Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CEtLAYYjKxBUn3jfnhJlkA7Z-yQ.roa
File: CEtLAYYjKxBUn3jfnhJlkA7Z-yQ.roa (raw, json)
Hash identifier: TZO6cTTNSuJ3qU125993si325Ubj2w5vxxoNd5qQZHA=
Subject key identifier: 08:4B:4B:01:86:23:2B:10:54:9F:78:DF:9E:12:65:90:0E:D9:FB:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01966BC4A3503B274B934B6753B3171830DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CEtLAYYjKxBUn3jfnhJlkA7Z-yQ.roa
Signing time: Fri 25 Apr 2025 07:06:11 +0000
ROA not before: Fri 25 Apr 2025 07:06:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.32.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.40.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.86.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.153.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.120.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:c4:a3:50:3b:27:4b:93:4b:67:53:b3:17:18:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 25 07:06:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=084b4b0186232b10549f78df9e1265900ed9fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:68:44:f7:16:d2:5a:d9:4a:5b:93:04:07:
9a:18:fe:a9:f8:0f:1f:dd:40:a1:60:fa:00:1d:85:
19:0d:11:ea:21:e9:ba:91:81:02:40:48:8b:a8:d7:
57:52:1e:d3:e5:54:ab:9f:a3:e4:58:bf:a8:a0:45:
90:1b:7b:32:ed:75:1e:c2:a3:68:bf:a8:5d:49:27:
da:08:c5:98:91:2a:c2:68:66:ec:ac:80:dd:15:da:
69:4c:eb:bc:ba:04:6a:b5:a2:c4:ac:99:17:f9:4b:
99:05:97:61:92:03:94:ba:04:0b:60:4a:74:2e:d3:
3c:57:c1:dd:f7:28:63:51:e6:08:a6:08:8e:44:cf:
78:75:31:1e:12:10:ae:8a:a6:92:74:a3:f6:a2:56:
fe:bc:47:68:49:7e:47:f4:8d:6e:4d:a3:b9:f4:52:
09:02:36:27:87:66:76:98:24:5a:e0:16:6c:08:8e:
f7:de:fe:50:07:d0:69:c6:da:d4:2e:59:ef:04:45:
9f:5f:45:d8:84:09:87:0f:4f:cf:56:84:71:81:c3:
25:f2:bc:d9:db:3d:53:46:7d:90:ab:3e:f2:fb:48:
c6:56:2b:4f:1b:58:dc:fb:be:16:d7:b8:b9:8f:0c:
ac:90:17:39:cb:6e:6f:3d:09:45:51:d8:9f:d7:1b:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:4B:01:86:23:2B:10:54:9F:78:DF:9E:12:65:90:0E:D9:FB:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CEtLAYYjKxBUn3jfnhJlkA7Z-yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.57.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.200.0/22
31.57.32.0/24
31.57.36.0/23
31.57.103.0-31.57.111.255
31.57.113.0/24
31.57.118.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.188.255
31.57.192.0-31.57.196.255
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.230.0/24
31.57.232.0/22
31.57.238.0/24
31.57.249.0-31.57.255.255
31.58.34.0/23
31.58.40.0/24
31.58.50.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.120.0/22
31.59.136.0-31.59.151.255
31.59.160.0/20
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
87:1d:fd:ab:95:95:9b:6b:1c:1e:99:b1:74:97:a3:a0:f0:6e:
6d:79:c8:51:d2:15:e8:2d:a8:db:ce:89:65:34:4d:43:e6:f3:
ff:d9:45:da:ad:25:97:7b:c7:3d:20:95:b0:21:6e:90:cc:fd:
79:1f:e3:2a:39:84:73:54:8e:58:01:a5:1c:81:8c:87:26:ff:
f2:86:a1:02:ae:ac:b6:e3:ad:76:99:9e:96:db:6b:ca:b9:94:
31:df:e0:97:7d:95:cf:01:44:a5:ec:fe:be:03:5f:b1:65:12:
31:21:eb:32:47:f7:17:26:40:b3:1b:d6:74:f9:cf:f3:54:43:
bc:af:75:9a:7c:af:0c:28:e1:04:41:e7:5c:e7:4e:18:bf:e5:
34:3b:cf:e8:dd:a6:b7:a3:2c:d6:57:23:95:cf:2a:6c:68:af:
92:6e:31:5a:8d:52:fb:e4:7e:73:a3:e1:31:05:f1:bd:ff:01:
19:99:0c:96:66:18:d2:6e:8e:f4:7f:5e:df:0b:ce:07:30:2e:
e9:04:c6:46:98:00:63:31:48:9f:6c:99:5e:22:e7:22:b9:bf:
1e:bf:01:f1:a1:98:57:91:e7:69:ea:d8:d0:a6:a6:a3:22:73:
85:d6:c7:88:10:e9:e7:5d:4d:ec:42:4e:ef:7d:69:7f:c7:cb:
38:29:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:42 2025 by rpki-client