Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0dYKhDCrFhfuXPGIcWXTPomqw0g.roa
File: 0dYKhDCrFhfuXPGIcWXTPomqw0g.roa (raw, json)
Hash identifier: FidKhbMS2EWG17lTOn5dgG7K7rLj4pQqg53LkLdz3LE=
Subject key identifier: D1:D6:0A:84:30:AB:16:17:EE:5C:F1:88:71:65:D3:3E:89:AA:C3:48
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01971C13E45D96112C262275980525246D87
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0dYKhDCrFhfuXPGIcWXTPomqw0g.roa
Signing time: Thu 29 May 2025 12:45:55 +0000
ROA not before: Thu 29 May 2025 12:45:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.58.234.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:13:e4:5d:96:11:2c:26:22:75:98:05:25:24:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 29 12:45:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d60a8430ab1617ee5cf1887165d33e89aac348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:c9:f6:c1:82:24:db:c2:d2:89:6c:49:5e:
ad:43:c8:a0:93:03:95:4d:70:db:9c:16:1f:e4:88:
cc:65:d1:44:41:fb:c6:50:c5:06:05:de:0c:22:57:
bf:d0:2b:80:3c:7d:4c:b8:08:53:2a:d7:e1:ff:3d:
1b:9c:62:d7:11:87:30:50:61:ab:6d:aa:99:9e:d0:
f1:d7:d6:f5:27:71:21:15:7b:b2:2d:1f:e4:90:61:
5b:07:03:62:77:45:a6:7b:58:4a:49:75:22:10:a6:
46:1c:f8:e8:ff:04:33:1a:e3:95:0e:95:fe:f7:0c:
08:d2:31:de:0c:9a:7c:da:3b:e6:e8:5b:78:ca:17:
da:fd:fe:02:30:6f:47:21:23:23:64:63:83:3a:41:
b3:27:cf:5b:c5:b2:07:e7:77:1d:f3:49:d8:96:74:
99:6e:5a:d9:86:bb:4b:e7:17:9c:d5:66:76:54:08:
2e:4f:f7:93:85:3f:17:48:71:7e:ce:0d:06:ae:bd:
a5:b1:b3:27:07:4a:a2:c3:31:7f:86:c3:2c:23:67:
6b:7a:52:42:9c:d6:94:97:db:9d:59:3f:62:99:00:
d4:eb:2f:a2:04:94:04:ed:19:c0:9b:b2:e9:43:17:
e4:4b:6b:25:1a:eb:d5:6b:cc:34:c9:e5:32:e6:3a:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:0A:84:30:AB:16:17:EE:5C:F1:88:71:65:D3:3E:89:AA:C3:48
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0dYKhDCrFhfuXPGIcWXTPomqw0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.234.0/24
31.58.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bc:44:97:49:2c:c1:1b:b3:b0:23:51:5c:65:0a:5e:4f:04:
07:8d:a9:4a:4c:18:1f:8e:91:0f:2e:2d:6e:b2:fe:c5:3a:41:
30:7f:a8:0e:33:ec:81:01:89:db:40:89:29:3d:53:cc:83:8a:
97:b7:e9:60:51:07:78:4c:17:95:1a:93:ed:c5:ea:e9:fc:91:
a8:64:29:ef:b6:d3:6e:47:89:ef:4a:27:a2:c7:e0:cd:06:a8:
7f:aa:ef:d4:85:b3:75:0f:06:d6:c9:91:93:13:fb:d6:2e:9c:
74:71:ca:68:50:ee:e3:93:17:ce:93:b7:fc:ab:a7:62:33:dc:
36:f1:80:c8:70:8a:17:fd:74:b1:67:fe:44:79:1f:fe:ba:b1:
40:a4:5f:98:2a:6f:8a:29:94:0a:fe:36:c1:e8:4d:d6:d1:90:
9e:30:2a:ec:75:bd:d3:50:12:1f:45:aa:1d:b2:95:a0:c3:24:
e8:99:2e:46:93:87:65:c3:d4:5c:06:72:91:25:d9:9f:e5:a1:
6a:6b:a7:2b:53:91:13:83:b2:25:ac:e3:95:3b:11:d8:61:3a:
02:6e:d0:62:4b:41:8e:d8:b3:6d:9c:25:a1:6c:57:d9:ac:e4:
32:c7:6a:87:c9:64:c5:63:07:70:ac:da:9f:c6:5f:12:bb:86:
5c:d2:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:33:36 2025 by rpki-client