Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A-uwf2Hl3ZzZX_pHegElobsOJuk.roa
File: A-uwf2Hl3ZzZX_pHegElobsOJuk.roa (raw, json)
Hash identifier: yLU+xiPXJxds931saseuX2k6VM73g40PiYXf5aDPUAg=
Subject key identifier: 03:EB:B0:7F:61:E5:DD:9C:D9:5F:FA:47:7A:01:25:A1:BB:0E:26:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019677FC1394C1F4F2047F966A6ADF1D0EA7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A-uwf2Hl3ZzZX_pHegElobsOJuk.roa
Signing time: Sun 27 Apr 2025 16:02:10 +0000
ROA not before: Sun 27 Apr 2025 16:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 31.58.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fc:13:94:c1:f4:f2:04:7f:96:6a:6a:df:1d:0e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 27 16:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ebb07f61e5dd9cd95ffa477a0125a1bb0e26e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:90:f7:d3:2e:19:23:38:c4:3a:69:17:5e:
55:f0:a2:ee:fa:05:66:34:d2:1f:21:51:58:0e:aa:
1a:3c:19:5b:f6:2b:e9:38:26:db:e1:1c:e4:61:60:
bc:a2:38:9f:fb:00:c3:bd:fd:4c:a5:ec:2c:23:f6:
29:b1:b0:f2:37:5c:62:5c:77:ce:7c:2c:a9:70:6e:
cf:9f:3a:b2:e8:ef:a2:3e:7c:6a:0d:12:e2:4b:71:
4a:16:2c:e1:a3:a5:1c:23:c8:48:cf:45:2c:8f:46:
fc:56:4b:5f:e6:fa:1e:9c:e2:33:72:7e:fb:4b:b9:
4d:eb:80:a9:8c:ab:36:e4:50:7b:99:f1:85:d7:48:
be:09:04:f9:fe:e9:b7:4d:0d:55:7a:b9:af:37:6c:
39:20:92:3f:6a:9e:69:78:fb:29:df:a0:c0:b2:49:
ba:09:44:8f:bc:0b:10:c1:cb:20:7c:db:78:95:fb:
31:9f:5e:71:82:32:f9:de:c2:ea:ab:d9:52:98:65:
89:e2:41:71:17:14:fd:4f:b5:33:81:19:00:fc:ea:
42:59:5f:b2:9c:43:2d:7f:21:e6:bc:f1:d2:46:99:
84:23:bd:8a:e5:cd:03:3a:33:34:07:94:3c:47:dc:
72:24:ec:00:c5:6b:ee:1e:e2:7b:4b:f7:8a:e4:35:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EB:B0:7F:61:E5:DD:9C:D9:5F:FA:47:7A:01:25:A1:BB:0E:26:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A-uwf2Hl3ZzZX_pHegElobsOJuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:e4:28:5c:2a:74:8a:74:d4:1e:3c:a6:ba:2c:23:af:60:
18:a9:c4:47:61:90:c2:c4:81:8e:8d:bf:f7:51:f3:95:be:12:
c7:27:26:53:3a:16:9e:58:4e:e1:47:5e:0c:ca:f8:c7:e1:6e:
6c:6e:26:25:0b:0c:29:78:15:d3:69:c7:3c:01:ba:02:b7:c6:
b7:8b:3a:ee:30:b0:d8:64:4b:ca:e0:e4:0e:0f:fb:3b:a7:5b:
05:94:09:d9:a9:2f:03:95:91:72:46:d5:fc:d5:9b:ee:50:b1:
de:49:85:4b:4d:44:15:27:08:6b:be:38:a6:d7:db:51:bb:8e:
46:84:2c:39:1d:e3:1c:44:1d:44:07:21:59:23:96:46:37:c3:
a4:46:a4:25:e6:c7:71:66:7a:f2:fb:8e:3e:19:70:36:fb:8c:
81:04:54:f5:70:af:f2:ad:d5:42:5a:fa:6b:05:a8:6d:ba:d3:
f3:c4:25:c0:07:d0:0f:06:7b:aa:b9:7a:e2:78:54:dc:04:ce:
9b:55:48:9e:3a:3e:62:c7:b7:e9:92:d6:70:22:8a:f2:05:c5:
46:22:e4:5a:91:5b:52:8d:89:fd:d4:54:47:d7:fe:91:87:15:
bb:49:e5:73:da:82:bf:d1:93:fc:18:33:6b:07:e6:5f:a9:a5:
19:e1:ea:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZ3/BOUwfTyBH+WamrfHQ6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDI3MTYwMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2ViYjA3ZjYxZTVkZDljZDk1ZmZhNDc3YTAxMjVhMWJiMGUyNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysOQ99MuGSM4xDppF15V8KLu+gVm
NNIfIVFYDqoaPBlb9ivpOCbb4RzkYWC8ojif+wDDvf1MpewsI/YpsbDyN1xiXHfO
fCypcG7Pnzqy6O+iPnxqDRLiS3FKFizho6UcI8hIz0Usj0b8Vktf5voenOIzcn77
S7lN64CpjKs25FB7mfGF10i+CQT5/um3TQ1VermvN2w5IJI/ap5pePsp36DAskm6
CUSPvAsQwcsgfNt4lfsxn15xgjL53sLqq9lSmGWJ4kFxFxT9T7UzgRkA/OpCWV+y
nEMtfyHmvPHSRpmEI72K5c0DOjM0B5Q8R9xyJOwAxWvuHuJ7S/eK5DXtUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPrsH9h5d2c2V/6R3oBJaG7DibpMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQS11d2YySGwzWnpaWF9wSGVnRWxvYnNPSnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr6MA0G
CSqGSIb3DQEBCwUAA4IBAQCrieQoXCp0inTUHjymuiwjr2AYqcRHYZDCxIGOjb/3
UfOVvhLHJyZTOhaeWE7hR14MyvjH4W5sbiYlCwwpeBXTacc8AboCt8a3izruMLDY
ZEvK4OQOD/s7p1sFlAnZqS8DlZFyRtX81ZvuULHeSYVLTUQVJwhrvjim19tRu45G
hCw5HeMcRB1EByFZI5ZGN8OkRqQl5sdxZnry+44+GXA2+4yBBFT1cK/yrdVCWvpr
BahtutPzxCXAB9APBnuquXrieFTcBM6bVUieOj5ix7fpktZwIoryBcVGIuRakVtS
jYn91FRH1/6RhxW7SeVz2oK/0ZP8GDNrB+ZfqaUZ4eqE
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:29:14 2025 by rpki-client