Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H_MvnxMHNexcxLurTpeJm7XkUmI.roa
File: H_MvnxMHNexcxLurTpeJm7XkUmI.roa (raw, json)
Hash identifier: 6egNhstuOuhRvn7SFplpG+0U9mB4wkk8g/BlmLJIGyg=
Subject key identifier: 1F:F3:2F:9F:13:07:35:EC:5C:C4:BB:AB:4E:97:89:9B:B5:E4:52:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197440EECD6830299FF00E6C47F05203F6B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H_MvnxMHNexcxLurTpeJm7XkUmI.roa
Signing time: Fri 06 Jun 2025 07:05:18 +0000
ROA not before: Fri 06 Jun 2025 07:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 31.56.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0e:ec:d6:83:02:99:ff:00:e6:c4:7f:05:20:3f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 07:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ff32f9f130735ec5cc4bbab4e97899bb5e45262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:f1:89:0c:4a:9e:e2:eb:36:6f:d7:62:4d:
4b:5c:c6:a6:1b:3e:c6:ff:f3:2f:2e:6b:f6:ac:1a:
38:55:d0:ca:e9:0f:b8:92:9c:71:67:83:36:e3:5f:
47:91:0e:b6:29:4f:12:e1:be:9d:70:40:47:9f:af:
28:ea:15:00:ee:d3:e2:63:f2:a8:a7:51:bf:74:af:
16:b7:42:20:94:2e:56:a3:f0:ff:e9:51:17:9d:40:
39:34:a2:8e:27:f3:c0:67:fa:05:49:af:1f:51:34:
e6:30:e6:5c:3f:a6:ca:f8:7e:f3:f8:de:5d:5d:56:
4d:5f:62:a2:d3:6f:47:e6:c5:a1:4d:05:8b:7a:42:
bf:1c:fb:53:40:6b:1d:1e:7d:06:a9:68:70:d3:ec:
d6:22:db:3e:76:1c:9d:81:15:fb:a2:cf:50:d6:4b:
be:0e:04:29:ce:78:0e:e6:c4:b4:5f:08:0c:87:c1:
e1:30:c2:de:6e:ba:fb:dc:63:01:3e:64:4a:2f:d3:
bd:64:89:25:bd:19:69:cb:5f:ab:c3:3c:d0:53:ce:
6d:47:7b:21:c0:73:d9:d8:65:cb:27:e5:1c:63:0d:
9d:59:dd:bf:62:87:33:52:28:fe:ea:0c:0d:57:79:
90:c3:2c:38:e1:db:63:ca:a0:cc:a5:11:4c:ea:2b:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:2F:9F:13:07:35:EC:5C:C4:BB:AB:4E:97:89:9B:B5:E4:52:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H_MvnxMHNexcxLurTpeJm7XkUmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ee:a0:e1:cb:95:e9:5e:3b:36:0f:9c:a1:27:f3:04:f8:2b:
a7:b1:8e:57:4d:d2:e8:bc:b4:c1:ac:bc:2e:82:20:d7:19:35:
ca:39:71:fa:ca:e6:f6:cf:dd:a3:82:64:77:8f:bc:93:9e:64:
17:a7:8d:26:15:f5:9c:5f:7d:b6:ec:bf:79:3a:9a:bc:1d:c9:
85:60:22:fc:7e:6f:5b:49:f0:15:57:f3:06:28:ce:5d:2f:7c:
1b:e7:71:ad:80:a9:96:0b:b5:d0:0b:1d:16:12:80:99:4b:88:
a4:03:a5:e0:d0:b3:a2:40:64:cd:72:5d:b5:2c:c7:f2:09:66:
e5:b2:b0:e4:ab:4d:a7:86:14:22:69:1a:c9:a8:85:f1:c0:3a:
22:90:51:60:b2:3b:27:be:fd:af:f8:4f:70:05:8c:06:b7:92:
04:66:fe:09:ad:b0:21:a1:c4:0d:96:a5:ad:bf:91:56:53:81:
a1:db:54:c8:67:bf:9b:39:27:37:13:ff:2a:85:9d:09:75:5f:
bc:85:6c:c4:4f:b6:03:df:c8:37:62:34:da:86:a1:19:b0:3c:
c3:1a:a3:12:47:02:69:db:0f:1e:80:09:8f:3c:0e:49:20:ac:
6e:8f:0a:f6:1b:f3:4d:33:b1:4d:01:cd:84:5d:74:33:be:0d:
2a:ad:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:50:59 2025 by rpki-client