Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/70Q5-naTpjmzxvYviKKMimboRks.roa
File: 70Q5-naTpjmzxvYviKKMimboRks.roa (raw, json)
Hash identifier: v6FeYtdBM3HJvawbu6Sp6X6blo5cs+MzuSCl7cgkmbA=
Subject key identifier: EF:44:39:FA:76:93:A6:39:B3:C6:F6:2F:88:A2:8C:8A:66:E8:46:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01967D06F7D7713D92D2E6A41A5B58E331A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/70Q5-naTpjmzxvYviKKMimboRks.roa
Signing time: Mon 28 Apr 2025 15:32:10 +0000
ROA not before: Mon 28 Apr 2025 15:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:06:f7:d7:71:3d:92:d2:e6:a4:1a:5b:58:e3:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 28 15:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef4439fa7693a639b3c6f62f88a28c8a66e8464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:8d:eb:9d:8a:71:f6:9a:a3:c9:68:86:01:
94:bd:90:ee:9d:5e:7c:93:18:ad:bb:f9:f8:9d:c3:
47:b1:42:b1:cb:4b:f1:e7:21:65:ec:77:ff:85:a9:
48:66:dd:cf:70:c5:fc:fe:9f:25:18:48:d8:77:4e:
5f:97:0a:c8:c2:bb:05:83:fa:b7:79:24:f5:7c:19:
99:91:9e:f5:f8:47:86:99:58:b9:9e:38:7e:6e:f4:
39:10:1b:d9:79:3d:f4:b8:da:1c:2d:04:8d:2e:f0:
4e:88:45:e8:f8:47:27:b7:c0:b5:b8:58:9d:c0:f6:
10:24:3f:8a:24:0d:27:2d:02:6a:d2:0a:d8:bb:18:
f9:98:13:f1:a8:4b:67:72:69:3f:04:9e:f5:f6:38:
5c:03:76:15:81:40:01:ca:47:8d:fe:6b:9a:b3:e1:
86:23:47:0d:a7:e5:92:8d:65:a2:1f:3a:0f:76:49:
cc:f2:23:d9:45:cd:b9:89:9c:c1:ac:e7:05:84:3a:
7b:cf:db:33:e0:81:37:53:0d:e3:14:93:89:d9:c6:
d0:57:61:8c:ca:0d:1b:46:d6:39:fa:3b:95:56:53:
61:23:a9:aa:35:c0:dc:c8:d5:ee:6e:16:ff:e4:e2:
ef:71:ea:36:4b:3d:6b:03:47:02:f0:dc:ba:e1:b3:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:39:FA:76:93:A6:39:B3:C6:F6:2F:88:A2:8C:8A:66:E8:46:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/70Q5-naTpjmzxvYviKKMimboRks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.25.0/24
31.56.27.0-31.56.31.255
31.56.44.0/24
31.56.61.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.56.112.0/24
31.57.119.0/24
31.57.226.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c2:33:66:11:49:35:7b:e6:41:5b:5b:d9:30:f7:22:25:f2:
96:58:4b:b2:c4:d7:ab:95:24:e4:f2:aa:a4:3e:7a:28:18:5a:
f8:d0:18:6f:41:f7:b5:86:63:42:49:62:55:f4:70:50:de:43:
c1:93:1a:10:c0:2c:dd:ac:83:ce:eb:e4:ee:22:0a:73:02:b0:
60:08:f9:ae:0f:8b:ff:75:b6:20:77:c0:a8:3a:11:f4:a1:ba:
a6:f9:af:c6:5b:43:a2:ff:a3:e4:af:a3:fb:f8:fe:78:83:e3:
df:44:64:23:cd:f6:98:03:a7:27:0f:48:94:67:e1:aa:69:cc:
8c:6d:5f:9b:c7:57:f3:d3:65:76:97:cf:1a:15:8d:5c:84:14:
3a:79:80:3e:46:e3:92:e4:80:8f:6a:6e:ce:63:e0:33:bd:29:
7c:08:c6:e0:5b:36:65:57:2b:d6:e6:1b:27:0c:c9:b9:75:ca:
c5:85:69:c5:f1:fc:06:bc:89:78:29:c8:26:96:68:39:5c:66:
1b:60:da:81:6e:a9:27:16:41:85:53:84:ae:24:cd:ba:b5:87:
3c:a7:cd:a1:41:5a:fe:d5:d0:ac:1c:dd:a0:aa:63:6a:ef:c8:
1a:43:e5:f1:df:4d:29:6f:a6:59:87:70:be:64:ed:12:f8:cd:
40:1b:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:21:32 2025 by rpki-client