Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WzANLbk1La2Q8KNJ6GGfDHLJ_-I.roa
File: WzANLbk1La2Q8KNJ6GGfDHLJ_-I.roa (raw, json)
Hash identifier: ICrFh7akretrqzb2tcCNbAe+CHNxskbWVtEWetF+Y2E=
Subject key identifier: 5B:30:0D:2D:B9:35:2D:AD:90:F0:A3:49:E8:61:9F:0C:72:C9:FF:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195ED28D0E08B5ED782EF5C1291A2B82BB7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WzANLbk1La2Q8KNJ6GGfDHLJ_-I.roa
Signing time: Mon 31 Mar 2025 17:03:49 +0000
ROA not before: Mon 31 Mar 2025 17:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 31.58.211.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:28:d0:e0:8b:5e:d7:82:ef:5c:12:91:a2:b8:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 17:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b300d2db9352dad90f0a349e8619f0c72c9ffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:18:31:64:da:4c:ca:76:31:45:54:25:fb:
1d:e9:24:72:b5:09:6c:07:87:e8:26:5a:49:cf:50:
19:a1:47:e1:70:07:76:90:ab:b6:fd:50:cd:ad:46:
e3:e3:46:20:3c:43:e1:fb:65:af:65:9c:7b:b5:c9:
c9:b7:f2:63:a6:6b:6b:58:da:c7:58:5b:82:98:85:
7f:40:b3:7e:a0:c6:b2:34:e4:cd:eb:d0:44:96:05:
03:3e:25:8e:49:a1:05:00:57:b7:f3:80:4f:90:cb:
03:9b:e2:0f:02:46:84:32:64:d9:bd:99:26:41:51:
43:f2:2c:7a:2a:e1:12:3b:4b:b9:c6:df:8c:d0:ba:
18:20:0c:86:a0:81:37:19:70:5f:3b:00:27:d9:59:
0f:dc:ec:2a:82:2d:de:65:4d:5e:a6:59:32:5b:cb:
66:67:44:19:95:b9:ae:d7:c8:de:80:9e:aa:15:cb:
c6:7b:0a:f9:7a:db:ea:ea:df:17:7f:3b:b1:6c:64:
fd:02:6f:61:22:98:46:d2:1f:46:29:17:f6:7b:07:
d1:c2:ba:d9:4f:6c:2f:14:96:42:b6:1c:59:d4:3d:
ce:a0:e4:05:bb:2d:84:ff:12:b7:13:72:83:30:55:
89:56:73:c9:9d:c3:47:cb:04:e5:dc:2a:3c:ca:c1:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:0D:2D:B9:35:2D:AD:90:F0:A3:49:E8:61:9F:0C:72:C9:FF:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WzANLbk1La2Q8KNJ6GGfDHLJ_-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.211.0/24
31.58.244.0-31.58.246.255
31.58.249.0-31.58.251.255
Signature Algorithm: sha256WithRSAEncryption
80:40:6f:3e:f4:0b:40:8c:a0:2e:b0:7d:6c:c9:0b:99:28:8d:
fa:09:fa:a5:ce:b3:c0:ae:de:71:4a:2a:46:d1:5c:61:53:04:
ac:fa:a7:73:4a:db:0d:34:02:88:05:11:59:31:e7:56:40:b7:
97:73:55:42:bf:56:18:03:fc:d1:57:9c:70:23:4f:f5:c7:9d:
47:f5:09:14:3e:cc:1b:1e:a9:e4:dd:e2:f1:eb:89:04:53:e5:
1a:67:59:a6:51:8c:72:63:6b:2e:fd:ea:1f:ec:29:f9:7e:9b:
b3:48:71:63:3b:8d:7b:33:86:92:9f:c6:83:05:81:3b:eb:c1:
94:bd:a6:22:8a:7e:1d:3e:c5:eb:cf:25:df:f4:e4:72:df:d7:
6c:38:44:16:73:2c:03:1f:e9:64:c0:03:13:5a:6c:47:cc:b5:
15:05:ff:59:05:7d:f1:53:6c:a5:4d:c8:84:d9:e5:2e:58:0b:
12:cf:ec:e1:0f:95:18:6f:62:bf:9b:1e:ff:d0:24:1b:a6:03:
9b:72:02:4e:87:90:36:5e:f7:ac:d5:0f:ed:23:29:d0:f7:aa:
bd:72:2d:e1:43:18:f1:75:3d:3b:e8:68:b7:01:a0:b0:e3:ba:
fb:d1:ee:8d:b8:89:a1:6c:e7:57:89:46:13:83:68:3b:d2:04:
de:d2:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:43 2025 by rpki-client