Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EskzPjeqAw5IaiKAdyI3M4HwbVM.roa
File: EskzPjeqAw5IaiKAdyI3M4HwbVM.roa (raw, json)
Hash identifier: caOGPGY4Uhd2A54WzcDTQH/e+B5s+767bEa6gGETgzE=
Subject key identifier: 12:C9:33:3E:37:AA:03:0E:48:6A:22:80:77:22:37:33:81:F0:6D:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C9FCE22C664624EB16B16B7C39CFA308
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EskzPjeqAw5IaiKAdyI3M4HwbVM.roa
Signing time: Wed 02 Jul 2025 07:14:42 +0000
ROA not before: Wed 02 Jul 2025 07:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208751
IP address blocks: 31.56.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:fc:e2:2c:66:46:24:eb:16:b1:6b:7c:39:cf:a3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 2 07:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c9333e37aa030e486a22807722373381f06d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:1f:02:63:aa:ff:a0:19:f4:73:1a:62:89:
62:2c:e7:f6:d5:0c:46:e4:37:c3:5d:96:ef:c1:21:
3d:4a:53:e7:e3:52:c0:5e:b6:bf:03:e4:6a:d8:db:
4f:c7:6b:26:8e:c7:49:4f:0e:b9:2f:4c:ed:6e:b5:
78:a6:79:c1:ee:68:64:85:25:38:82:ab:ed:c8:f5:
64:ab:9c:ec:ac:18:ad:5a:73:dd:a9:90:d2:00:08:
04:bf:4b:10:c0:00:48:39:93:ec:4f:47:82:ca:7d:
0f:6a:f5:56:7e:0e:b4:fb:de:61:6e:c4:35:b1:b4:
2c:d3:e9:02:24:34:7a:2f:f2:79:4a:e4:34:c1:3c:
80:a4:44:75:68:b9:22:a6:42:a7:10:d3:56:12:e4:
cb:13:8f:02:e3:70:95:e4:ea:72:21:df:47:91:16:
ab:35:57:d4:87:b9:e0:c8:cc:19:df:d1:4a:93:67:
16:96:6a:90:0b:05:3a:18:d1:14:9b:2e:0c:d3:e5:
18:b9:18:01:9e:9d:d8:99:66:cb:ab:03:fe:aa:45:
20:ce:b2:d8:59:9f:9d:6e:f4:e3:ee:c3:b3:08:83:
ab:e9:5a:52:9b:22:b0:ed:d0:6c:44:6e:75:b2:b7:
f5:ba:ed:63:5c:5c:33:c0:ea:64:b2:86:7b:14:3a:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:33:3E:37:AA:03:0E:48:6A:22:80:77:22:37:33:81:F0:6D:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EskzPjeqAw5IaiKAdyI3M4HwbVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.28.0/24
Signature Algorithm: sha256WithRSAEncryption
44:25:ae:63:d1:bd:60:77:d5:89:76:2d:51:df:51:16:b0:99:
51:08:d5:59:72:1c:cc:73:81:99:70:ae:33:42:47:d1:05:f5:
55:fd:e1:35:c3:fb:52:ba:69:d2:3b:48:01:9f:e6:19:c7:1d:
74:e2:8c:89:6e:03:73:48:9d:f2:43:d0:b6:9d:d5:7b:5c:85:
95:aa:b5:86:2e:6f:93:3a:09:03:62:53:25:e2:57:74:fe:bf:
0f:49:e3:1a:a5:30:44:0c:9c:d6:0c:a0:ab:c1:ad:c8:83:c0:
96:13:7f:61:ea:d4:de:15:2d:28:f6:ac:82:d7:3d:18:cd:1f:
ed:04:d9:1e:1a:7f:5e:7c:0f:55:6d:2a:d6:3f:be:ed:47:4a:
59:0d:33:8b:fd:8c:59:ec:dd:27:68:c3:f6:2d:ad:02:bb:40:
c0:f4:db:6f:df:15:a5:47:17:63:a6:81:81:7d:01:f5:f1:db:
c6:1f:ce:f2:82:09:33:d8:4b:6e:e9:68:8d:9f:10:8c:4d:e1:
27:98:15:54:4a:86:ea:58:20:44:b6:8b:00:68:2a:40:e6:ae:
8c:c9:f4:a9:48:e4:a2:71:d2:a2:55:92:be:fa:53:7c:8c:c7:
df:97:7e:6a:e2:40:2d:8a:2e:c9:85:9d:a3:b3:d0:3a:9d:9f:
34:b9:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:28:29 2025 by rpki-client