Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vAiO-ZMdr8inDR34uQZonZkOCOw.roa
File: vAiO-ZMdr8inDR34uQZonZkOCOw.roa (raw, json)
Hash identifier: fpo0LP1lD+u6pVeYJvPrv3Zma2xetsmA2MTJE4hFFgo=
Subject key identifier: BC:08:8E:F9:93:1D:AF:C8:A7:0D:1D:F8:B9:06:68:9D:99:0E:08:EC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019677FDE7C0CC215F2676B81FE594DCC883
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vAiO-ZMdr8inDR34uQZonZkOCOw.roa
Signing time: Sun 27 Apr 2025 16:04:10 +0000
ROA not before: Sun 27 Apr 2025 16:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fd:e7:c0:cc:21:5f:26:76:b8:1f:e5:94:dc:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 27 16:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc088ef9931dafc8a70d1df8b906689d990e08ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:82:c4:c1:bb:1b:11:66:d5:d1:ba:32:77:
5a:08:3d:48:e4:7b:b8:75:7e:57:b2:b4:b2:6c:77:
52:99:4b:a4:37:66:92:f1:a0:e5:0a:35:87:98:60:
cd:ea:49:b0:84:13:cc:2d:7c:8c:bf:83:2a:1b:b7:
7d:43:cc:78:f7:fd:c6:39:30:35:fe:24:99:2e:1c:
fe:07:fd:51:1e:94:27:47:2c:5a:9f:3e:7a:a4:ef:
5c:2f:cd:b5:9b:0c:9b:59:02:47:a3:28:d6:8f:25:
80:6c:68:5c:65:d6:12:16:9a:63:a2:ba:7f:e6:70:
ad:57:56:cb:0e:fa:d7:83:b8:a5:86:a4:24:5e:aa:
bb:68:15:c0:34:20:b2:c4:7d:f2:51:c1:db:01:05:
0a:5c:82:73:0f:1d:aa:f2:a4:1f:dd:83:60:ef:eb:
bd:1c:6f:04:84:eb:7d:e2:8c:71:21:12:c0:48:28:
cd:b7:8c:5d:bf:87:0a:d1:3c:53:26:d9:d9:6c:63:
5a:c7:b0:dc:30:11:67:e9:b8:6d:2a:37:40:b1:65:
bb:89:8e:ef:d0:71:a7:95:90:d2:08:57:7b:cf:40:
2f:cc:e5:5d:8c:eb:40:6f:bc:c6:e7:4a:47:df:71:
05:d5:01:1c:03:53:2b:1a:ca:36:e8:58:21:b3:9c:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:8E:F9:93:1D:AF:C8:A7:0D:1D:F8:B9:06:68:9D:99:0E:08:EC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vAiO-ZMdr8inDR34uQZonZkOCOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.244.0-31.58.246.255
31.58.249.0-31.58.251.255
Signature Algorithm: sha256WithRSAEncryption
97:54:af:5a:da:fd:cb:73:74:b5:bf:5d:f0:38:f2:68:b6:d9:
19:a5:73:18:49:e4:59:e3:b2:e2:22:ce:8b:c1:3a:68:88:f6:
8e:17:75:3d:66:b0:c0:cf:0e:68:15:fd:d6:9e:b5:f9:b2:3a:
8b:fe:a3:41:99:5a:3e:80:71:93:7b:03:80:da:c7:6a:54:c7:
9f:e0:92:19:33:8c:16:ad:fa:ae:0e:9f:e9:09:e6:06:cd:69:
0b:bc:f9:d7:34:4f:89:86:80:be:b2:07:05:f1:32:45:e3:1b:
f4:97:fa:c9:d4:0d:8a:9c:3c:e6:33:75:74:a1:64:92:68:57:
a8:8b:bf:5c:7b:53:29:2e:08:8f:7e:22:7e:fa:1d:b1:40:48:
af:35:9e:17:b4:d0:87:01:9f:14:65:41:1d:5a:ad:36:cb:fc:
f8:4b:f4:03:03:45:b0:c5:55:07:a4:24:48:92:d9:36:f5:95:
ca:27:4f:ea:b1:fd:7b:a8:df:cb:46:46:11:e0:1b:b3:0b:0b:
0e:f4:e8:ca:88:10:d2:0c:c5:3e:e9:ac:3c:38:b2:24:71:2e:
b9:c7:fb:fd:98:e1:3f:04:94:e4:3f:02:bd:54:01:e3:e8:a8:
9f:fc:bb:46:f1:6b:b1:0e:0a:84:e2:72:29:a3:19:11:4e:48:
83:23:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:19 2025 by rpki-client