Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/lZT8yo0YJP_4sM-b1IUNzKQRjgs.roa
File: lZT8yo0YJP_4sM-b1IUNzKQRjgs.roa (raw, json)
Hash identifier: XHQJ9q+Gs3qik44OpZAQZ2SSEzP7MTgequXotFZTeB0=
Subject key identifier: 95:94:FC:CA:8D:18:24:FF:F8:B0:CF:9B:D4:85:0D:CC:A4:11:8E:0B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01963A6D19976376F961DC02E85F895DFBC6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/lZT8yo0YJP_4sM-b1IUNzKQRjgs.roa
Signing time: Tue 15 Apr 2025 17:09:10 +0000
ROA not before: Tue 15 Apr 2025 17:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:6d:19:97:63:76:f9:61:dc:02:e8:5f:89:5d:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 15 17:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9594fcca8d1824fff8b0cf9bd4850dcca4118e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:3e:a3:1d:b1:8b:35:7c:8e:68:93:b8:6d:
88:76:55:b1:3b:5a:b5:02:2e:c1:dc:15:95:5d:4b:
7c:3b:04:d2:2e:c4:99:ca:74:0c:e7:2f:1a:32:e8:
1e:0c:62:68:8f:da:23:6d:f8:1a:c5:24:c2:4b:37:
d3:5b:ba:c4:78:06:ce:fb:1d:c1:9d:19:28:77:fa:
93:43:51:3e:3b:35:cf:c9:e1:31:81:57:74:c3:e1:
e2:80:58:1d:29:77:5c:de:6a:87:47:0f:e5:bf:c3:
91:1c:d6:b6:6e:23:d3:d2:f7:2d:f0:43:e4:ff:3b:
8f:de:47:df:f1:81:f3:c4:6b:07:39:7f:b9:31:f9:
6f:1f:3e:d1:e4:31:86:15:1a:6e:bc:e5:4d:c4:95:
d3:a2:10:1b:f2:b3:14:71:ef:de:2d:ef:33:99:b8:
91:3b:e8:30:3b:85:e3:96:ee:e9:79:8c:5d:58:c5:
4e:8c:b6:18:60:73:ab:eb:b1:a5:65:ac:c1:94:12:
94:dc:cc:19:26:ca:b2:7d:47:27:86:d5:09:60:e7:
e6:97:a4:60:4f:ad:d6:ad:7c:e7:ef:d2:f4:de:a6:
f6:c6:c1:5a:c8:d0:24:3a:46:81:29:62:21:d9:ec:
63:b7:97:b8:b6:aa:27:88:90:ab:d5:21:1c:96:65:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:FC:CA:8D:18:24:FF:F8:B0:CF:9B:D4:85:0D:CC:A4:11:8E:0B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/lZT8yo0YJP_4sM-b1IUNzKQRjgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.54.0/24
77.92.148.0/24
188.132.170.0/24
188.132.191.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8e:df:22:80:3c:7d:40:b6:d8:e6:3f:a2:22:24:b5:e6:fe:
aa:e3:64:c2:b2:67:b3:cd:e5:d9:29:1e:14:d4:0b:5c:48:f4:
d3:8e:a8:4d:d9:2f:0b:95:e2:f0:ed:c2:a5:02:a5:6d:dc:77:
20:2c:04:b7:e6:e9:d4:ac:d8:b8:72:27:ee:c7:7d:cd:9b:91:
b4:95:ba:6f:20:00:cc:b0:e7:2b:4e:29:7f:df:38:12:99:79:
1a:58:bd:55:59:e8:de:64:a5:6d:b6:6d:d9:fd:d7:c9:20:12:
2f:aa:2d:a4:fc:1d:d1:a8:65:20:5f:79:a3:c9:4d:61:15:d5:
70:a5:4e:0d:3e:fe:cb:be:a9:30:90:b8:4c:3c:0b:bf:fc:e5:
85:47:67:73:f6:53:02:94:97:a1:b3:24:1a:43:3c:a0:09:0e:
49:52:6e:64:96:8d:6a:e8:4d:b7:e2:0f:8c:7d:1d:fd:8d:80:
42:a0:f2:b6:77:11:86:10:16:c8:43:5f:51:a5:a4:73:98:cd:
04:b4:68:77:5a:aa:11:5f:f3:6c:34:70:d6:6d:7f:3c:7c:44:
50:73:5c:15:b5:9d:02:1d:80:2e:fd:52:56:ce:40:b9:22:5c:
02:73:65:79:ac:c7:ff:6c:42:55:ce:9d:07:a6:31:67:84:c3:
0e:a8:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:46 2025 by rpki-client