Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7J6dKW8WukYpUkhgL_LoZaiYSLQ.roa
File: 7J6dKW8WukYpUkhgL_LoZaiYSLQ.roa (raw, json)
Hash identifier: Pabx9Prv9Fjnkv0nzkobX5vvQmVD386IJHZTFQU7dtA=
Subject key identifier: EC:9E:9D:29:6F:16:BA:46:29:52:48:60:2F:F2:E8:65:A8:98:48:B4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F25CE90E3CFD2399ED874D2C5FE05784
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7J6dKW8WukYpUkhgL_LoZaiYSLQ.roa
Signing time: Tue 01 Apr 2025 17:18:50 +0000
ROA not before: Tue 01 Apr 2025 17:18:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 31.56.7.0/24 maxlen: 24
31.58.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:5c:e9:0e:3c:fd:23:99:ed:87:4d:2c:5f:e0:57:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 1 17:18:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9e9d296f16ba46295248602ff2e865a89848b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:1e:77:0d:74:36:93:f5:dc:d6:db:e7:b4:
0b:1a:81:62:69:a9:82:31:3d:6a:02:ca:4a:af:05:
eb:41:64:92:a9:df:d5:1d:1c:23:e7:df:12:fc:15:
e5:24:33:de:5b:30:62:1c:27:80:4f:c7:ef:2f:d8:
7c:00:1c:04:a8:19:46:11:ac:a6:0e:cf:09:10:14:
87:c9:60:25:08:f4:2c:02:91:12:fe:bb:66:38:9c:
56:10:b5:9c:9d:c5:db:9d:c6:55:69:81:2c:ab:e0:
1f:5e:5b:72:95:2e:da:ea:f2:a9:f7:79:0d:3e:4e:
32:27:af:04:71:92:b2:99:a6:2c:9b:20:7e:c0:3a:
1b:0c:1d:dd:24:c2:de:71:03:1d:55:5a:f9:e3:f2:
4d:18:b3:50:89:26:cb:78:d2:85:db:ca:4a:0d:1e:
22:d2:1e:23:ac:28:83:a9:29:65:27:1d:9b:ff:b1:
84:cb:cf:f2:17:e4:4f:63:97:6a:19:0e:8b:f4:42:
5c:a7:a8:59:82:47:8c:44:b1:9c:c0:c0:4f:94:53:
72:97:e8:0a:87:77:ba:e6:6a:d8:16:15:91:9b:43:
c4:44:13:7f:55:e7:3b:bd:f0:fe:cb:47:c4:3a:c3:
49:59:ec:34:db:b4:c5:28:91:db:45:1a:0d:7b:fc:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:9D:29:6F:16:BA:46:29:52:48:60:2F:F2:E8:65:A8:98:48:B4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7J6dKW8WukYpUkhgL_LoZaiYSLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.7.0/24
31.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:43:04:e1:ad:85:83:72:84:35:3f:4c:6e:fb:ac:36:4d:d4:
f5:12:38:c6:5a:c7:38:e3:6e:24:ed:c5:9e:b1:20:e3:97:1b:
68:24:e0:2f:9d:8f:ab:41:5f:e2:75:e1:d0:52:19:7a:88:bc:
29:3e:f7:bf:a1:14:7e:a0:5f:22:c4:e3:d9:9a:18:84:ab:dd:
d1:a8:d6:41:f2:8f:8f:04:87:a3:a2:a4:94:67:42:4f:3e:64:
c4:1f:6f:c5:62:46:09:23:d5:09:3a:ce:ff:5b:fe:1d:69:a8:
e6:8f:4b:d3:31:d8:c8:b4:f9:6d:bc:d8:9c:c6:32:14:2c:b1:
44:ed:8b:c8:ab:3e:5a:b7:de:c8:d0:d6:78:7d:d7:e1:c5:ff:
ed:61:d5:ba:d5:4f:13:a5:ec:16:5b:b1:74:b6:2a:12:1d:ea:
e6:0d:af:2d:c8:55:e5:9b:39:6c:a7:5f:92:2c:b9:b2:ea:20:
9c:e9:3b:e1:ec:a1:4c:13:de:4f:c9:43:73:d2:ab:e5:23:8e:
a6:57:66:3e:b1:1d:2f:43:6d:c1:0c:02:09:f8:de:72:84:fa:
06:af:5c:04:df:e0:7a:b2:9c:67:c9:0d:ae:ac:8b:f7:35:05:
df:67:d4:8d:78:9d:46:95:f8:0e:e2:73:f0:d5:c1:e0:3f:0c:
fa:35:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:32 2025 by rpki-client