Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7az9Gb-LAKfnMm1SIuI9nCKWvjY.roa
File: 7az9Gb-LAKfnMm1SIuI9nCKWvjY.roa (raw, json)
Hash identifier: nCNsTpQOgvLG7Z7OsOOj+S6fDKlrqMplMFwLmDZ7BpY=
Subject key identifier: ED:AC:FD:19:BF:8B:00:A7:E7:32:6D:52:22:E2:3D:9C:22:96:BE:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019652FEC701571CF01209C2D2A5B98CD3AD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7az9Gb-LAKfnMm1SIuI9nCKWvjY.roa
Signing time: Sun 20 Apr 2025 11:39:10 +0000
ROA not before: Sun 20 Apr 2025 11:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.90.0/24 maxlen: 24
31.56.115.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.193.0/24 maxlen: 24
31.57.195.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.57.234.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:fe:c7:01:57:1c:f0:12:09:c2:d2:a5:b9:8c:d3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 20 11:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edacfd19bf8b00a7e7326d5222e23d9c2296be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:be:5a:30:8c:3c:a6:bd:d3:14:17:5f:93:
86:10:98:e9:04:b2:58:62:14:ec:ed:f3:09:dd:7c:
4c:ed:9c:e0:0e:36:e9:b2:47:07:13:58:19:ab:ba:
e2:d8:7e:b0:5a:37:48:63:23:26:77:4b:ff:e3:0a:
48:ff:09:e0:09:7b:00:72:f4:0f:13:a3:51:74:06:
2f:00:22:c6:45:a2:b6:01:00:a2:28:57:19:5c:59:
8a:54:40:4e:36:b3:d3:ab:8a:f8:f1:9b:12:ff:c9:
75:53:e3:af:b4:54:a3:30:73:c0:28:f2:43:77:1f:
11:e3:c7:15:fc:1c:4e:3f:47:5d:89:09:a1:26:69:
04:e9:c0:46:08:46:b8:4f:46:33:a3:e5:28:e3:fc:
56:c5:93:d8:56:1f:57:54:39:3f:41:58:81:f6:31:
f0:ff:ba:22:58:c1:38:2b:02:69:ac:cc:07:e1:1c:
e7:19:1d:dc:3d:72:bf:20:83:8d:fc:aa:7e:e4:50:
98:f2:ee:7e:ef:e4:b7:d0:a7:32:23:30:50:c6:03:
d0:0a:1f:42:17:8e:69:b7:dd:94:8e:0e:0d:ef:8c:
d3:22:ef:b5:98:4c:78:61:fb:e2:84:26:ef:5b:d0:
03:9b:bf:87:6a:70:1a:37:96:4f:9c:8a:30:c0:e4:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:FD:19:BF:8B:00:A7:E7:32:6D:52:22:E2:3D:9C:22:96:BE:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7az9Gb-LAKfnMm1SIuI9nCKWvjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.90.0/24
31.56.115.0-31.56.116.255
31.56.127.0/24
31.57.192.0/23
31.57.195.0/24
31.57.232.0/22
31.58.145.0/24
31.58.148.0/23
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:8d:6e:b6:3a:96:f4:19:91:b9:0b:d9:6f:41:ff:1a:07:
da:7a:cb:d8:2d:9d:50:78:29:14:ab:0e:6a:56:bd:96:ec:98:
ff:65:4f:8b:48:34:87:95:e3:6c:f1:0a:b8:9d:9e:7f:42:6e:
55:0e:9d:7d:73:ab:b2:dc:6e:44:14:c3:d5:7a:79:43:b4:db:
0c:18:82:b8:9e:cf:e6:fb:0f:b5:5b:a5:10:dc:77:a9:24:33:
68:9b:b0:2f:5c:c0:6f:78:67:a1:b3:7d:ab:59:41:39:8e:3f:
a6:b7:cf:b2:61:59:81:09:c4:18:95:6f:50:3a:b5:5d:93:c0:
ab:0f:14:0e:2d:b3:f5:0e:e1:5a:f8:17:94:61:e4:75:04:b5:
8b:9f:12:e7:d7:d6:20:67:3c:c3:9f:85:83:2c:37:93:87:1f:
84:f5:87:96:fb:66:fd:4f:99:37:6d:ea:c8:6d:f1:de:9e:67:
e8:e9:ca:1c:07:b8:42:de:c7:2a:94:eb:af:2d:04:66:d3:05:
58:d3:9d:34:f0:b2:39:0a:f2:77:65:f9:44:66:cc:cf:58:d9:
df:2c:e0:60:de:fa:7d:d3:b5:c6:5d:79:92:62:3c:b3:40:fd:
f6:91:c1:3b:25:6e:41:59:1c:ef:77:bf:e1:ac:2f:9f:8f:de:
a8:cb:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:19:04 2025 by rpki-client