Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKL_xU_LvRzTfHT0gWLK5-VKcDA.roa
File: SKL_xU_LvRzTfHT0gWLK5-VKcDA.roa (raw, json)
Hash identifier: GcDIyc/IWrLfaP3tGQeKHLZw0DpHvT4d5YEgT6/M8Kc=
Subject key identifier: 48:A2:FF:C5:4F:CB:BD:1C:D3:7C:74:F4:81:62:CA:E7:E5:4A:70:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019632B7FBF04D2D0C1320CC14D3B33D2EBE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKL_xU_LvRzTfHT0gWLK5-VKcDA.roa
Signing time: Mon 14 Apr 2025 05:14:00 +0000
ROA not before: Mon 14 Apr 2025 05:14:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:b7:fb:f0:4d:2d:0c:13:20:cc:14:d3:b3:3d:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 14 05:14:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a2ffc54fcbbd1cd37c74f48162cae7e54a7030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:ae:1d:6d:72:1c:cf:32:ba:eb:57:f0:9b:
bb:21:9c:c7:ac:6c:39:01:07:08:d0:38:96:85:61:
99:0f:2b:dc:3c:c0:2d:9f:ef:cf:f5:2b:90:91:a8:
bc:35:aa:66:03:fc:e2:9d:8b:d4:81:5e:36:c3:07:
36:ec:8b:1c:89:b2:f1:a2:97:de:2c:19:d0:e5:a9:
8e:64:c6:52:f7:7d:92:28:cf:52:37:90:e6:88:11:
45:df:23:19:b3:01:b5:12:f1:a6:a0:3a:21:72:f2:
f8:01:aa:ad:a1:27:7d:0a:85:5a:db:0a:15:dc:e4:
68:57:19:37:ca:47:03:57:aa:b9:41:11:8b:44:18:
73:3e:61:0c:3c:c5:dc:5a:b7:e9:ed:52:7b:8d:71:
30:2d:19:8c:98:4e:92:d2:7a:c7:3c:fb:ac:91:04:
4a:f2:99:9f:ff:a3:fe:5b:f8:d5:b2:9b:35:05:81:
17:c8:37:86:5d:95:0e:82:0c:5f:1a:f1:f5:5f:c7:
33:d1:8e:14:8f:62:b5:d0:37:2f:d6:36:c0:30:a5:
26:a6:ee:b8:a1:73:06:43:65:68:bc:ae:7a:8d:8e:
e7:1a:b6:df:71:3c:39:05:09:1d:ec:c5:b5:91:7b:
ca:77:ea:41:b6:bb:48:2a:c0:d9:01:da:f9:2d:72:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:FF:C5:4F:CB:BD:1C:D3:7C:74:F4:81:62:CA:E7:E5:4A:70:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKL_xU_LvRzTfHT0gWLK5-VKcDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.84.0/24
31.57.104.0/24
31.58.56.0/23
31.58.64.0/23
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b6:ef:e3:a5:8d:90:c0:bf:71:7c:50:8e:08:69:80:3d:e9:
1b:60:c6:92:72:10:46:86:64:1b:8e:ac:d6:9d:d9:8c:fd:2a:
c4:10:21:28:cc:22:14:01:52:d9:de:b8:e7:a4:af:e1:47:05:
3a:e3:97:56:fd:d7:58:6e:05:1c:c7:68:d5:63:89:84:90:0c:
eb:3b:69:0c:f8:53:e3:e4:df:62:b4:f6:3c:e8:19:6f:10:eb:
a8:7a:0c:de:6b:37:0e:ea:5c:3f:d0:e5:65:66:3a:f3:8d:a2:
02:83:c1:fb:d3:f1:34:d4:2d:3f:97:e8:6c:21:1d:69:91:d9:
9b:63:ef:aa:7f:45:93:49:e6:be:8d:2f:3a:dd:24:04:de:26:
46:0c:d4:06:e2:68:03:15:27:4e:1b:a2:98:39:a3:34:5c:ea:
0e:7a:45:78:25:93:ad:c6:af:a6:5d:d4:8a:13:75:ab:58:84:
34:93:8f:fa:5c:0e:95:91:4a:e3:30:42:67:29:7d:39:46:08:
b6:c3:23:04:9f:a3:7f:a0:3f:d9:3f:ce:4f:90:ac:fc:40:51:
e8:ed:b5:67:74:f7:fc:73:58:ac:db:c2:27:1b:c2:67:b7:07:
7e:eb:5a:42:57:75:90:f3:e7:db:8d:3b:3d:55:37:35:61:6a:
f9:bc:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:53:13 2025 by rpki-client