Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/IH1zUC4OOlIB_Mr6qjQXl2F0Vlc.roa
File: IH1zUC4OOlIB_Mr6qjQXl2F0Vlc.roa (raw, json)
Hash identifier: dPAXcm2P60IEnITN5GrAYeu9AnPzKXC8WqlmWD19l6I=
Subject key identifier: 20:7D:73:50:2E:0E:3A:52:01:FC:CA:FA:AA:34:17:97:61:74:56:57
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D1A6A0C6526B9929D50934CCA8CB0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/IH1zUC4OOlIB_Mr6qjQXl2F0Vlc.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1a:6a:0c:65:26:b9:92:9d:50:93:4c:ca:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=207d73502e0e3a5201fccafaaa34179761745657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:0d:e6:ed:92:c7:e6:2b:6b:e9:86:6b:5f:
69:ed:a5:1a:5f:b6:df:2e:eb:2e:76:8a:c5:7c:70:
c7:92:d1:e7:39:6c:3f:9d:24:83:d3:f1:b9:8f:39:
c0:b8:e5:d0:29:e8:7a:b4:bd:ca:b5:e0:14:f0:de:
c0:62:ca:66:1e:3b:28:ab:72:e9:c8:a0:e6:8d:97:
d0:30:0d:92:2d:e9:3f:eb:5c:63:29:6f:69:8e:00:
2a:af:e2:1d:29:ef:5d:61:0b:06:ab:f6:8b:72:49:
c8:71:d8:9e:61:cf:60:cd:25:ca:9f:56:f5:b2:ab:
6c:36:78:07:08:f3:bb:6d:6d:7e:64:85:7e:f9:29:
0b:55:34:e3:56:ee:84:19:62:2d:cf:7c:90:a2:78:
ec:04:ff:2d:70:1e:10:4e:29:ad:56:1c:e5:f1:55:
79:ca:63:56:c2:4b:7b:0b:82:a0:51:9e:0e:47:2d:
8a:b7:53:94:58:6d:4f:fd:45:08:37:49:11:d5:84:
17:27:de:75:e9:31:f6:5f:01:20:4a:46:b7:35:3b:
b7:f4:24:68:6d:d8:5c:a3:46:1a:1b:bf:e5:64:70:
f1:a6:2c:14:95:cd:d6:5d:b5:97:71:c7:be:d2:8d:
b9:ba:78:10:14:38:84:b5:ed:38:ca:d5:8d:c1:63:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:73:50:2E:0E:3A:52:01:FC:CA:FA:AA:34:17:97:61:74:56:57
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/IH1zUC4OOlIB_Mr6qjQXl2F0Vlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.84.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
00:8f:36:4b:86:bd:f3:cb:30:06:b6:f9:7f:01:ff:17:b8:86:
37:0d:b9:06:d2:6b:c2:73:1f:e1:b8:a3:aa:ce:60:58:b6:22:
27:11:26:4e:be:24:0c:f9:5b:cd:98:17:79:36:6d:fa:ea:64:
06:a8:45:6b:a7:53:da:c6:99:75:d8:39:a2:25:d4:b9:23:e9:
46:a2:26:05:65:68:87:55:94:bc:e5:cf:f5:50:2f:0c:c8:10:
c2:fc:a7:8c:2f:a5:dd:d7:00:51:b3:cf:8e:a7:83:6e:00:65:
4a:d5:a8:38:9d:48:cf:b7:bf:03:b6:72:d4:f6:dd:da:a3:3b:
01:ad:03:d8:e5:6b:4d:37:5f:14:ea:4a:94:17:8d:0d:3a:db:
e7:27:51:a4:7e:de:a9:c1:65:6f:57:7f:47:5c:5b:25:14:3e:
fb:32:31:a0:85:14:da:41:f8:73:e9:13:1b:77:f1:2b:55:19:
c6:4c:64:ad:5f:ad:3e:49:ff:d7:94:a9:d9:3c:ef:67:13:8a:
4d:97:34:bd:28:ff:c5:b1:b0:cb:ed:92:21:07:86:3b:24:e4:
cf:8f:81:c1:8c:0a:46:07:35:d6:c4:88:6a:05:bb:51:b7:b0:
fc:b7:98:20:ec:91:55:d2:ca:df:b1:69:29:76:4f:f4:0e:5d:
58:1c:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:15:49 2025 by rpki-client