Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCbTRhDY56fSDJT7gn65hQS6D6A.roa
File: mCbTRhDY56fSDJT7gn65hQS6D6A.roa (raw, json)
Hash identifier: Eo5S2oUwJ6TI/yGHGJiH8ZEH4gUbUM0vwhnGT6F0Y/8=
Subject key identifier: 98:26:D3:46:10:D8:E7:A7:D2:0C:94:FB:82:7E:B9:85:04:BA:0F:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01963937E168A4EE47014DA37F6B1C3A2B0D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCbTRhDY56fSDJT7gn65hQS6D6A.roa
Signing time: Tue 15 Apr 2025 11:31:25 +0000
ROA not before: Tue 15 Apr 2025 11:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:37:e1:68:a4:ee:47:01:4d:a3:7f:6b:1c:3a:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 15 11:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9826d34610d8e7a7d20c94fb827eb98504ba0fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:3c:35:b3:92:34:f8:81:e8:33:e8:57:82:
ff:40:62:a6:cb:4d:40:0c:69:10:ba:36:8f:49:c5:
9a:b9:bc:2e:f0:04:a3:a3:22:8a:b2:21:c9:a6:49:
f9:62:d9:93:1d:2f:f6:26:77:fe:90:83:a9:5d:e0:
23:b6:8a:e4:69:41:1e:2f:d4:bc:65:f5:e2:af:86:
26:0e:a6:15:ae:02:28:a3:15:90:8a:8a:c7:d4:c7:
b0:d7:3d:a6:c9:26:4a:00:ef:15:aa:88:45:63:06:
54:a4:01:33:00:62:81:a8:22:ca:4b:f3:bb:c5:c3:
6d:a7:a0:31:58:58:75:de:b8:01:e2:1a:a7:c4:65:
31:2b:51:d1:00:ee:c7:42:5c:32:7e:f5:ff:8c:17:
d5:09:4b:22:09:27:de:26:fd:7f:db:0e:30:39:69:
b8:14:c8:d0:9f:a5:38:53:e3:30:6d:d1:b0:e1:ae:
cf:71:a5:d1:9c:f1:2c:5c:87:4c:f7:af:b5:1a:64:
80:7e:ef:1a:82:14:f5:75:20:b0:5a:e7:62:06:31:
24:88:37:cb:64:71:e2:30:3a:42:33:57:ff:7b:3a:
c9:82:7d:b1:3a:51:0b:e2:6f:14:ed:65:ca:5f:41:
56:41:4f:ef:e3:74:41:b5:a9:45:aa:85:78:04:cb:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:D3:46:10:D8:E7:A7:D2:0C:94:FB:82:7E:B9:85:04:BA:0F:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCbTRhDY56fSDJT7gn65hQS6D6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2a:50:54:b1:5e:99:63:77:27:35:0d:57:f1:fa:a6:03:d4:
93:fb:3a:a0:d4:31:d1:09:51:23:48:62:86:e0:e9:46:e8:37:
a6:2a:fc:da:d2:36:9b:90:8d:a0:81:88:f7:51:55:e9:54:14:
f8:e9:f6:2d:46:16:48:e1:59:4a:09:cd:b4:4c:93:61:f0:84:
a7:6d:a9:d8:c9:61:7f:b2:3e:9a:67:a0:38:fc:0d:ea:79:71:
7f:b8:8c:f3:93:3a:7d:55:6f:71:d5:d0:6f:ab:6c:e0:1e:d1:
5f:08:68:08:43:24:52:58:80:89:92:16:44:c7:4d:73:5d:fa:
ac:56:bc:da:51:56:5a:cf:f7:9e:ee:a1:ee:4a:d5:0f:3e:d8:
f7:cb:d8:ef:de:de:87:c7:a8:db:e9:4e:1c:9e:3c:e9:5d:28:
97:61:76:e7:87:a1:3a:9c:e0:57:a3:14:e1:f6:a5:d3:e0:b8:
38:77:59:4f:2d:f2:d7:11:f8:08:19:6d:6d:c9:46:b3:2e:87:
85:db:1f:cc:31:21:8d:b7:23:16:ae:e5:f4:71:d1:de:4f:ca:
17:d5:d8:af:e9:fa:3a:7c:95:80:59:1b:80:cb:ea:51:6c:f2:
86:29:97:36:5e:24:17:cd:78:f6:ec:2a:c7:e7:b0:63:2a:8c:
76:37:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:02:46 2025 by rpki-client