Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rqON_Ff4jIc0xyfZ3Y9KgZJhKA.roa
File: 9rqON_Ff4jIc0xyfZ3Y9KgZJhKA.roa (raw, json)
Hash identifier: 6epZc49XJtE7DGbLRRr2Fyed0OlUQP2ilQ5oyaR30G0=
Subject key identifier: F6:BA:8E:37:F1:5F:E2:32:1C:D3:1C:9F:67:76:3D:2A:06:49:84:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196B567585F236988822350AE919059F04A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rqON_Ff4jIc0xyfZ3Y9KgZJhKA.roa
Signing time: Fri 09 May 2025 14:16:10 +0000
ROA not before: Fri 09 May 2025 14:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142382
IP address blocks: 31.56.74.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:67:58:5f:23:69:88:82:23:50:ae:91:90:59:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 14:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ba8e37f15fe2321cd31c9f67763d2a064984a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:94:79:f2:b9:0c:2b:98:f2:a6:ba:fc:54:
e6:54:e8:05:32:ab:54:41:9f:5a:04:61:31:29:27:
ed:61:95:da:b7:a1:9a:eb:26:1f:1e:6c:87:6f:32:
a3:3b:d9:30:e6:56:e7:4b:f9:9a:02:51:14:09:48:
30:b5:26:ba:a3:60:14:89:d3:7e:9d:b7:60:d0:66:
90:10:a7:5d:49:75:6f:51:21:c7:9b:0f:57:14:d0:
9b:ee:7c:f9:8a:31:71:c6:46:5b:17:21:ee:53:dd:
a3:6d:1c:9a:ef:93:aa:ea:9b:36:dc:b8:2a:91:53:
01:81:50:7f:56:d4:f0:00:87:74:a0:41:7f:c9:19:
f7:80:1c:ad:39:0f:0f:30:a1:a1:cd:42:b4:15:ef:
85:d0:ce:08:bd:b4:d2:9c:ae:ae:91:c6:53:52:fd:
e0:24:13:03:30:d3:35:67:7e:92:59:6e:59:7b:5b:
d8:36:4f:01:35:b3:58:f3:28:9c:1e:8e:fa:41:55:
5b:44:0c:56:5d:ad:f8:fb:38:02:dd:a4:be:ab:49:
0a:e4:71:af:71:96:1f:e7:50:f8:2c:7c:dd:57:5c:
d2:a5:34:10:73:d7:61:dc:f0:f4:90:a6:ed:22:e8:
18:46:00:e6:47:cd:bc:66:c7:81:9a:f8:e2:28:df:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BA:8E:37:F1:5F:E2:32:1C:D3:1C:9F:67:76:3D:2A:06:49:84:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rqON_Ff4jIc0xyfZ3Y9KgZJhKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.74.0/24
31.56.121.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6c:ca:4d:58:d9:6e:60:f5:9d:79:fb:e5:34:1a:62:32:b4:
eb:d3:dd:92:99:9e:33:1c:1c:96:88:f5:6d:92:57:c6:11:37:
5f:ec:63:72:95:f0:2b:9c:d3:14:f0:05:cd:e4:55:9a:d9:de:
4c:7e:26:61:e2:49:3c:2f:ab:0b:06:3b:5c:6c:c2:c7:43:0e:
1a:e0:03:fd:82:ba:af:21:aa:59:6f:03:3b:85:b6:65:7e:e5:
b6:69:f7:09:56:ab:7c:3e:bc:8a:65:f5:4c:78:a1:48:2f:d7:
ce:8a:61:e8:0b:66:13:bd:49:db:3c:6c:06:6d:31:62:63:2e:
0d:ca:6b:26:41:7c:a5:9a:44:24:c1:18:65:b0:13:3d:00:70:
7f:58:f3:a9:98:99:31:61:f8:ec:e2:05:ca:27:71:a6:a0:44:
33:ec:6a:11:e4:1b:07:71:4c:83:84:68:fa:58:6a:80:d7:91:
40:98:2c:af:88:03:0f:d5:b6:6c:4b:d0:01:6b:a6:ed:ed:53:
96:f8:23:47:b2:d9:25:9c:98:04:78:ca:cb:a9:9f:c3:9b:e9:
a2:d5:f3:e2:d7:63:9b:bc:a9:23:ce:7f:4a:c4:af:a7:d3:82:
03:2c:5a:bc:fd:d6:4a:00:ea:e2:6f:85:a8:39:85:25:08:4b:
d3:d2:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:12:02 2025 by rpki-client