Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdJLsYRpXifM01IXxyogd-i5P0k.roa
File: IdJLsYRpXifM01IXxyogd-i5P0k.roa (raw, json)
Hash identifier: YaeDPUgHr+TIqnlJ35UYOaZ0Y13rLWiq5s0LTbBv6RI=
Subject key identifier: 21:D2:4B:B1:84:69:5E:27:CC:D3:52:17:C7:2A:20:77:E8:B9:3F:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197846542C8E28AD963264FA8044A8245F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdJLsYRpXifM01IXxyogd-i5P0k.roa
Signing time: Wed 18 Jun 2025 18:55:18 +0000
ROA not before: Wed 18 Jun 2025 18:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:65:42:c8:e2:8a:d9:63:26:4f:a8:04:4a:82:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 18 18:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d24bb184695e27ccd35217c72a2077e8b93f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:7d:f5:07:99:46:e8:9e:89:5b:28:0c:c1:
d1:dc:bc:25:f4:e5:a4:11:f3:50:97:0e:c1:63:f6:
c8:9b:b1:d0:10:a0:f3:d7:23:37:e4:24:54:1b:bb:
3c:d9:04:f7:cd:8f:51:3f:cb:3d:d7:73:1a:46:8c:
15:82:6a:98:c3:94:fd:86:5d:4d:a3:ed:ea:57:ba:
d1:af:01:57:fb:7a:86:ab:80:b0:3c:0d:c8:4f:a1:
f9:0b:e8:a2:82:af:51:10:04:b7:c0:f5:6f:e7:5c:
8c:50:71:dc:22:f5:ce:39:51:cf:5f:32:2b:96:71:
1e:69:3d:8b:6b:80:d5:6f:6e:be:5b:4d:8c:9a:2f:
5d:58:8c:2a:5d:df:b7:3f:e6:25:f8:cc:b1:5c:20:
75:c5:a7:f0:0a:c6:b4:49:f4:e5:37:e5:90:f6:4d:
3d:ae:b0:20:89:ea:a5:6d:aa:b5:63:58:81:7d:3d:
82:55:8d:89:f2:56:d3:b6:f4:88:ac:d7:70:b9:17:
16:f0:f5:ff:76:d8:57:f8:05:cf:f0:38:88:90:15:
61:e9:a1:01:5f:21:31:12:00:6b:ba:ad:a0:0c:41:
a2:20:e4:fa:2c:38:8a:64:7e:24:23:58:7e:71:1b:
41:3b:65:d1:04:f4:8d:19:dd:e1:2a:2c:d5:22:1d:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:4B:B1:84:69:5E:27:CC:D3:52:17:C7:2A:20:77:E8:B9:3F:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdJLsYRpXifM01IXxyogd-i5P0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.249.0-31.58.250.255
Signature Algorithm: sha256WithRSAEncryption
4e:7b:5c:b9:26:2c:c1:47:54:db:9d:b0:ee:72:88:56:69:ae:
9f:f1:56:f2:55:95:cd:90:71:05:6b:9b:cd:13:4a:3b:ba:4c:
10:11:c0:00:66:3e:30:be:cb:e7:a0:b4:aa:7c:31:b3:83:18:
ac:a7:d1:18:c5:ae:f9:b4:4a:c6:d8:70:2d:ec:4d:de:7f:3f:
af:02:ee:a2:d6:89:78:02:5b:25:54:2b:90:41:ce:40:5c:75:
61:5a:cd:09:df:57:8a:c6:93:cf:c2:80:63:ae:f6:06:01:15:
22:84:b1:da:88:c5:6f:10:f1:5a:5a:96:db:c1:29:6d:37:0f:
47:ae:6f:0d:4b:19:2f:53:60:01:73:58:7e:bb:30:f8:1c:23:
b3:f6:29:62:77:e5:71:c0:04:9b:f4:cb:2d:da:4e:50:f0:12:
73:69:65:5e:da:da:fa:71:83:91:09:40:7c:45:84:df:ee:c9:
54:f3:7a:29:56:aa:cc:e3:27:63:d4:2d:e4:68:40:e5:ba:f4:
a9:f9:05:4b:c9:ef:41:7e:a6:d5:53:31:f5:b4:4f:96:33:23:
10:50:66:82:fa:c1:44:28:8c:73:b6:44:fd:6a:5d:c0:fc:69:
f5:60:81:dd:75:6e:48:cf:06:e5:b2:55:14:8c:c7:32:90:1b:
00:14:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:33:41 2025 by rpki-client