Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNGiAu7s7EI7d748tQsNfwWefNI.roa
File: FNGiAu7s7EI7d748tQsNfwWefNI.roa (raw, json)
Hash identifier: +CXWtD8Kps4QvXNf8bxPY+ykj7B0niWMnZR8OPN1I20=
Subject key identifier: 14:D1:A2:02:EE:EC:EC:42:3B:77:BE:3C:B5:0B:0D:7F:05:9E:7C:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01972A70A68D3398DA10227E78CA98F2815B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNGiAu7s7EI7d748tQsNfwWefNI.roa
Signing time: Sun 01 Jun 2025 07:41:55 +0000
ROA not before: Sun 01 Jun 2025 07:41:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199707
IP address blocks: 31.57.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:70:a6:8d:33:98:da:10:22:7e:78:ca:98:f2:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 1 07:41:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d1a202eeecec423b77be3cb50b0d7f059e7cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:63:24:cb:b7:09:68:eb:10:8a:e4:74:2b:
7c:3c:7e:36:a4:fd:56:45:3e:0a:bb:ee:26:68:86:
85:55:df:6d:ea:77:06:4c:4b:0f:53:f3:8f:39:5b:
f8:bd:70:5d:1e:fd:1f:35:b7:f0:e1:6c:4a:ba:18:
7d:f6:dd:a8:97:e2:ce:9e:82:d8:05:b5:1e:f5:cb:
2c:89:46:6a:83:89:00:19:ba:ed:18:16:14:a1:5c:
b7:09:2f:ff:75:a1:d0:35:90:f1:f7:a6:dd:1e:6b:
25:d5:c4:1e:e7:e8:7d:46:53:6b:bb:0d:93:38:06:
0f:79:f9:72:8e:f3:b0:3b:f5:fc:fa:01:00:70:cf:
f1:b1:16:83:69:be:68:2b:a1:9d:42:86:78:fc:9d:
b4:78:40:4c:8a:8e:fc:1d:c0:cd:b2:b3:8e:9c:99:
c4:42:c5:28:a8:03:7b:d4:b6:fb:29:fe:0d:44:56:
5a:eb:f3:38:96:dd:6a:52:b3:92:30:63:22:a1:b1:
3e:36:df:2b:9e:92:83:aa:f8:3d:d5:00:05:cd:33:
5a:1d:59:af:b0:d0:e8:93:85:34:43:ae:0d:50:d0:
c7:56:47:50:ea:3b:3e:78:a4:a1:b9:5d:44:db:8d:
3b:82:0f:4c:62:67:b7:e9:31:aa:c9:27:91:ff:b6:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D1:A2:02:EE:EC:EC:42:3B:77:BE:3C:B5:0B:0D:7F:05:9E:7C:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FNGiAu7s7EI7d748tQsNfwWefNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.172.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e9:3f:1e:5c:70:83:40:9c:74:86:c7:b8:bf:c3:5c:71:b0:
16:63:a6:7e:ad:c2:38:8a:c2:e8:88:76:aa:3e:6c:24:ac:1e:
d2:35:4b:83:05:27:21:35:e8:64:b3:a3:0b:ef:c4:f1:1b:b0:
d1:fa:65:34:0b:b0:2d:96:f7:dd:b7:1c:a1:7b:41:41:90:0f:
37:81:b4:fe:4a:c5:eb:f7:e8:18:83:50:1a:17:45:cf:91:2f:
bf:19:18:4a:b8:29:83:f3:b0:f4:03:4e:06:ce:4c:db:90:f8:
9d:ca:e8:95:39:47:c6:fd:38:29:1f:e8:c4:76:d8:e3:2f:26:
0a:7e:7f:0c:c6:1e:ac:c5:43:48:26:0d:f6:dc:b0:ee:ec:c5:
1a:7f:73:47:79:eb:ae:04:05:ed:b1:a0:c3:49:44:a6:c5:3b:
09:98:f0:0a:95:88:c3:64:46:ec:33:ab:18:01:30:f5:ce:f0:
cf:57:fd:0f:e9:b7:2a:48:b6:bf:e3:69:52:a1:3e:be:59:bd:
e4:7a:eb:62:ac:44:94:9d:b6:2e:f1:0f:b5:49:9b:b1:39:66:
d8:13:32:52:fd:70:9c:6b:45:2f:40:54:4c:50:51:b8:81:23:
1d:5f:69:47:99:7e:be:15:c2:43:52:ab:bb:12:b2:37:80:30:
e6:cb:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:24:53 2025 by rpki-client