Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N8Bm9SpFhPRy6_Fj4SIk74y8lAM.roa
File: N8Bm9SpFhPRy6_Fj4SIk74y8lAM.roa (raw, json)
Hash identifier: b/4ejqtUe2JiUC9eQXBkpEve/uYiDCk9NQ5uVuU6F9Q=
Subject key identifier: 37:C0:66:F5:2A:45:84:F4:72:EB:F1:63:E1:22:24:EF:8C:BC:94:03
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019668F074C54C5FF8A3971EF26AE3A0C9FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N8Bm9SpFhPRy6_Fj4SIk74y8lAM.roa
Signing time: Thu 24 Apr 2025 17:55:11 +0000
ROA not before: Thu 24 Apr 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 31.56.125.0/24 maxlen: 24
31.57.44.0/23 maxlen: 23
31.57.148.0/23 maxlen: 23
31.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:f0:74:c5:4c:5f:f8:a3:97:1e:f2:6a:e3:a0:c9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 24 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c066f52a4584f472ebf163e12224ef8cbc9403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:98:f1:11:ff:ed:4a:cb:13:15:3e:3c:8b:
2a:b5:a8:b9:99:83:5f:d8:23:91:d0:5d:60:75:ae:
04:7a:d2:0e:eb:fc:c9:33:f3:99:77:e4:10:ee:b0:
6b:e0:56:b6:35:7b:d0:5f:e6:70:98:58:e4:1b:77:
3a:49:7d:3d:fc:ec:68:1f:8c:3f:70:33:d7:29:77:
59:85:c1:87:e5:39:c6:0b:ff:88:15:52:aa:17:49:
34:52:56:07:ac:59:54:09:8d:1b:a3:62:42:4d:92:
b7:55:bb:09:b9:1a:6d:ca:58:8e:8e:88:7a:25:35:
64:ba:4c:dc:c2:c5:56:1b:5d:3e:09:cd:03:7e:71:
bf:98:a9:d8:de:16:a7:a5:c2:f9:6e:69:75:58:1b:
a3:ab:92:89:5a:b4:c6:04:b0:05:ec:c3:76:c4:e9:
a0:ff:94:ee:ef:e3:c9:6f:f5:f9:5a:25:03:bd:f1:
4d:f5:9e:86:eb:f6:1e:50:01:8e:c6:a7:8f:aa:5d:
a8:d2:25:55:3d:fe:f7:00:e0:88:64:6f:2c:31:af:
d3:21:5f:3c:57:89:a6:e7:b5:85:5e:e7:38:4d:a9:
f6:62:77:a8:ea:0b:65:57:3a:a2:4f:3d:b1:c3:2e:
62:98:67:fc:90:ce:f0:f3:1a:2a:5b:61:52:95:f9:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:66:F5:2A:45:84:F4:72:EB:F1:63:E1:22:24:EF:8C:BC:94:03
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N8Bm9SpFhPRy6_Fj4SIk74y8lAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
31.57.44.0/23
31.57.148.0/23
31.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
21:54:05:75:af:bb:85:a0:3e:de:bb:5f:6f:32:df:db:c3:73:
2c:0d:20:7a:5f:ca:03:4a:6f:af:60:a3:77:f7:3f:49:99:8b:
e6:97:f2:b5:26:2e:c1:60:02:e1:20:66:86:e1:1f:36:1a:14:
7a:11:fe:33:a0:f5:32:8d:dd:10:33:9f:8e:57:7f:f8:54:25:
5f:46:28:59:70:2b:5b:40:a3:03:72:4a:bd:4c:99:6d:40:ba:
0b:f3:9b:86:ee:e6:16:7c:dc:80:2e:50:dc:77:09:43:60:93:
d9:a6:64:80:f9:8e:ae:fd:f7:7d:a5:6c:96:9b:5c:6d:7e:03:
48:20:73:04:26:8e:8a:59:83:83:da:1b:61:c6:4f:70:fc:ab:
0e:f8:30:83:91:01:71:2b:16:8b:a1:be:81:97:c0:d5:84:d3:
6b:5b:50:12:2d:6d:73:52:07:fb:55:2a:91:f6:7f:e4:c3:d4:
07:e7:ab:af:75:6c:63:40:97:e4:23:5a:99:6f:7b:79:45:74:
a5:76:17:7a:4b:77:86:98:95:bf:af:c9:97:5b:e3:c0:3a:17:
7f:84:66:4f:9b:f8:9f:78:34:fe:18:25:6d:73:4c:63:35:ee:
7a:31:8c:1e:77:04:98:a3:67:cf:ef:97:8e:4b:01:c4:fb:6e:
7f:1d:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:42 2025 by rpki-client