Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/FzW7JoU60fLZt2V4T6FBU_g7_7M.roa
File: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (raw, json)
Hash identifier: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=
Subject key identifier: 17:35:BB:26:85:3A:D1:F2:D9:B7:65:78:4F:A1:41:53:F8:3B:FF:B3
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01942747DC347CECC6BD57685220AEE5030B
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/FzW7JoU60fLZt2V4T6FBU_g7_7M.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.42.128.0/24 maxlen: 24
31.42.129.0/24 maxlen: 24
31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
185.206.57.0/24 maxlen: 24
185.206.58.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:dc:34:7c:ec:c6:bd:57:68:52:20:ae:e5:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1735bb26853ad1f2d9b765784fa14153f83bffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:0a:f0:e6:7e:e1:12:a8:18:d5:fe:5d:67:
20:1d:56:58:e7:2a:ff:55:ce:cd:b7:87:26:0d:30:
e7:83:08:15:0e:e7:07:67:9e:61:48:19:cc:23:4a:
4f:ea:ea:8d:e6:f8:68:25:78:49:ad:c4:0d:1c:ce:
39:da:4c:f3:e6:ad:f7:6b:e7:dc:5a:58:1b:35:ae:
b5:6f:9f:19:a0:e3:4b:44:ce:f0:b2:62:06:f9:57:
c6:8c:50:74:d3:a9:ca:98:e8:da:30:e0:62:a5:ee:
59:46:0f:9e:9e:d3:30:74:14:98:18:4f:e3:9e:8d:
e4:19:7d:58:60:8d:bc:8f:b2:94:98:80:ff:c0:e2:
84:27:ea:7f:de:8f:05:ba:75:99:3b:fa:42:d0:a8:
55:d8:ee:25:3a:91:41:3e:e4:54:69:a8:c3:d9:26:
5c:68:12:f2:32:5c:74:79:4c:8c:1b:41:d5:ef:77:
e2:4e:9a:17:40:6e:47:63:89:1c:15:71:5e:02:13:
fa:1f:bc:50:b5:11:a0:f2:94:43:45:09:6a:38:39:
f1:f2:a2:54:ab:e4:bb:80:61:fb:ea:2c:57:32:ff:
7e:8d:7f:45:eb:04:30:68:21:be:a2:36:70:cf:6f:
ba:20:56:b0:fa:9d:fd:70:ad:ff:00:d6:8d:87:9f:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:BB:26:85:3A:D1:F2:D9:B7:65:78:4F:A1:41:53:F8:3B:FF:B3
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/FzW7JoU60fLZt2V4T6FBU_g7_7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/23
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
af:77:6c:61:9b:04:55:83:85:45:10:54:33:5e:e4:14:19:ad:
71:a4:a1:89:ac:10:9e:bd:f6:5e:0b:ad:28:44:76:37:1e:0a:
03:93:1e:98:57:c5:b6:e4:4f:f1:3f:ae:54:a2:4c:5a:53:e5:
31:bf:72:6d:14:ee:66:33:6f:95:ae:28:fe:19:24:98:c5:e7:
89:59:48:59:a5:97:6d:6a:8f:4a:db:e2:f3:b1:86:28:b0:45:
39:c9:19:01:ea:b4:74:39:c6:1d:46:44:7c:6c:c7:13:ec:cb:
e2:64:7b:04:a4:6e:12:e0:1d:9a:10:88:b8:f1:d6:7a:bc:49:
ba:30:e5:31:d4:be:5a:64:84:fe:61:0c:02:da:a5:11:8c:b7:
d5:a6:3f:ba:0c:75:15:a4:5d:b8:a9:71:20:91:76:61:70:f2:
2e:15:a9:9d:fd:4f:c3:32:5f:18:b7:a9:cb:08:69:0b:6f:b9:
66:28:15:dc:8c:ef:43:6a:d1:db:7a:a6:0c:46:0a:fe:18:d8:
51:9a:1c:64:2b:93:43:a9:c7:b0:60:04:9d:d4:5c:06:9e:51:
6c:4d:fb:c1:09:52:18:c4:da:09:14:24:2b:09:c7:9e:95:ee:
e0:78:4e:8c:4a:f1:88:f1:5b:38:23:37:a5:59:8a:25:7d:89:
82:14:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:28 2025 by rpki-client