Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/A31_B2nuhoGFF02yDR9tIcsA9vo.roa
File: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (raw, json)
Hash identifier: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=
Subject key identifier: 03:7D:7F:07:69:EE:86:81:85:17:4D:B2:0D:1F:6D:21:CB:00:F6:FA
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C48F0522D90A5B1EBE894E36CC865
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/A31_B2nuhoGFF02yDR9tIcsA9vo.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48359
IP address blocks: 109.232.5.0/24 maxlen: 24
185.126.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:f0:52:2d:90:a5:b1:eb:e8:94:e3:6c:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037d7f0769ee868185174db20d1f6d21cb00f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:6c:7d:89:0b:ff:2f:09:dc:48:26:2f:21:
aa:9c:4e:14:a2:a9:97:ee:30:35:21:69:5f:87:18:
c5:c5:4a:79:65:89:cc:2c:e8:8d:ed:d2:45:d1:88:
4f:37:af:13:1b:27:6e:b6:80:f5:58:8c:94:ca:35:
01:ad:d3:78:68:1e:ac:b8:2e:9a:dc:c0:37:db:4d:
62:db:a8:58:28:4f:9d:6f:01:b3:0b:ef:f1:ab:7b:
e3:02:d7:73:e1:97:78:5c:06:91:6c:2d:fd:48:4e:
dd:6c:7a:19:34:d2:31:c0:7c:af:cd:02:cd:2c:c4:
8a:4e:dc:44:9f:fa:02:55:94:d1:52:8d:d9:96:ae:
ae:9c:ed:f9:89:2c:9c:38:d1:69:89:02:26:85:51:
ad:51:a7:95:61:ec:a0:ac:44:c6:25:92:e5:4f:c8:
25:ce:42:12:82:e4:57:7c:9a:e8:13:37:6c:c6:27:
c9:f0:30:a4:0a:ca:00:c5:94:2b:29:8a:a3:02:32:
38:00:91:e1:df:88:3c:a1:9e:77:6d:e5:50:b8:12:
8b:41:c6:a4:5a:7e:3f:93:40:95:a1:f1:15:0d:e6:
b9:c6:ad:b7:43:5f:bc:b5:8b:76:7e:1d:4c:23:9a:
28:42:13:a7:0f:09:0e:61:4f:11:63:e2:50:2a:16:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:7F:07:69:EE:86:81:85:17:4D:B2:0D:1F:6D:21:CB:00:F6:FA
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/A31_B2nuhoGFF02yDR9tIcsA9vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.5.0/24
185.126.42.0/23
Signature Algorithm: sha256WithRSAEncryption
90:ee:2e:89:a2:5f:93:6e:24:e7:cf:f4:b9:28:30:db:d9:0d:
f3:1b:aa:11:da:31:57:f7:4f:52:cc:1a:ea:00:e4:69:a3:ef:
8a:6a:c9:32:c4:4f:1f:47:2d:34:4f:d7:30:56:ec:08:3e:a1:
8b:c4:54:39:f6:26:a9:86:ff:58:f3:9d:90:80:22:48:5c:14:
99:6b:b6:92:05:22:19:3c:2d:5e:bc:40:4c:ec:b4:80:11:72:
d8:21:0b:17:c7:c2:be:b6:88:e3:8a:48:1c:f8:7e:8a:3f:fb:
66:02:1c:3b:f3:51:a5:e4:9a:a3:c2:53:7d:61:fa:50:b8:94:
d6:b9:5d:73:d0:33:8a:b4:2e:c4:9d:23:2d:14:b5:24:f2:d8:
18:5e:ef:d2:fc:51:d2:3f:79:43:3c:91:1d:94:6a:26:15:2d:
91:8c:b0:08:48:dc:89:b4:c1:a9:5f:3c:4a:ec:8f:c0:e4:8b:
91:98:99:70:0e:05:48:71:3b:9e:95:a3:10:e0:05:ee:ff:66:
6d:a1:8a:1d:4d:60:18:ad:eb:01:ea:fa:70:d3:01:8e:da:26:
85:5a:64:ef:8e:6d:ed:f7:d6:90:21:bf:e2:47:c3:07:8d:87:
5c:ae:44:56:b5:3e:ab:1b:de:f8:0b:86:39:9b:32:3c:c8:53:
a6:91:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:32:55 2025 by rpki-client