Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa
File: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (raw, json)
Hash identifier: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=
Subject key identifier: 33:6C:F3:77:C1:FE:4E:58:3B:5C:07:53:C1:44:23:2D:46:06:96:56
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B48A96B8CB780701BDEB1A7B614D48
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa
Signing time: Thu 02 Jan 2025 15:48:50 +0000
ROA not before: Thu 02 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215947
IP address blocks: 31.130.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:8a:96:b8:cb:78:07:01:bd:eb:1a:7b:61:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336cf377c1fe4e583b5c0753c144232d46069656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:6a:70:41:4e:d5:78:3d:0d:93:b9:7c:09:
ce:09:05:ef:12:64:32:99:ec:dd:e0:5c:f1:33:ba:
10:6c:0c:9f:cb:b9:03:b5:87:13:e3:33:68:93:31:
fc:77:c5:15:d7:3a:58:75:22:7b:7c:e0:01:63:54:
f3:8a:17:01:58:01:d3:7b:02:86:78:3f:14:aa:2a:
46:41:52:ae:32:20:f3:e0:a7:f6:2f:6b:6d:6b:8d:
cf:2f:d3:88:ce:37:7d:37:f0:37:3a:fe:7c:f9:7b:
ee:34:43:2f:70:18:d6:b2:d1:88:7a:35:9c:1b:a5:
70:34:f4:66:5a:aa:2f:98:a8:0c:33:33:17:d3:62:
de:1f:00:f9:8a:6a:d6:dc:0b:d8:7b:7d:66:78:3c:
91:27:0e:99:e3:34:77:65:2e:a7:ef:49:72:00:a7:
91:cc:d1:2f:19:ab:f6:c3:1b:87:fa:bf:74:66:3d:
20:a1:25:68:6a:f2:1c:9e:bd:db:d0:2f:4e:ec:ed:
e4:24:5c:29:77:18:ad:f5:b2:90:17:d0:05:e7:3a:
59:b5:c8:fc:78:df:77:ef:e4:a6:45:81:fc:f7:4c:
34:05:f3:72:d7:f2:2d:eb:83:d2:22:f5:5f:a8:c8:
4e:5d:3d:28:15:bc:4c:76:84:e0:c8:4e:89:ad:b4:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:F3:77:C1:FE:4E:58:3B:5C:07:53:C1:44:23:2D:46:06:96:56
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:db:f6:2b:75:a4:e3:fe:44:8d:47:7a:55:f8:12:97:c6:72:
d1:25:f5:a2:14:c7:28:e5:5f:44:16:0e:5c:e9:ed:48:d5:80:
34:91:62:ed:e7:3a:1c:2e:83:3f:55:26:dd:15:1e:32:e4:12:
56:bf:93:ff:53:f2:17:2a:99:24:aa:a5:3f:3e:63:fc:58:ce:
a8:2d:52:25:fb:1a:21:fb:0f:17:53:86:67:c9:65:7a:77:c5:
79:73:e3:40:a8:8c:08:7a:a9:e2:0b:ed:9c:48:06:44:41:e4:
8d:9b:65:b0:65:9a:33:32:c4:67:50:a2:7a:79:df:fe:9e:e1:
0b:26:e4:6e:8c:61:41:12:e3:9e:6c:8d:df:f3:95:64:59:c5:
eb:20:27:c2:a0:dc:d3:13:eb:8d:fa:84:4a:fa:5e:37:cc:43:
9f:53:0d:23:8d:bf:0f:0d:28:8f:9e:ca:7f:47:4a:07:2c:27:
7b:06:3f:7c:3e:0c:53:5e:b8:5c:c1:be:76:cb:1f:c3:7d:4b:
ea:b6:ec:5f:e7:e0:12:c6:f2:40:93:67:a4:59:37:6e:fe:07:
11:ed:ea:ff:a5:33:0d:79:08:89:0b:96:46:81:2d:ca:51:76:
fe:95:75:24:a4:25:d3:06:91:40:4d:41:60:07:3d:14:5a:10:
3e:14:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:46 2025 by rpki-client