Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/RtfhloJ6csmSC5M0-GrvCW9Hmoc.roa
File: RtfhloJ6csmSC5M0-GrvCW9Hmoc.roa (raw, json)
Hash identifier: 4+ozi83mOvRn6jpHP51z11wpka20dZv3ia9tMk3a1A4=
Subject key identifier: 46:D7:E1:96:82:7A:72:C9:92:0B:93:34:F8:6A:EF:09:6F:47:9A:87
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0196F6CD588CFCA5DA36204CA5913BB5EE9A
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/RtfhloJ6csmSC5M0-GrvCW9Hmoc.roa
Signing time: Thu 22 May 2025 07:02:54 +0000
ROA not before: Thu 22 May 2025 07:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:cd:58:8c:fc:a5:da:36:20:4c:a5:91:3b:b5:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 22 07:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46d7e196827a72c9920b9334f86aef096f479a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:6c:42:2f:e2:c7:7d:1c:1f:cf:ea:02:02:
f1:b5:62:ad:6d:4c:2b:6e:c4:a1:b6:cd:90:4a:0e:
61:fb:ea:96:5e:6e:ae:c9:3c:d5:e0:a6:2f:5e:83:
25:45:a0:8f:cd:69:ea:60:f0:35:49:67:67:78:28:
16:63:73:8d:79:ef:20:ad:52:d2:78:0c:12:7f:b9:
da:e7:44:e8:01:4f:c3:3f:21:23:82:d8:15:c1:31:
60:27:0c:c8:fb:34:14:97:9b:d1:a7:1a:4a:b8:0c:
e1:72:e9:91:03:80:02:5c:f9:e3:0d:e8:30:07:82:
15:77:e6:28:e5:d0:f5:cc:a6:3c:93:c4:38:a8:61:
e4:6a:7a:3d:fe:a4:ba:db:b7:63:11:96:78:d6:70:
a8:e6:44:5b:6b:4a:ff:d9:3d:e7:ae:64:a0:ea:05:
e9:7a:53:c5:1e:10:88:a3:ee:7e:94:ce:d4:44:82:
04:4c:88:75:e7:06:db:8e:29:1a:e3:58:ed:bf:71:
cb:0d:3f:3a:8e:50:bf:68:96:b1:3a:e1:4f:f1:fd:
2b:06:87:e7:a4:73:51:ba:16:9c:af:86:33:86:ea:
aa:a8:19:33:07:e2:18:55:d5:b2:7c:9a:7b:2f:1e:
61:25:cd:67:05:eb:82:47:33:42:f1:6e:ad:8c:8b:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:E1:96:82:7A:72:C9:92:0B:93:34:F8:6A:EF:09:6F:47:9A:87
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/RtfhloJ6csmSC5M0-GrvCW9Hmoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/23
81.31.242.0-81.31.247.255
Signature Algorithm: sha256WithRSAEncryption
94:81:02:a7:07:c2:e7:d4:42:c8:55:8f:19:d0:ed:9f:22:94:
7f:6c:aa:3d:48:3d:63:db:49:a5:3c:a2:aa:ab:f1:65:c0:7a:
f0:f0:8d:3e:6f:61:bc:f7:48:cc:0a:b5:6f:c2:43:bc:17:94:
9f:42:79:71:2c:02:29:18:82:53:c8:82:c6:93:1c:2e:e5:d8:
08:70:26:9e:1b:05:f2:90:02:e4:42:aa:f2:ff:cb:64:9f:a9:
22:8a:d4:58:a7:f7:ed:fa:ee:72:6d:12:ce:df:3c:df:62:d4:
31:d2:39:95:eb:84:56:1a:b0:d7:2a:29:40:70:b4:00:e5:e3:
3d:5e:71:97:14:49:cf:8d:63:c9:70:6b:1f:76:bc:ef:68:ae:
9e:c8:a0:0d:be:8f:88:96:e6:f2:a7:d5:cd:db:50:59:01:78:
bc:1f:7e:83:f1:2d:fe:c9:12:ff:10:cd:d0:31:b2:40:80:9a:
83:fb:73:a7:b7:3a:24:a1:7f:d5:79:4e:8e:cf:e6:65:63:f7:
17:69:e5:3c:67:32:94:74:42:df:a7:85:82:14:b2:4d:af:fa:
97:93:87:4e:c8:cd:2e:fc:29:46:27:4d:91:95:13:9e:c2:7d:
f1:fe:88:8e:4e:60:98:f8:8d:77:41:0b:43:1e:ca:6b:83:0a:
20:25:0f:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:07 2025 by rpki-client