Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0JCFFhmAfiXZ9SJQDHqm4SOgUWU.roa
File: 0JCFFhmAfiXZ9SJQDHqm4SOgUWU.roa (raw, json)
Hash identifier: zea1onxQxGHoXlHHxrJaDpNiEUYop07avDuE0P7cIIM=
Subject key identifier: D0:90:85:16:19:80:7E:25:D9:F5:22:50:0C:7A:A6:E1:23:A0:51:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196599F40541445141C6A55B7B6D3DF5D93
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0JCFFhmAfiXZ9SJQDHqm4SOgUWU.roa
Signing time: Mon 21 Apr 2025 18:32:10 +0000
ROA not before: Mon 21 Apr 2025 18:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 31.56.139.0/24 maxlen: 24
31.57.90.0/24 maxlen: 24
31.58.72.0/22 maxlen: 24
31.58.108.0/22 maxlen: 24
31.58.124.0/22 maxlen: 24
31.58.136.0/24 maxlen: 24
31.59.11.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:9f:40:54:14:45:14:1c:6a:55:b7:b6:d3:df:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 18:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d090851619807e25d9f522500c7aa6e123a05165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:ba:46:2c:2c:56:ba:dd:77:61:23:f2:ae:
13:14:66:34:63:44:9a:e9:9e:5e:91:6c:5e:88:37:
d9:17:80:e6:10:b3:f9:08:1d:92:3f:ba:20:d9:b9:
11:46:8f:47:35:e4:b1:4f:87:ad:c9:ab:08:c8:fd:
2c:d1:8e:d6:3b:8c:42:61:23:15:27:9b:0c:cf:ae:
09:4d:97:01:8c:55:8a:fa:c3:32:63:f2:38:a2:1b:
a9:4e:64:ac:c4:63:eb:f1:f0:88:1e:01:b7:d3:ea:
6b:10:c6:cc:7e:dc:ca:a6:15:39:da:ab:67:2b:e9:
63:1c:99:fa:f9:af:59:f6:d4:bf:d2:1b:7d:b6:02:
5c:72:6c:1d:d1:6b:4c:8f:9c:e1:ac:af:d8:32:ef:
e2:f6:73:ad:c2:cf:07:6b:92:73:54:84:43:9f:bf:
14:e3:20:1e:d7:13:da:55:2b:70:2c:b3:4e:0b:65:
2a:ff:bc:ed:a0:ec:ae:8b:b2:a6:92:4c:cc:d0:7a:
9f:5e:2b:28:b1:37:a8:34:9f:64:4a:e8:be:26:82:
f2:27:76:cf:8b:42:92:43:24:80:f9:eb:da:3d:05:
e7:f5:84:49:42:77:13:6e:56:a8:42:fd:b5:b1:05:
d3:bc:17:c6:fb:a8:86:91:cd:8e:27:ab:b2:a1:eb:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:90:85:16:19:80:7E:25:D9:F5:22:50:0C:7A:A6:E1:23:A0:51:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0JCFFhmAfiXZ9SJQDHqm4SOgUWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.139.0/24
31.57.90.0/24
31.58.72.0/22
31.58.108.0/22
31.58.124.0/22
31.58.136.0/24
31.59.11.0/24
31.59.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:2e:c8:04:18:7c:f1:57:e8:e2:c4:77:06:c9:d3:c2:25:31:
2f:0d:29:99:30:39:f6:f7:3e:67:f2:37:bd:22:45:d3:4d:ac:
fc:06:26:28:72:e7:e1:fa:ed:b7:96:50:36:90:e1:44:b9:33:
36:8e:be:8d:ce:17:07:09:c8:42:ac:dc:d4:1d:99:6f:ab:2c:
a9:67:eb:6f:22:30:f8:95:51:d0:72:69:db:ae:74:62:06:8a:
3e:27:dd:cd:0b:47:9d:6e:82:ee:28:6e:ca:48:e3:54:84:55:
77:72:37:d4:ec:ce:ba:32:bd:86:82:0c:82:6d:5d:0b:cf:c3:
3a:34:88:ca:73:6a:9f:39:51:80:96:0c:41:98:a5:20:15:aa:
43:b3:68:ae:88:b2:1b:65:d5:71:2b:6e:a0:4c:f9:a2:72:a2:
e0:b2:39:19:7e:ff:6d:3f:b7:5f:1f:b4:98:46:9a:0d:d0:71:
d2:4a:2d:aa:8e:89:73:99:f1:9e:cd:62:de:d8:35:5f:98:2c:
3a:28:c5:3a:2b:10:30:e6:29:f9:3a:61:4a:ba:9d:f1:76:71:
d1:9d:87:fa:b7:90:fd:0a:59:ba:22:90:6d:89:08:83:d3:de:
d0:ba:fc:e7:8d:43:9b:8b:61:8a:fe:d9:6d:63:3d:dd:5b:56:
38:3f:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:15:33 2025 by rpki-client