Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7fAUVMhN6GqaokpmN2Jz_uWKEyg.roa
File: 7fAUVMhN6GqaokpmN2Jz_uWKEyg.roa (raw, json)
Hash identifier: ImDNaeRypKjF0ksJ3bbMzHmSvl0BE1HrCjVuh+/1VBo=
Subject key identifier: ED:F0:14:54:C8:4D:E8:6A:9A:A2:4A:66:37:62:73:FE:E5:8A:13:28
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01968788C8F6EE982E071B1D2C49F6D3E33B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7fAUVMhN6GqaokpmN2Jz_uWKEyg.roa
Signing time: Wed 30 Apr 2025 16:30:10 +0000
ROA not before: Wed 30 Apr 2025 16:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207326
IP address blocks: 31.210.42.0/24 maxlen: 24
31.210.55.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:88:c8:f6:ee:98:2e:07:1b:1d:2c:49:f6:d3:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 30 16:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf01454c84de86a9aa24a66376273fee58a1328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:39:f3:4a:9e:18:00:a7:d5:77:fb:5d:b3:
1f:cc:f0:5d:2a:9a:c4:ee:88:fa:fb:90:ba:95:2a:
76:5d:2a:81:cc:6d:ae:2e:84:31:c0:1c:6b:82:ae:
09:ce:e3:b1:d4:6b:83:46:13:af:8b:38:bb:eb:b8:
ff:38:7e:92:2f:00:da:d5:d6:65:6b:a5:91:68:1e:
09:1a:c4:1a:e3:9a:10:d3:af:ea:3c:b4:f3:38:2c:
e7:19:b0:a8:bd:6b:5f:96:2e:6d:8d:4d:37:38:23:
e4:5d:dc:21:82:69:a8:50:ab:d6:99:c4:35:76:a5:
e3:b3:d8:f7:fc:f9:28:2f:aa:44:2e:0a:29:42:ff:
ac:98:68:ba:8e:db:99:99:f6:62:5e:e9:37:67:7e:
80:ee:49:07:62:6c:a3:0c:2f:81:9e:25:25:f6:31:
52:d1:0f:79:6c:8f:8d:27:95:65:36:fc:95:bc:1b:
67:72:b7:7d:84:3c:f7:07:8f:65:d0:06:fe:6b:eb:
08:b5:59:36:0b:3e:c6:df:0b:b6:22:03:00:9d:db:
cf:e3:66:0e:69:14:a9:6a:89:c9:2b:b7:10:c7:b7:
02:a3:d8:6e:62:44:88:67:5b:d2:98:fc:a8:8d:e4:
63:0d:d3:e2:80:a6:85:69:e7:bf:3c:53:45:c1:56:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:14:54:C8:4D:E8:6A:9A:A2:4A:66:37:62:73:FE:E5:8A:13:28
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7fAUVMhN6GqaokpmN2Jz_uWKEyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.42.0/24
31.210.55.0/24
78.135.67.0/24
78.135.82.0/23
Signature Algorithm: sha256WithRSAEncryption
51:74:1a:5d:db:b2:60:7a:37:f3:7f:9a:28:d9:05:84:25:e7:
09:ab:32:17:31:47:fb:2f:ab:9a:af:5a:05:56:20:5e:7e:fd:
65:d3:e7:db:47:ec:b0:c1:cb:76:f9:7a:7b:3a:43:25:39:9f:
96:0c:ce:ff:34:7b:1a:0c:9d:36:28:00:54:cb:e2:ee:a1:6b:
af:ae:05:dc:12:af:d7:9e:21:22:ba:d0:1f:c9:e6:35:c6:36:
66:03:40:99:0c:0a:9b:df:6f:c8:fc:09:bf:f6:1b:49:bf:62:
10:96:f0:a2:a3:d2:47:59:51:38:63:a0:bf:fd:24:03:b5:07:
e5:07:e0:a3:84:d3:1f:9d:9b:4d:dd:c5:7d:08:e3:82:59:1e:
25:c8:b3:f3:ae:b8:a8:bf:74:5c:9f:ff:fa:66:7b:23:d6:c1:
4a:5e:7a:d1:57:e5:87:0c:1b:98:8c:13:c3:f3:17:3d:86:32:
35:de:81:71:72:77:10:38:71:ca:50:c3:8b:a9:f6:12:9e:5f:
f1:c0:7e:08:26:a3:1d:7d:b9:fd:b9:75:90:3e:f1:64:af:92:
c0:7e:f4:d2:77:f2:5e:b3:1a:dd:80:bf:64:54:c7:56:a5:50:
9b:60:bd:1a:9a:15:ea:72:ec:f0:f1:82:b8:6c:67:81:53:7e:
67:70:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:52:05 2025 by rpki-client