Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-7vDVRXeXMYG2XeSGf-xQEFufwA.roa
File: 1-7vDVRXeXMYG2XeSGf-xQEFufwA.roa (raw, json)
Hash identifier: N6lB5m7h15pHzTqjC9LfMRlYudGYNb9kpTRVwH5yDIw=
Subject key identifier: FB:BB:C3:55:15:DE:5C:C6:06:D9:77:92:19:FF:B1:40:41:6E:7F:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01971ADBB2F20D565DEAA64260AE00E4E10F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-7vDVRXeXMYG2XeSGf-xQEFufwA.roa
Signing time: Thu 29 May 2025 07:04:55 +0000
ROA not before: Thu 29 May 2025 07:04:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 31.57.38.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:db:b2:f2:0d:56:5d:ea:a6:42:60:ae:00:e4:e1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 29 07:04:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbbbc35515de5cc606d9779219ffb140416e7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:b5:7c:fb:a4:50:2a:9f:da:75:29:6f:3a:
15:68:5a:74:7e:77:68:53:b3:a6:c8:7f:25:d7:e1:
c0:67:29:25:94:5e:f7:90:4d:26:c4:21:6e:7c:96:
4b:ce:b0:da:b7:a8:e8:60:38:12:4a:5f:47:a0:51:
8c:6e:8a:d8:e5:81:ae:f7:46:03:6c:7a:4f:31:1e:
31:f8:9b:55:db:6e:4f:65:d3:e3:a8:e2:56:19:0b:
2b:e0:2c:1e:ff:a3:56:a8:aa:53:05:f9:08:2a:22:
11:c3:25:34:1c:13:79:6a:89:13:49:c9:f5:4b:2f:
f5:17:f3:40:5a:2f:0f:8e:b8:f5:48:04:7d:d5:06:
e2:3f:55:1a:57:33:6c:9c:45:56:0b:10:45:ca:ba:
d2:f9:f3:72:19:a7:3a:a6:8d:d5:5d:62:b4:60:4f:
6e:67:e5:23:71:1d:aa:b5:49:ed:31:16:0a:5a:7a:
6e:ae:5a:b8:6d:7b:2c:4b:6e:f1:ac:d1:26:f1:f1:
d2:ac:a8:30:48:b6:14:ff:2a:af:e4:ed:9b:5f:5e:
4b:55:87:9a:34:17:96:ab:a6:d3:e3:66:77:8c:4a:
8f:bc:f5:5e:3f:67:25:93:cd:76:b3:fc:94:37:b5:
46:93:3a:ef:dd:b4:36:c2:bc:db:24:df:07:3e:6d:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:C3:55:15:DE:5C:C6:06:D9:77:92:19:FF:B1:40:41:6E:7F:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-7vDVRXeXMYG2XeSGf-xQEFufwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.38.0/24
31.57.188.0/24
31.57.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a4:b9:a7:3b:91:fc:d7:4b:33:67:71:0c:de:c5:3e:49:2d:
94:b1:8f:4b:92:cc:99:50:07:64:d5:9d:10:c4:6f:79:bb:5c:
f6:c0:b4:74:d3:47:48:5e:f1:ef:d3:80:fc:4a:33:f7:ee:0d:
7d:88:e3:81:ac:be:05:b5:4b:f1:99:92:12:c5:d7:97:6f:bf:
ca:23:41:6b:e4:c6:e6:f5:1a:ac:05:72:81:2b:bc:95:95:93:
aa:64:f3:57:43:1d:eb:74:2a:14:e2:de:31:17:33:b1:c9:e1:
f6:6e:1f:f5:3a:26:90:54:06:f4:52:ac:03:e5:7b:dd:7b:44:
75:fa:42:04:47:f9:7d:ed:b2:f1:d5:01:d8:cc:95:50:fe:f5:
ca:a1:0a:b6:f4:2a:d6:1e:78:da:31:55:d3:eb:54:78:18:97:
84:69:5b:ab:03:f5:7e:7e:0b:72:51:e3:04:41:b7:6b:df:b0:
c0:1d:3c:ed:0f:a7:75:15:44:8d:e3:c0:f5:21:19:6f:68:7f:
e9:82:00:86:d9:3a:db:ea:2a:7d:57:96:68:57:45:83:5a:70:
4b:32:4a:dc:45:22:e8:97:58:db:17:a5:d3:fd:4c:9a:3d:45:
00:97:72:b1:a0:61:8b:71:9b:4e:0c:45:3c:e3:f5:67:a6:6c:
29:9d:57:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:28:36 2025 by rpki-client