Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MyDVN9fsQMgTnc1AwQ28xfwhVDs.roa
File: MyDVN9fsQMgTnc1AwQ28xfwhVDs.roa (raw, json)
Hash identifier: PtX65mpbIjhRrApCe816R9ikf9kOVfS22B4uF8Ghqsg=
Subject key identifier: 33:20:D5:37:D7:EC:40:C8:13:9D:CD:40:C1:0D:BC:C5:FC:21:54:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197CFB5BB2DBA5D371872BD279E82EE741B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MyDVN9fsQMgTnc1AwQ28xfwhVDs.roa
Signing time: Thu 03 Jul 2025 09:54:42 +0000
ROA not before: Thu 03 Jul 2025 09:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138648
IP address blocks: 31.57.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:b5:bb:2d:ba:5d:37:18:72:bd:27:9e:82:ee:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 09:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3320d537d7ec40c8139dcd40c10dbcc5fc21543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:88:6d:03:4a:43:36:5f:b2:66:8d:c8:69:
30:4a:57:52:6d:5c:f7:ec:29:34:81:3e:53:61:a9:
81:b2:6b:f6:8c:00:1d:47:04:45:6d:34:74:10:39:
0f:5b:6b:4b:8d:05:8c:f6:f2:d7:63:a5:cc:a8:41:
eb:34:a6:19:c4:8f:be:3a:5d:d9:61:5a:55:a5:a9:
d7:c5:47:d9:0b:ce:ce:ee:87:97:db:25:cb:13:94:
14:44:64:98:5d:43:f7:a2:5e:99:f0:b2:1b:1e:52:
7f:76:37:3d:72:06:50:a7:04:45:68:2a:4e:88:30:
21:08:ce:76:d6:89:55:6c:a8:3c:3f:28:6b:ed:bb:
73:da:f4:80:05:1e:24:c0:65:55:fc:49:36:1e:b6:
ed:1f:0f:cf:f2:6f:60:09:38:a4:c0:52:52:30:ca:
c2:db:7a:0d:ac:2a:36:b5:9b:65:a9:31:77:c6:38:
9f:1e:8a:4c:96:93:6c:62:b9:e7:54:c4:a3:31:76:
8d:c2:83:54:4a:96:04:db:b8:27:d0:4c:14:eb:72:
82:02:33:c2:ae:d7:01:6a:6b:f8:12:c4:9c:6d:50:
6b:49:a3:ea:a7:03:42:6e:1f:74:6c:fa:63:9e:c6:
97:64:7e:8a:ac:f2:d1:82:80:65:7a:31:3d:b1:69:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:D5:37:D7:EC:40:C8:13:9D:CD:40:C1:0D:BC:C5:FC:21:54:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MyDVN9fsQMgTnc1AwQ28xfwhVDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.48.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f0:80:44:96:6c:0c:49:1f:f7:88:00:67:b3:89:20:1b:11:
e6:7c:50:9f:8b:dd:22:b5:1f:25:af:3e:cc:ea:c7:f1:2c:e2:
b2:69:56:0a:2a:cd:17:af:a0:72:a9:42:3e:76:b5:e2:fb:be:
32:95:a1:e9:d0:3f:9c:50:df:87:ae:80:99:ec:09:a7:d8:2c:
d2:07:d2:5c:8d:90:3f:d5:00:ca:9e:0f:50:d6:63:a7:f8:78:
54:06:e1:de:9d:77:6e:3b:25:e7:c2:38:e8:ff:91:97:9a:3d:
f4:ca:7b:6a:50:82:94:69:ba:8c:aa:d8:22:42:5c:95:fb:cd:
30:62:d8:08:b1:34:86:84:7e:c1:a8:11:e0:b4:f0:1c:20:4f:
bd:57:60:8c:b6:7a:03:31:03:97:17:30:5b:f9:f6:b4:55:2a:
2e:49:ec:de:0b:5a:a5:24:30:36:c5:34:d8:96:11:38:0a:6d:
de:29:e3:30:50:36:fd:bd:ef:0d:e7:3d:b2:50:23:93:de:fa:
41:a6:a5:12:c6:05:0c:26:f6:df:34:88:a0:23:d7:65:ad:82:
46:2f:4c:a4:3e:43:32:74:41:d5:e7:09:80:a5:8c:c0:b6:01:
db:2b:35:e0:7c:85:56:b9:a8:79:f7:f0:18:3d:68:0b:f0:08:
53:de:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:49:41 2025 by rpki-client