Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-_3lzeI_q2OJA7uV891DxhpIW7I.roa
File: 1-_3lzeI_q2OJA7uV891DxhpIW7I.roa (raw, json)
Hash identifier: 4oFVojTb+u7X30Ay6EZ9drjUTsbhTwxg56xtt04JFRQ=
Subject key identifier: FB:FD:E5:CD:E2:3F:AB:63:89:03:BB:95:F3:DD:43:C6:1A:48:5B:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019647C5DA87B33FF38C96D1058490F0B0EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-_3lzeI_q2OJA7uV891DxhpIW7I.roa
Signing time: Fri 18 Apr 2025 07:21:10 +0000
ROA not before: Fri 18 Apr 2025 07:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400696
IP address blocks: 31.56.71.0/24 maxlen: 24
31.58.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:c5:da:87:b3:3f:f3:8c:96:d1:05:84:90:f0:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 07:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbfde5cde23fab638903bb95f3dd43c61a485bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:f7:b7:79:d6:53:6b:df:ac:a2:a6:1c:67:
fd:35:75:00:8e:6a:d5:89:e9:55:5d:42:06:bd:74:
70:4f:c0:82:20:a7:fe:80:a1:68:5b:21:af:e2:38:
15:48:27:95:29:50:66:40:84:7a:8a:c2:45:d0:1b:
4b:c9:e8:bb:db:52:12:dd:0d:e9:50:cd:fe:ce:72:
33:26:5c:81:65:bc:90:99:ed:05:e0:2e:54:5c:d1:
f2:7f:d1:4f:6f:2e:62:73:7e:a8:15:f5:f4:ae:89:
91:77:1b:d0:9f:0e:99:88:3a:56:93:a8:df:0a:da:
0f:14:4d:17:77:10:19:a5:42:e6:f6:4e:a1:1a:54:
92:6d:5d:78:f1:e9:ac:19:0a:01:5a:75:55:d1:c4:
dc:a8:76:ff:9b:8e:dc:3d:17:8b:6e:1d:a4:ae:5e:
f4:7b:12:80:24:86:f9:51:32:52:48:9a:09:cc:73:
36:5b:24:10:8d:06:37:c0:af:bb:0a:3d:39:40:f6:
c2:90:a8:04:69:48:d9:a4:9f:5b:8c:c5:a8:2f:d6:
50:d5:a3:3e:a5:b7:ae:ef:1c:0b:54:3f:ba:ff:2e:
5f:a5:03:e2:04:73:61:c7:c3:4b:cc:87:99:f2:61:
e5:f3:2b:3a:03:5f:f0:13:65:26:5b:28:81:b8:06:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:E5:CD:E2:3F:AB:63:89:03:BB:95:F3:DD:43:C6:1A:48:5B:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-_3lzeI_q2OJA7uV891DxhpIW7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.71.0/24
31.58.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:72:a2:c0:34:d8:55:b5:68:8f:1a:01:5a:16:67:f8:5f:6f:
b4:f0:b8:f7:29:fb:5b:36:ab:37:bf:f9:a8:ee:e3:bc:5d:b9:
ca:b8:79:ba:9e:14:b4:a7:ae:9e:77:8a:cb:f8:ec:86:10:78:
e4:5d:b4:42:a4:e9:12:6a:1c:73:ad:d4:42:07:0e:de:2c:e9:
ad:1f:d9:45:a4:da:ce:41:50:6d:8f:84:b6:ab:bc:bc:2d:61:
8e:de:0d:4b:df:db:db:9a:e0:30:b5:a0:48:2c:5b:03:73:a9:
b7:6a:d9:94:be:03:51:21:fb:46:00:83:c5:70:20:e4:9f:35:
24:06:5a:a2:95:ea:a7:34:4a:31:1d:58:7c:5b:4a:c7:ab:60:
0b:ba:d0:a1:2d:46:31:77:c7:51:67:0e:39:c9:62:5d:53:90:
df:52:92:d2:db:25:f9:95:16:48:3d:6a:80:4b:22:6d:54:93:
d2:ee:38:af:48:c5:a5:7a:05:7b:78:ea:b0:77:16:38:32:01:
f1:7a:57:ca:72:c5:27:f5:1f:d4:c7:f7:90:23:3a:03:ca:e9:
96:b7:d8:69:9e:9e:61:80:81:c3:aa:5d:6a:a4:51:8f:ce:59:
27:c4:7d:42:47:19:8d:17:63:ae:74:84:02:f9:83:f2:b9:d2:
ed:e6:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:17:00 2025 by rpki-client