Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OaZVQMfW3dhGpQgu8TYTF6T4hGY.roa
File: OaZVQMfW3dhGpQgu8TYTF6T4hGY.roa (raw, json)
Hash identifier: cqQe1IaN6cUkK3bD9TVl89/3deuZwVZrEWSFYWOPciw=
Subject key identifier: 39:A6:55:40:C7:D6:DD:D8:46:A5:08:2E:F1:36:13:17:A4:F8:84:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196EF3B6B40985347BB597CF60BD860C904
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OaZVQMfW3dhGpQgu8TYTF6T4hGY.roa
Signing time: Tue 20 May 2025 19:46:10 +0000
ROA not before: Tue 20 May 2025 19:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.46.0/23 maxlen: 24
31.57.118.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.120.0/23 maxlen: 24
31.59.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:3b:6b:40:98:53:47:bb:59:7c:f6:0b:d8:60:c9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 20 19:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a65540c7d6ddd846a5082ef1361317a4f88466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:38:d7:81:ee:a8:19:e2:f4:9b:84:8c:5a:
df:8b:72:c4:7e:70:52:c5:3a:0a:ce:26:d4:c5:a5:
50:fa:51:26:bc:a6:33:5e:f2:12:e9:55:93:9d:e7:
75:02:68:16:fd:08:ec:b3:5c:58:40:21:6d:7e:67:
14:d8:51:36:af:82:d7:18:ed:6b:15:3f:1a:65:0f:
a6:46:d6:a5:2c:fd:b4:e1:b1:84:54:2b:bf:fa:71:
d7:05:72:01:63:43:f1:bd:a9:31:31:8a:d7:41:18:
63:14:35:22:5e:5c:c6:25:5c:a3:97:07:9c:bd:c2:
13:99:4b:50:33:5f:78:0d:ea:fa:46:c5:77:56:d4:
70:f8:bb:67:3d:c1:29:28:d3:18:4b:f4:dc:c8:55:
a8:de:81:50:a1:a1:39:60:f5:97:41:3f:07:b1:74:
df:5b:46:70:94:81:a5:a6:54:b0:f9:92:cf:de:15:
9a:84:22:bb:f2:9f:5b:aa:0f:f2:aa:1b:59:37:b8:
4d:0b:b2:16:83:6d:c8:48:3e:a7:96:1d:93:9e:2b:
85:53:4d:02:13:9e:ca:ee:ae:9b:16:b6:ae:49:13:
39:c7:7b:0e:56:40:0b:9c:92:18:f2:92:a9:34:5f:
0e:72:95:51:cf:b0:0e:d5:04:e3:ad:3d:85:b6:6d:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:55:40:C7:D6:DD:D8:46:A5:08:2E:F1:36:13:17:A4:F8:84:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OaZVQMfW3dhGpQgu8TYTF6T4hGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.222.0/24
31.56.227.0/24
31.57.46.0/23
31.57.118.0/24
31.59.40.0/23
31.59.120.0/23
31.59.170.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3a:b5:3d:84:0a:04:90:57:13:97:99:48:06:5b:90:d5:70:
ba:10:64:ee:e0:d2:07:64:38:cf:1e:a1:a8:8d:89:77:db:6c:
70:b7:77:7a:0d:72:f7:96:df:90:f1:29:39:44:94:81:4d:d6:
f5:e8:1b:78:51:a8:5a:6e:3c:1a:a6:a5:93:f3:d2:3b:be:45:
c2:77:2f:bc:5a:f8:3a:24:78:eb:c0:11:59:c4:e2:95:59:21:
2a:27:fe:51:b4:d9:94:25:4a:a4:f0:e5:b5:7f:ea:e0:53:80:
f5:16:f9:74:fe:53:ca:cc:3c:16:e6:f7:74:ab:e5:26:9b:fe:
8d:f6:92:a8:04:9a:23:76:fa:31:ef:fa:78:5e:e8:e9:30:f1:
e1:5e:7e:af:6c:1e:5e:d7:f1:c6:c6:75:65:c6:0d:b1:b8:82:
3e:77:2e:00:7e:9c:a8:4d:70:35:17:96:1d:4b:2b:d5:01:a7:
a3:d2:5a:5f:6f:1c:6d:78:ae:54:7e:51:44:03:a8:ae:7e:a6:
cd:eb:58:20:e1:fb:eb:70:86:84:ee:71:c4:07:79:af:3b:5f:
71:13:3e:6d:8d:d9:7e:45:ba:44:3f:86:7b:94:d6:1d:ea:3c:
62:18:e1:00:f0:92:db:5f:4d:86:25:07:5d:29:6c:64:4c:66:
72:f2:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:06:16 2025 by rpki-client