Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z0gLwmb6z7wR1DeWruEqPl_RDQM.roa
File: z0gLwmb6z7wR1DeWruEqPl_RDQM.roa (raw, json)
Hash identifier: tweT9Y8iyjudjveW0mxCTaz4Q3SW07oBC72yEhipRNI=
Subject key identifier: CF:48:0B:C2:66:FA:CF:BC:11:D4:37:96:AE:E1:2A:3E:5F:D1:0D:03
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019434F6D63BB51CC24FA9C6995EFAA2E3A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z0gLwmb6z7wR1DeWruEqPl_RDQM.roa
Signing time: Sun 05 Jan 2025 05:36:19 +0000
ROA not before: Sun 05 Jan 2025 05:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 31.57.101.0/24 maxlen: 24
31.57.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:f6:d6:3b:b5:1c:c2:4f:a9:c6:99:5e:fa:a2:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 5 05:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf480bc266facfbc11d43796aee12a3e5fd10d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:31:ba:27:e7:95:e1:81:97:c6:e4:5e:a9:5d:
6d:53:ca:d3:c8:84:b6:dc:e0:14:77:3a:d6:94:d2:
4b:ac:a4:15:96:87:20:e8:51:01:4b:91:93:0a:d5:
67:28:c4:02:89:a8:6a:99:cc:f0:7d:4d:4a:9a:13:
be:d8:7f:5f:57:f4:08:18:6d:2e:6e:de:6f:ff:e4:
1b:3c:6e:32:54:44:a9:7c:48:01:06:fe:c0:74:5e:
6d:54:5c:ca:4f:6b:26:6b:36:3d:e5:f8:78:0d:a7:
84:80:49:4e:d5:c4:d0:ae:d3:f6:04:7d:d3:be:32:
2c:ca:34:72:ef:7b:0f:34:c6:5a:8d:96:c5:b6:3f:
3a:0b:12:54:08:7b:74:b3:39:02:22:72:dd:c8:f0:
35:f0:dd:de:64:93:e9:98:d9:e6:dc:54:92:96:44:
aa:c1:09:04:c4:ec:79:5e:46:b8:79:a7:b6:ec:46:
9e:c7:d2:fa:49:e3:0e:c2:12:8b:c8:ac:f1:26:d9:
8d:3f:c8:85:15:16:b0:51:08:6b:79:7b:8b:04:ae:
db:1f:0a:d2:f1:7b:ad:66:52:e1:17:0c:9b:a9:c2:
98:9e:9c:48:27:57:9b:bf:d4:0e:d3:98:ee:84:c4:
79:b6:47:02:9c:18:2a:64:09:86:29:b2:f7:65:35:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:0B:C2:66:FA:CF:BC:11:D4:37:96:AE:E1:2A:3E:5F:D1:0D:03
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z0gLwmb6z7wR1DeWruEqPl_RDQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.101.0/24
31.57.245.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d6:a9:98:b9:13:07:3f:c4:79:4c:34:8c:0f:32:5a:06:09:
4d:10:8b:ec:8a:41:e3:4f:6f:d3:50:a6:ca:8e:11:74:c3:c8:
2d:1f:1a:fc:0c:f1:bf:20:0b:93:c3:8b:06:13:2a:59:b9:69:
a8:57:58:af:e8:f6:f0:4e:2a:b3:a1:01:2c:d9:6a:ca:8b:5d:
68:03:89:00:4d:4e:2c:76:5b:7a:b0:10:b1:a4:70:29:29:28:
3d:15:f1:ed:0b:61:c2:f2:e9:0a:4a:6d:3a:8b:fb:bf:f4:8e:
34:2e:f2:d5:53:2d:1a:30:29:f8:b6:b4:a6:6c:c4:0f:fc:fe:
e2:02:50:67:13:47:4a:43:5f:70:36:83:2d:c4:88:8a:cf:0f:
56:8e:7a:a5:a2:fd:70:51:d3:67:0f:bf:c5:c6:1f:ce:17:14:
d3:45:95:da:1e:78:59:f4:73:02:b1:1f:b5:a2:a4:6e:c5:57:
08:bd:e6:23:21:3f:8e:4f:1a:e1:30:d4:0d:1f:f8:17:42:de:
dc:3b:34:cf:2e:ff:3f:65:e3:dd:71:ab:3e:1e:e2:94:26:ac:
a7:c2:a2:ae:1a:3a:22:45:3e:a3:76:6d:76:01:2a:84:b3:d9:
24:68:d9:b0:25:17:b3:65:76:d1:13:19:68:5b:c6:36:93:c1:
8b:3e:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:15:22 2025 by rpki-client