Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQYxgrdOl9lXhbpSBjHsu9-ULhQ.roa
File: zQYxgrdOl9lXhbpSBjHsu9-ULhQ.roa (raw, json)
Hash identifier: pge2lvfI0kngu6pKiQ92/51+KprNefqW32zWl22035A=
Subject key identifier: CD:06:31:82:B7:4E:97:D9:57:85:BA:52:06:31:EC:BB:DF:94:2E:14
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194CB0ABF5311004E130E4FAE6909E7969A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQYxgrdOl9lXhbpSBjHsu9-ULhQ.roa
Signing time: Mon 03 Feb 2025 09:01:06 +0000
ROA not before: Mon 03 Feb 2025 09:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 31.56.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:0a:bf:53:11:00:4e:13:0e:4f:ae:69:09:e7:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 3 09:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd063182b74e97d95785ba520631ecbbdf942e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:1c:3a:b9:90:a7:2c:2b:7d:ae:09:f0:78:
2b:e1:0e:fa:27:3d:37:6e:37:0d:16:22:bd:47:4f:
8d:52:9e:b5:62:02:f9:a5:59:bc:1a:80:c2:25:8d:
c9:eb:ab:27:7c:35:65:e3:08:44:33:34:23:57:c2:
02:5e:08:7e:2c:10:ee:54:4d:d3:88:7e:90:48:a6:
e0:05:a0:58:2b:c0:18:77:88:5f:fa:ae:d5:c5:0b:
94:2c:48:36:55:6e:c9:72:3a:3a:b6:6d:83:53:81:
bb:51:cc:87:f8:bc:21:d8:92:a1:53:e7:13:82:18:
3a:fc:9f:cf:e1:66:37:9f:c8:2a:40:c5:05:f4:89:
e8:53:47:bd:28:13:b9:f8:3d:b6:61:3b:ff:a4:0f:
e2:52:87:8d:26:1f:81:fa:1f:7c:4b:b0:a5:ab:65:
25:48:b1:95:37:1f:fe:a7:21:20:be:34:b4:1f:30:
af:6a:00:e4:a3:94:a7:57:c7:76:b5:d4:18:f4:ad:
34:42:16:e1:8f:04:3f:7f:3c:ef:2f:7b:81:ba:5d:
6f:10:74:aa:82:4e:2b:8f:e8:6d:ef:66:60:96:42:
fd:42:df:1f:23:bf:ef:58:05:75:32:f9:4f:94:ec:
1f:6a:92:89:bc:33:95:79:1c:a7:f3:d7:d7:4b:da:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:31:82:B7:4E:97:D9:57:85:BA:52:06:31:EC:BB:DF:94:2E:14
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQYxgrdOl9lXhbpSBjHsu9-ULhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
53:70:ac:7a:ac:af:54:5d:0b:46:09:69:fb:30:4f:2d:b1:a6:
fe:6d:de:03:49:48:d0:48:d6:f7:c3:24:2e:37:32:3e:60:cf:
91:ac:88:db:43:d7:54:b1:72:96:9d:a9:71:8d:13:2c:c1:a0:
51:1b:8c:4a:0b:6c:3d:39:0f:c6:11:2e:74:5d:0d:ed:5a:e1:
68:05:88:19:6d:88:15:a0:96:f6:5a:71:64:80:79:e1:48:0f:
de:62:70:72:35:b6:1f:d0:a1:a9:f2:2c:cf:72:92:5d:b2:fb:
97:0b:33:8e:60:6f:7e:ff:17:73:9d:77:f0:34:ba:6d:9a:ae:
b0:6f:60:73:0c:9f:63:0b:3c:93:2c:a9:b0:9f:cd:62:b9:da:
60:31:73:5c:29:b8:59:53:6d:33:74:68:eb:b0:ea:a1:b3:0e:
6f:93:60:1b:56:77:c9:02:7d:df:f6:9f:94:32:b9:da:b9:81:
77:e9:2d:8b:82:03:01:29:8b:a4:10:cf:43:ea:74:75:84:e9:
3f:6a:bc:82:c1:0f:ba:74:68:66:9d:c3:92:95:f8:10:5e:31:
9e:ca:b0:d7:ba:3f:c8:24:3c:d6:cd:30:b3:53:ab:cd:cf:da:
b2:f4:7e:c7:23:dd:a5:2d:61:3d:60:c5:7f:15:11:8b:6f:22:
a6:ee:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:39 2025 by rpki-client