Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcRHFhx_tbAv7YowJDXUahS6YfI.roa
File: FcRHFhx_tbAv7YowJDXUahS6YfI.roa (raw, json)
Hash identifier: l0AjBSgj5f+BavvHzg9W+rbiTlQs9vrKwX74OyyFe5o=
Subject key identifier: 15:C4:47:16:1C:7F:B5:B0:2F:ED:8A:30:24:35:D4:6A:14:BA:61:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BB522AEA16628A7A66620C491F9CA6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcRHFhx_tbAv7YowJDXUahS6YfI.roa
Signing time: Tue 03 Jun 2025 12:19:18 +0000
ROA not before: Tue 03 Jun 2025 12:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 31.56.47.0/24 maxlen: 24
31.57.229.0/24 maxlen: 24
31.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:bb:52:2a:ea:16:62:8a:7a:66:62:0c:49:1f:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c447161c7fb5b02fed8a302435d46a14ba61f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:f5:a7:ff:0e:06:10:21:83:35:8e:08:d7:
10:ca:20:f1:2a:90:36:7e:1e:bc:03:a4:98:9b:5c:
45:2b:06:7e:8a:df:da:bb:f2:5a:c1:f7:3d:b9:12:
31:b1:af:39:98:92:cf:24:10:c1:8c:31:dc:4a:10:
f6:95:e1:69:79:78:a7:07:2a:ab:dd:d7:f2:72:19:
c5:21:69:ff:54:99:b0:be:25:58:b9:b7:36:78:5e:
8b:d8:f9:bc:29:f1:30:07:66:e1:d0:5f:d8:14:15:
63:c5:55:f3:60:a6:db:42:09:ef:00:21:81:d5:8d:
02:92:dd:16:06:64:84:b7:61:f4:a8:49:fa:5b:18:
1f:b2:bc:2f:48:74:78:63:12:cb:49:be:ad:f4:d0:
5c:01:4b:aa:3b:b0:49:42:d5:27:9b:ea:95:50:26:
37:f8:b3:8b:aa:7e:d0:a7:6b:39:95:dc:16:85:a6:
6f:72:38:33:43:85:f2:16:ae:b8:5d:be:c7:6b:39:
56:f3:f9:dc:02:e2:28:7c:08:e4:f2:c7:a9:02:ae:
11:a6:33:ad:cd:c4:ca:a1:a2:81:9a:8e:b4:14:44:
30:bf:47:44:83:89:97:e0:5c:6b:3c:b0:dc:8e:4e:
7d:36:dd:cd:ee:54:1c:1b:67:a3:a5:24:60:e2:93:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:47:16:1C:7F:B5:B0:2F:ED:8A:30:24:35:D4:6A:14:BA:61:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcRHFhx_tbAv7YowJDXUahS6YfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
31.57.229.0/24
31.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:38:f2:17:9e:58:cc:eb:6b:f4:f3:cf:5a:0f:34:96:18:9b:
b8:51:4c:e3:05:3e:0a:f4:7a:f1:7f:58:54:7e:4b:a7:ea:98:
12:78:6d:ab:5b:0d:14:b5:ee:25:42:aa:9e:99:78:9b:25:b9:
9f:da:86:60:90:bd:02:3c:8d:1d:ec:d6:b6:09:f3:27:4e:03:
cb:35:01:8a:5f:7f:4c:f5:75:4e:81:5f:c7:51:3f:0d:2c:83:
8d:89:4b:c3:bd:21:36:90:39:04:7b:23:a2:38:83:c6:6d:20:
37:19:92:5e:81:a9:5f:ae:ad:13:9b:52:6d:ee:0b:f1:f8:b5:
b9:08:37:a5:14:5d:39:57:4f:49:1c:b3:a4:21:6b:2a:8d:91:
bb:49:0c:4c:b6:bc:fd:77:4a:0a:2a:cb:56:54:48:6c:94:d5:
d5:ff:90:c8:32:11:46:98:f5:97:04:d5:bf:dd:d3:6d:6d:4f:
03:a1:74:0a:7b:ab:b2:dc:9b:c9:4a:71:c7:6f:8b:44:6b:24:
bf:a5:6a:45:15:af:ba:2d:e6:60:be:70:9b:c9:47:9f:4e:87:
c0:32:30:de:b9:15:34:97:2e:28:2d:43:2e:7b:1c:e5:ee:fe:
d4:72:23:08:a5:2a:d4:08:f7:86:7c:f8:95:a4:f8:21:b9:35:
0c:c5:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:40:45 2025 by rpki-client