Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BsuQLc6lsKYtZNsU2Hrqy-Gz_Jc.roa
File: BsuQLc6lsKYtZNsU2Hrqy-Gz_Jc.roa (raw, json)
Hash identifier: qIBy7yhjGZDcwVsYp0RUTUtsNOv99B7rLpqKHIHy6rM=
Subject key identifier: 06:CB:90:2D:CE:A5:B0:A6:2D:64:DB:14:D8:7A:EA:CB:E1:B3:FC:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C9FDCE453B5ADD1E16D06226421DC397
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BsuQLc6lsKYtZNsU2Hrqy-Gz_Jc.roa
Signing time: Wed 02 Jul 2025 07:15:43 +0000
ROA not before: Wed 02 Jul 2025 07:15:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 31.57.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:fd:ce:45:3b:5a:dd:1e:16:d0:62:26:42:1d:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 2 07:15:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06cb902dcea5b0a62d64db14d87aeacbe1b3fc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:ce:ec:60:2b:db:45:74:dc:9f:5d:00:67:
50:a2:e8:08:dc:ca:74:e0:d9:82:bd:a8:37:17:b1:
0b:89:27:6c:0a:34:39:7f:e6:d9:ce:71:3b:72:fa:
76:10:2b:22:85:fb:0e:e5:71:37:38:ad:fc:ae:96:
9e:62:6f:ef:8d:e7:b2:37:b5:aa:40:74:0f:46:c9:
1d:b4:d9:9c:cd:54:94:60:b9:e9:37:fb:b3:cc:42:
a3:fe:d3:8f:8d:db:95:bf:66:b5:9f:41:58:b6:53:
c6:8a:2a:c2:2a:44:c1:31:9c:dc:f0:ef:30:72:35:
74:65:48:9b:91:40:ba:e6:2c:b8:6a:67:71:fe:2b:
be:25:1d:a0:55:06:0f:f2:7f:38:4d:67:b8:60:66:
3d:d8:16:4f:51:9f:e5:d0:2c:88:1d:b0:90:48:2f:
ca:d7:ea:5c:c4:e4:62:64:dd:3a:bb:b6:1d:4c:a1:
3e:6a:16:bf:11:4d:e0:6e:3c:61:8c:cf:a4:ee:29:
59:2a:46:87:b0:43:8d:2b:e6:09:dd:5a:1e:16:af:
ca:9e:86:3c:92:37:05:16:07:93:a5:0b:e0:e4:69:
01:c3:1e:93:9c:56:13:f3:e5:75:0e:2e:9a:dd:86:
bd:d2:8a:54:82:a4:20:14:df:4f:2d:36:c7:47:eb:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:90:2D:CE:A5:B0:A6:2D:64:DB:14:D8:7A:EA:CB:E1:B3:FC:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BsuQLc6lsKYtZNsU2Hrqy-Gz_Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.54.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e4:13:07:7b:f3:77:4a:66:cc:7e:8f:4c:56:59:a9:e2:1f:
5c:2b:6d:ee:4a:ff:6a:6d:93:44:7e:1f:ed:1e:85:f9:fc:ae:
92:c0:28:23:4f:02:c3:55:87:21:e6:3e:ea:a0:3f:b1:f8:2f:
2e:71:12:4b:a8:ac:8f:ff:8d:38:20:3c:61:87:13:78:26:5d:
76:31:d9:7e:54:32:64:27:db:d8:29:67:25:3b:bf:4f:1d:22:
51:de:d9:c4:68:47:1f:2a:c7:1c:e3:5a:5d:cf:b8:b3:81:d6:
48:fc:5d:37:29:98:3b:b2:2f:2e:02:03:e8:68:43:a9:35:3d:
59:d2:74:d5:f4:aa:e9:18:7d:e1:ca:51:a5:3c:6a:39:2f:db:
21:45:e7:c9:aa:6a:1a:98:bd:05:7c:f5:6a:f0:35:23:64:f0:
cc:20:f5:57:cb:ff:7d:8d:f9:3f:f4:fa:dd:57:68:7e:6d:f6:
38:9b:66:4d:b4:30:9b:bc:ab:ff:75:d6:d9:dd:2b:a7:79:fc:
5c:cb:a0:1c:90:36:6f:99:dc:2c:7a:d3:dd:77:98:2b:8d:ad:
8b:c1:4e:09:30:92:5f:4e:80:60:da:47:a5:dd:75:15:6a:04:
3a:14:b8:3e:96:8c:67:fa:67:aa:bd:f8:f6:a8:8b:aa:cf:d9:
25:38:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:35:44 2025 by rpki-client