Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmAkty02HUlY37q_RN-ewvHgIZQ.roa
File: MmAkty02HUlY37q_RN-ewvHgIZQ.roa (raw, json)
Hash identifier: lEFnqvL0qSyEVST+Yl9GFTwqm8TCuNITQfQ3d+p6NGY=
Subject key identifier: 32:60:24:B7:2D:36:1D:49:58:DF:BA:BF:44:DF:9E:C2:F1:E0:21:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196F26E9043F885A208A4619CFDA2174E00
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmAkty02HUlY37q_RN-ewvHgIZQ.roa
Signing time: Wed 21 May 2025 10:40:54 +0000
ROA not before: Wed 21 May 2025 10:40:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.230.0/23 maxlen: 23
31.56.236.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:6e:90:43:f8:85:a2:08:a4:61:9c:fd:a2:17:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 10:40:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326024b72d361d4958dfbabf44df9ec2f1e02194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:13:48:d3:e2:07:04:21:0e:4a:5e:de:cc:
ce:93:ea:ab:d9:47:92:35:fc:41:a3:45:f2:59:e3:
d4:ed:b7:91:0e:36:f3:7f:de:15:aa:51:cd:d4:03:
eb:f4:4e:5b:70:43:9f:f5:35:e9:dd:34:15:34:1f:
f3:ae:91:17:11:d6:ab:c5:ec:25:01:b5:fd:50:76:
ec:9c:ca:9b:4b:06:10:54:d3:dd:16:74:3e:82:d9:
64:5a:b8:c0:19:e4:e3:92:32:cc:e1:33:ed:1c:79:
24:29:a6:29:70:86:5d:c2:64:e1:da:d5:1e:39:17:
c7:f1:2d:f8:f8:65:2d:3a:67:01:95:22:fe:58:82:
b7:25:95:21:fc:26:e8:70:dc:b7:44:51:6f:8b:65:
47:16:5a:fd:95:bb:94:9c:5c:36:8d:da:ff:df:c2:
fd:da:90:6a:16:5e:e7:70:2c:f6:72:e4:10:12:d8:
df:88:18:b0:71:6d:fd:7f:88:22:85:c4:bf:d7:eb:
34:3e:f2:dd:41:93:3e:9c:39:de:8d:90:3f:bc:e4:
94:0f:69:d6:0e:29:83:d4:be:af:90:0e:04:68:27:
51:26:ef:cf:f0:38:98:c4:cf:53:65:de:49:d6:6f:
a2:4c:11:c8:e2:1f:72:19:10:96:d7:a1:f5:67:8e:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:24:B7:2D:36:1D:49:58:DF:BA:BF:44:DF:9E:C2:F1:E0:21:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MmAkty02HUlY37q_RN-ewvHgIZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.180.0/23
31.56.190.0/23
31.56.220.0/23
31.56.224.0/23
31.56.230.0/23
31.56.236.0/23
31.57.39.0/24
31.57.120.0/23
31.57.126.0/23
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.172.0/22
Signature Algorithm: sha256WithRSAEncryption
78:25:97:42:ed:5b:d5:84:32:77:0b:1e:d8:b6:cd:a9:cd:97:
7c:3b:88:00:a2:e4:91:0e:51:01:1d:90:8c:f4:d9:d5:a4:a3:
18:69:74:12:e3:b6:81:05:4f:77:83:ff:23:9b:ff:6f:bd:b6:
e7:6e:ca:f8:06:49:62:9e:67:2e:d9:05:8f:65:38:ae:75:65:
68:61:9a:05:84:dc:31:91:db:93:d1:64:9e:6e:c0:b5:47:b6:
18:3d:5d:71:81:98:5d:0a:f7:da:bb:d3:93:13:e0:ba:7b:e4:
f1:4e:20:3f:2f:4c:f6:11:81:68:f4:db:53:67:c6:ba:f1:06:
6f:48:a8:29:1e:79:d8:4a:e2:8d:43:83:8d:ea:eb:74:de:08:
d9:8c:2d:dd:e6:4a:b1:64:68:7b:11:53:fe:0b:75:ea:6b:7c:
13:00:1e:e4:ae:cd:d2:26:d7:10:8c:05:59:74:8b:9b:65:ca:
28:0d:90:db:4d:a4:69:e1:39:ee:36:06:5e:17:c0:57:db:17:
8a:af:be:dc:bd:1b:5d:cc:5d:97:73:6f:e8:99:cf:95:52:36:
fc:94:88:42:e9:1e:ef:68:92:1f:12:0c:89:78:7d:35:80:a9:
d0:53:85:de:ab:05:1f:dd:e1:94:4d:43:7f:3b:2e:d1:f8:5f:
0e:e6:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:37 2025 by rpki-client