Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GUb1KqYq7qyzuicts19fgTt6hU0.roa
File: GUb1KqYq7qyzuicts19fgTt6hU0.roa (raw, json)
Hash identifier: OkqDAgr6wNy8MJAhlSXpdLcOKX/yEUmd7eej14vYWv8=
Subject key identifier: 19:46:F5:2A:A6:2A:EE:AC:B3:BA:27:2D:B3:5F:5F:81:3B:7A:85:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C128739F0994F6A6EDAF66365F751220
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GUb1KqYq7qyzuicts19fgTt6hU0.roa
Signing time: Mon 30 Jun 2025 14:05:42 +0000
ROA not before: Mon 30 Jun 2025 14:05:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 31.56.47.0/24 maxlen: 24
31.57.39.0/24 maxlen: 24
31.57.229.0/24 maxlen: 24
31.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:28:73:9f:09:94:f6:a6:ed:af:66:36:5f:75:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 14:05:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1946f52aa62aeeacb3ba272db35f5f813b7a854d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:e9:05:4a:27:aa:e0:80:ae:e6:3b:16:01:
ba:4c:f9:43:64:50:e3:31:c7:c6:b6:91:6e:a9:c1:
f7:8f:6e:b9:ed:ee:cc:61:4a:67:a9:78:59:df:28:
27:1f:a1:3b:5e:dd:63:ff:b8:7f:c0:26:9d:9f:29:
b0:5e:99:2f:e7:46:7e:09:2c:0f:1f:3b:80:56:76:
cd:d1:3a:e9:ca:ae:29:5d:1b:6a:f4:04:82:3f:3e:
4c:31:9b:41:f8:e0:57:f6:bf:d0:6d:d4:04:85:65:
cf:77:dd:b4:71:39:49:44:7e:34:ba:0c:af:24:97:
91:0b:cc:97:66:ca:9f:71:22:1f:7b:ce:1a:9c:6f:
15:0b:b5:ef:71:15:dd:0c:cc:8b:08:62:33:6e:20:
05:18:bc:6d:d5:ec:16:c6:37:8c:74:12:48:10:19:
fc:8f:08:0f:c6:23:1c:93:dd:19:71:4c:dc:9b:29:
ee:86:27:a3:a0:8c:33:49:f5:d5:62:16:cd:a3:ef:
eb:cb:7e:bf:f8:ab:28:d8:41:50:22:52:78:90:59:
1a:b4:91:a3:75:b7:40:ae:09:be:e5:5a:73:74:5b:
5c:32:b6:fd:49:01:e5:43:b0:6a:e2:44:73:01:87:
50:6c:dd:e8:84:2f:f4:80:8a:2f:cd:fb:2d:6e:2f:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:F5:2A:A6:2A:EE:AC:B3:BA:27:2D:B3:5F:5F:81:3B:7A:85:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GUb1KqYq7qyzuicts19fgTt6hU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
31.57.39.0/24
31.57.229.0/24
31.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
40:33:e0:07:02:4a:df:42:c5:c6:e0:83:1e:33:05:51:b5:61:
b0:65:82:75:ad:ad:ea:85:bb:4e:b1:00:42:07:86:bd:49:08:
47:b6:d6:ac:5b:a7:96:84:78:8a:5d:29:88:64:88:da:b0:44:
84:7e:dd:87:c5:9c:0c:13:11:ec:a6:bb:2b:3b:b3:47:fa:45:
cd:20:8a:71:0f:69:a7:4f:55:15:50:93:e8:ef:0a:13:c1:8e:
e1:3c:f3:1c:be:4c:c9:04:18:48:7e:4b:2b:f5:e7:a6:d2:b0:
ec:67:84:e7:df:04:87:43:c2:02:4f:a4:a8:90:5c:1a:5d:19:
cf:f9:de:33:dd:fc:f5:4a:01:df:8e:57:51:e0:8f:20:e7:98:
16:4a:dd:e0:38:ec:26:7c:01:84:65:d8:63:86:45:f9:95:ce:
70:db:5d:97:92:a1:2c:e1:e1:e8:74:70:13:0d:81:44:fe:b3:
b9:6a:e1:5a:90:cb:dc:b2:b8:34:64:f8:de:de:2e:c5:ec:59:
61:79:bc:07:27:33:41:dd:3a:1f:14:b3:9a:0b:b8:e7:5b:6c:
e9:86:a3:c0:a5:95:3c:f2:f4:b9:b6:f3:39:49:7b:59:54:d4:
63:a1:17:89:f7:a7:da:9e:2a:c7:a2:75:8f:8a:a6:43:03:66:
83:fb:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:34:57 2025 by rpki-client