Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZZJl2aGtPgzVMcSzeTW6bt5qZ24.roa
File: ZZJl2aGtPgzVMcSzeTW6bt5qZ24.roa (raw, json)
Hash identifier: q6QE7nQdr5ju2IPPhGzIecv8YWGGX83HUsRLlCoNmJA=
Subject key identifier: 65:92:65:D9:A1:AD:3E:0C:D5:31:C4:B3:79:35:BA:6E:DE:6A:67:6E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197EE0623EE1F70344F872C12EFDB7AFC9A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZZJl2aGtPgzVMcSzeTW6bt5qZ24.roa
Signing time: Wed 09 Jul 2025 07:11:09 +0000
ROA not before: Wed 09 Jul 2025 07:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213563
IP address blocks: 31.57.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:06:23:ee:1f:70:34:4f:87:2c:12:ef:db:7a:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 07:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659265d9a1ad3e0cd531c4b37935ba6ede6a676e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:78:ef:55:29:3e:3f:8e:1c:7b:fb:b0:20:
1a:25:aa:e4:75:bb:89:fe:b2:e9:75:66:74:2e:9e:
35:47:5e:b7:d1:f7:5b:cc:5b:0d:20:12:88:b8:02:
d8:7d:40:ff:d6:1c:29:ec:a4:5e:f4:b4:85:8d:ff:
fb:bc:e9:41:37:36:99:37:7e:03:d3:e7:66:4e:73:
b7:2d:30:a9:74:1a:77:79:23:c5:88:ff:2e:98:c6:
67:aa:d3:6d:80:86:29:4e:40:99:21:7d:a0:b5:84:
0d:84:5c:c6:7f:04:ee:e0:30:80:b8:26:b8:20:a2:
4c:76:5b:6c:b5:4b:98:04:11:97:0b:4c:4e:6d:99:
9d:0e:85:b6:35:f2:a3:b1:d5:c3:f2:47:0f:ef:f5:
84:3b:13:8d:ed:26:6a:5c:93:90:58:8c:e1:6e:83:
86:7c:09:0b:2d:b5:92:0a:ca:30:f9:95:68:78:f6:
b6:ab:de:a2:15:8a:a4:6a:bf:43:df:3d:96:26:39:
da:ce:91:4b:88:13:be:2d:35:89:92:4e:40:b8:45:
57:1f:d4:1a:db:98:d0:35:3f:88:52:b0:9f:6b:9f:
0b:78:d6:98:a5:b5:7b:32:60:56:13:f5:94:a9:ee:
02:21:b2:b5:8a:0d:ec:32:df:c1:ba:4c:1c:b3:71:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:65:D9:A1:AD:3E:0C:D5:31:C4:B3:79:35:BA:6E:DE:6A:67:6E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZZJl2aGtPgzVMcSzeTW6bt5qZ24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d0:6e:f2:be:b3:47:b0:e8:ef:d2:a3:af:cb:14:06:d3:78:
80:61:b1:42:90:a4:c1:7e:e0:3f:9e:f2:b1:4a:a9:3e:69:8c:
28:61:6c:e4:67:48:05:20:ab:fd:57:0a:bb:a0:af:e6:54:93:
09:aa:47:02:b3:5c:df:56:c9:1f:1a:77:6d:ff:c5:fb:29:0f:
91:9f:b0:aa:06:2e:bc:42:90:94:ed:17:c4:a2:c9:1d:25:c2:
93:22:6f:e8:b1:7f:89:d1:bc:e9:da:73:22:d3:0d:94:17:dd:
ca:24:dd:1a:d2:c1:ac:ed:15:9c:65:8b:bc:61:03:d9:ee:06:
82:52:2b:f6:74:e4:ef:33:c5:61:d3:94:ce:b9:8f:4f:ee:07:
2e:45:24:22:ed:45:be:77:74:ec:72:3d:74:37:f6:78:b0:07:
c3:33:06:44:25:6d:6a:bd:cf:d0:6e:6c:2a:95:3d:6c:40:bb:
81:2c:db:7a:cf:57:7f:74:1d:21:ad:c4:d5:41:3b:1e:e9:d4:
23:59:dc:bb:6f:f8:9e:2f:09:b8:0a:01:0f:ed:3a:88:a3:4a:
1d:52:be:63:f2:c5:ff:0e:69:0a:5f:a0:0d:d1:00:da:0f:22:
e1:88:75:a3:98:6a:a0:8c:05:9f:72:0a:b2:57:2d:dc:a3:21:
ef:fe:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:56 2025 by rpki-client