Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QtMHIoQBimojxY9Y3ZQAioaJ-o.roa
File: 0QtMHIoQBimojxY9Y3ZQAioaJ-o.roa (raw, json)
Hash identifier: 6FT5f5S8tT1uf2uHGmx45bOdvbqEngu083eezhxshFE=
Subject key identifier: D1:0B:4C:1C:8A:10:06:29:A8:8F:16:3D:63:76:50:02:2A:1A:27:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196E82B3FE6F521A99E9FBDF9EA9CB55648
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QtMHIoQBimojxY9Y3ZQAioaJ-o.roa
Signing time: Mon 19 May 2025 10:51:10 +0000
ROA not before: Mon 19 May 2025 10:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.56.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:2b:3f:e6:f5:21:a9:9e:9f:bd:f9:ea:9c:b5:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 10:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10b4c1c8a100629a88f163d637650022a1a27ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cb:92:c0:0b:cd:71:16:c5:9e:70:ea:af:26:
38:80:68:7f:8d:ff:b8:53:a6:00:a8:df:35:72:28:
73:97:2d:52:da:f1:63:df:ec:f6:9a:e7:13:8e:b3:
d9:cc:7b:f9:4b:a0:5d:fa:14:bc:63:94:ff:3c:16:
e5:2e:24:a7:cc:d2:6b:22:1c:e2:40:a2:8e:a5:09:
3f:66:10:a3:f0:2a:d2:79:42:a1:e6:15:5d:b0:b9:
eb:46:1e:4f:1c:e9:56:bf:d8:e9:e6:c3:3d:d9:f3:
b3:4a:52:b7:d0:11:32:56:07:76:80:42:c5:2d:42:
68:b1:91:d2:d6:b1:87:2d:a2:6a:44:bc:7c:dd:5c:
ac:51:d1:56:3f:88:3a:c4:0d:ce:57:62:61:e1:7d:
ee:0b:64:56:b1:89:41:c0:07:43:66:e9:4f:e6:da:
aa:fc:7e:f5:9c:dc:97:c1:0b:bf:b1:26:fd:bd:1d:
90:8d:6e:ba:c8:fd:07:61:32:4d:e9:8a:15:2e:8c:
e5:2c:66:f4:3d:31:15:eb:a7:72:a6:dd:60:6b:55:
27:a0:95:34:e9:d2:c4:bd:f2:ea:e3:a2:44:5d:27:
29:3f:cb:c2:b4:65:68:7d:ba:9e:8b:d6:0c:ba:03:
a2:08:5d:24:4b:75:c4:d2:6b:9e:cf:a1:30:f5:07:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:4C:1C:8A:10:06:29:A8:8F:16:3D:63:76:50:02:2A:1A:27:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0QtMHIoQBimojxY9Y3ZQAioaJ-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5a:1c:d2:69:5e:05:ff:e0:80:bf:5f:a2:5b:07:77:0d:30:
c3:5c:77:d3:d6:af:5f:b4:2b:9f:33:d8:5f:b0:1d:7a:f7:46:
b7:2b:66:9c:8f:c7:f4:12:1e:b5:53:b0:4d:98:fb:00:55:5f:
c0:04:b7:a0:48:a8:61:1f:ff:f3:3f:f8:f8:38:9e:44:26:45:
6f:c8:49:83:c5:ce:42:de:30:fa:68:99:4f:19:23:22:c5:5e:
5d:55:77:7a:6b:7d:b9:9c:31:ff:1c:31:b6:2a:06:3f:f0:f8:
3c:c7:95:ec:be:c5:4c:b7:9a:0c:9d:ed:47:d9:82:c9:6b:9b:
1f:a0:fd:aa:c3:b4:a4:e3:91:64:78:13:a4:a0:e9:fc:e7:13:
f5:8f:32:b1:6e:0f:23:52:35:13:7d:b0:8c:d8:72:8d:4c:31:
47:e9:83:eb:c9:1d:62:34:8d:a0:ec:5d:29:ed:d3:c9:e8:fa:
64:2c:02:87:86:4f:af:e5:2c:21:ea:05:ca:b2:53:b6:42:74:
ca:5f:19:1e:cf:4f:dc:49:67:13:54:c8:6f:3b:70:5a:4c:5d:
89:f9:9e:74:4a:10:ea:e8:7d:91:72:49:4e:5f:b6:3b:be:cb:
29:9b:90:4f:a1:97:ba:f5:5d:1b:84:88:29:f3:9b:e6:64:89:
01:52:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:40 2025 by rpki-client