4c:70:46:b9:70:dc:
50:ed:69:7a:58:be:90:75:5b:50:56:30:ea:40:27:a9:e8:0a:
7a:51:54:09:6c:c3:f8:2d:e6:a0:80:20:40:99:55:c9:4a:10:
16:4f:36:90:84:20:c1:96:fa:a3:fe:4d:2d:5e:b6:08:03:a4:
01:ac:22:59:41:5a:de:a4:e2:46:12:e8:94:93:66:ed:c8:61:
d6:1e:22:27:52:d6:55:49:55:77:06:e6:a1:2f:41:71:fb:33:
b4:49:26:15:7d:8e:70:81:18:da:fc:45:89:dd:41:33:63:f8:
68:96:0b:e1:68:5d:99:74:d4:0b:ea:7e:c5:ff:db:a2:59:78:
47:ec:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:58:29 2025 by rpki-client