Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/webZ79ISa8flKkATqG5q2W1pItI.roa
File: webZ79ISa8flKkATqG5q2W1pItI.roa (raw, json)
Hash identifier: XPqsBotlt2+IKNUY5ZirPCk/+wOttfh6Ih+r2U5cuNQ=
Subject key identifier: C1:E6:D9:EF:D2:12:6B:C7:E5:2A:40:13:A8:6E:6A:D9:6D:69:22:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019611564B3C4498FFA413A8C98DE5B774C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/webZ79ISa8flKkATqG5q2W1pItI.roa
Signing time: Mon 07 Apr 2025 17:39:50 +0000
ROA not before: Mon 07 Apr 2025 17:39:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59210
IP address blocks: 31.56.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:56:4b:3c:44:98:ff:a4:13:a8:c9:8d:e5:b7:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 7 17:39:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e6d9efd2126bc7e52a4013a86e6ad96d6922d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:05:9c:e5:ee:4d:ef:cf:9d:21:68:50:86:
e9:57:7a:90:bf:2a:ba:33:6e:2f:9d:a7:bc:20:dc:
03:f0:b3:34:7f:24:63:3a:2c:bd:d7:79:65:2b:a2:
0a:62:81:61:b9:b3:d2:08:12:9d:ae:61:1b:e7:1a:
f2:df:5c:d4:a4:b5:d4:1d:a3:05:db:13:8e:be:8d:
78:3b:9f:ac:ae:ed:65:d7:55:93:8d:e8:c5:ee:2c:
be:6c:50:d8:cc:b1:c8:f0:14:21:61:82:4a:e2:1b:
55:0a:8d:c8:f9:94:8c:25:84:cb:c0:09:4a:a5:6a:
9e:5f:8e:35:9d:87:48:7b:07:b4:9a:67:68:5f:77:
2d:26:f1:ba:ba:04:b7:0b:06:9d:49:55:80:fb:a5:
70:a4:03:23:4f:f4:20:9b:4d:b3:82:10:18:a6:dd:
90:a5:2f:16:26:d1:f7:e6:d1:04:71:16:78:b3:91:
3e:7d:bd:77:8b:88:ec:fb:ce:77:08:9c:56:ae:df:
c9:b8:86:88:3b:ad:54:7b:6c:8b:37:63:71:fa:26:
7e:d4:9c:f0:ed:6f:31:ce:14:88:b1:20:f9:be:9b:
2e:8e:4e:62:2e:db:6a:90:0d:29:e6:a5:34:61:4c:
29:81:b6:2a:1a:35:70:db:1d:7e:d9:82:8a:10:a8:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:D9:EF:D2:12:6B:C7:E5:2A:40:13:A8:6E:6A:D9:6D:69:22:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/webZ79ISa8flKkATqG5q2W1pItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:65:54:28:12:fc:67:25:25:9e:d1:f4:68:07:59:2d:30:44:
24:9a:7e:55:71:14:b3:3d:80:87:0a:06:de:eb:85:e8:45:ee:
fb:e9:ce:70:c6:77:20:17:93:6d:98:60:ce:98:72:c9:72:50:
dc:e8:28:83:51:f5:a7:cb:2a:61:a9:d2:61:1b:d2:93:90:31:
76:bc:37:1a:bc:e1:ec:e5:7f:69:89:c7:5d:b5:a0:04:d3:d8:
51:1c:13:40:d1:e4:9a:ea:65:f1:51:c3:fe:79:36:b2:80:84:
29:8c:e3:dd:8b:1a:f9:c9:f8:d2:12:c1:0f:57:31:de:1d:11:
64:f4:d4:cf:68:6e:7e:d7:00:24:76:e5:1a:cf:b2:a0:5c:da:
5d:cb:bc:7e:fa:fc:b2:e7:28:73:88:97:91:e0:37:e2:03:2e:
7a:d8:cf:cf:85:f8:e9:1d:bf:de:50:9c:da:bb:6b:65:ca:13:
93:2d:99:55:f1:53:dd:39:0f:57:7e:07:18:17:2f:4d:4a:04:
4f:ee:dc:91:57:98:56:4a:0a:38:bf:ec:b0:75:66:59:ac:a4:
8d:67:6f:6a:06:db:8c:2b:c5:7a:71:66:c7:a5:c7:a1:58:44:
0e:75:ba:d0:f8:3d:aa:ec:09:3f:a2:2d:a9:1e:3c:02:c3:d8:
ee:9a:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:21 2025 by rpki-client