Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5iWh4McXaDqe_bweF1lxWOwTpio.roa
File: 5iWh4McXaDqe_bweF1lxWOwTpio.roa (raw, json)
Hash identifier: qN3+LWq2Pd5Ko9IPUE1MrKFXRlGog7XiZTLNBqZNV4Q=
Subject key identifier: E6:25:A1:E0:C7:17:68:3A:9E:FD:BC:1E:17:59:71:58:EC:13:A6:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019555ED75600220A88B56D97DC41056FFEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5iWh4McXaDqe_bweF1lxWOwTpio.roa
Signing time: Sun 02 Mar 2025 08:16:20 +0000
ROA not before: Sun 02 Mar 2025 08:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211617
IP address blocks: 31.57.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:ed:75:60:02:20:a8:8b:56:d9:7d:c4:10:56:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 2 08:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e625a1e0c717683a9efdbc1e17597158ec13a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:1f:48:4e:10:4d:e9:39:d8:b6:87:59:8c:
cd:b4:59:28:30:80:c3:50:60:9d:a7:c5:d6:9d:32:
e7:47:eb:66:f6:42:6e:c6:da:3a:26:46:cc:20:7d:
08:bd:1c:f4:2e:f8:9a:e3:13:8b:d7:e3:27:5d:24:
c7:51:4a:52:3d:86:23:f8:c5:04:26:51:d0:f5:4e:
ce:91:49:65:15:18:4d:b6:66:4d:b2:d3:89:d9:e5:
ee:12:03:71:c7:6e:4c:ac:da:bb:e8:61:09:e4:89:
05:29:15:cc:0f:63:9f:d7:6d:63:ae:33:99:b8:a6:
2d:6d:a4:ab:ac:10:28:b9:22:46:21:15:ac:a5:ee:
55:e0:35:eb:e0:55:56:1d:6c:d1:c8:16:eb:8e:4f:
90:4c:6e:55:b9:bb:e9:5f:f3:ec:77:0c:0d:1b:4a:
57:40:4b:39:41:ec:64:66:2e:32:4e:8e:67:47:e4:
7b:5d:b6:5b:3c:92:62:12:19:b2:44:17:b3:fd:5c:
96:b5:8f:93:d5:a9:eb:60:a9:9a:e2:c6:be:d7:b7:
37:4e:bc:fe:73:60:84:46:74:34:45:9d:25:fe:73:
61:2b:23:da:e4:bb:32:19:a8:e8:da:15:11:1d:cb:
d9:31:6d:d3:06:01:ce:c6:ff:4b:38:40:46:2c:5a:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:25:A1:E0:C7:17:68:3A:9E:FD:BC:1E:17:59:71:58:EC:13:A6:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5iWh4McXaDqe_bweF1lxWOwTpio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.227.0/24
Signature Algorithm: sha256WithRSAEncryption
46:73:89:24:6a:2a:98:0a:ef:15:f7:95:75:8c:03:3d:69:3e:
b6:c5:0a:35:7d:be:da:33:fb:91:05:3d:f0:f2:e1:8f:6d:c4:
cf:4e:13:c5:66:f2:32:40:a6:13:7b:18:3b:a6:df:d2:10:b1:
25:e2:90:8d:9b:e8:87:da:3b:99:96:7b:21:39:2f:9d:bd:a2:
ec:f6:71:41:89:7f:a1:b9:56:9e:24:fc:58:7c:0f:b0:12:13:
b7:5e:9d:e0:17:d7:ba:38:0d:63:de:5c:64:5c:60:20:ee:9f:
0f:37:8a:e3:da:8e:62:55:3e:eb:c7:93:a8:24:70:69:1d:ef:
b5:77:75:d4:a4:9a:36:1d:3a:17:0f:2b:1d:8f:e7:6c:80:6f:
fd:7e:cb:9a:1d:8b:e4:32:02:9e:d2:87:44:55:a1:9b:82:bc:
d2:2f:91:a1:73:e2:c2:11:7f:0a:37:9a:30:a0:22:b6:8e:ea:
3f:71:21:74:16:bc:cf:9f:17:41:f4:4e:44:b1:58:de:b8:0d:
da:28:58:ef:8b:aa:15:62:01:86:a4:2c:a4:de:b9:31:19:2b:
4a:c4:86:9c:13:a4:b8:f4:cb:3a:0f:6c:30:e6:bc:f3:b6:7c:
c3:ca:99:12:b5:d8:c8:23:72:1f:08:78:f1:79:39:38:b4:cf:
60:b9:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:06 2025 by rpki-client