Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OibsD9-rdp3YL19kFa15hvDS29M.roa
File: OibsD9-rdp3YL19kFa15hvDS29M.roa (raw, json)
Hash identifier: lriBEh6dcVqzXdH+Fj14zoyVquNVG1c2zIeMoWYqPE4=
Subject key identifier: 3A:26:EC:0F:DF:AB:76:9D:D8:2F:5F:64:15:AD:79:86:F0:D2:DB:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196CEF3DDFF4A2AB39A5F54DF6B839C4B74
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OibsD9-rdp3YL19kFa15hvDS29M.roa
Signing time: Wed 14 May 2025 13:20:10 +0000
ROA not before: Wed 14 May 2025 13:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137552
IP address blocks: 31.57.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:f3:dd:ff:4a:2a:b3:9a:5f:54:df:6b:83:9c:4b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 14 13:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a26ec0fdfab769dd82f5f6415ad7986f0d2dbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:d0:a8:30:48:35:d2:7e:94:6d:00:71:9d:
9e:ff:b6:3b:72:ad:d3:da:77:d1:6e:bc:b8:7c:33:
c0:8e:24:4d:a8:98:3f:c0:75:41:01:d3:bd:13:c8:
72:a1:08:9f:e6:10:44:26:f6:57:36:63:b3:6c:95:
f4:8a:79:1b:00:2d:61:fb:95:c4:33:f0:4b:9c:8d:
93:08:c0:4d:c9:8d:48:6f:64:98:e8:9f:a4:6f:45:
c8:e6:97:8e:2d:f4:f1:3b:1e:04:d1:2d:8f:38:00:
67:42:cb:d8:40:56:a3:98:9b:e4:a2:e3:1a:47:e0:
e7:a1:34:05:25:4b:c4:c9:03:5a:15:33:55:b9:ae:
22:3b:c7:5a:57:88:57:d8:24:7b:5a:58:5e:52:7c:
9c:e6:21:60:b2:21:d4:14:25:85:9a:48:9f:f1:e9:
5a:db:43:0c:96:9b:25:3c:f1:e8:97:99:96:d7:41:
ac:9d:ca:69:46:62:86:f4:db:05:15:9f:39:97:d8:
e4:89:79:0a:44:e5:84:97:6b:72:21:f6:4a:48:81:
d1:27:07:45:cb:16:78:e9:73:01:b5:ad:e1:de:51:
2f:77:23:93:a1:0b:0c:0e:d1:00:25:ca:3e:3c:c3:
12:0b:f2:af:66:78:9b:22:2c:c5:7c:03:1b:21:c7:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:EC:0F:DF:AB:76:9D:D8:2F:5F:64:15:AD:79:86:F0:D2:DB:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OibsD9-rdp3YL19kFa15hvDS29M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:85:af:f9:aa:07:d0:1e:25:52:95:13:5b:0c:cf:36:61:57:
e7:91:7b:01:14:a9:f2:a6:db:f1:fc:7d:0c:84:f2:6f:83:56:
65:ca:89:e5:f2:01:b5:08:78:51:9f:f6:de:ed:3f:b4:49:88:
5b:13:f5:b7:2f:a4:76:88:16:37:1d:ec:f0:8c:ed:6e:1b:e8:
e7:06:46:df:dd:b3:ab:8b:9c:0b:dc:b8:14:57:5c:a7:dc:8e:
fd:f9:64:03:cc:58:97:32:62:bc:1c:94:b2:5a:c9:84:bd:d8:
02:3d:fe:f4:59:0f:f6:6a:f9:1a:31:30:8f:dc:a2:12:2d:0b:
84:c3:82:76:a9:68:05:b4:6c:ee:64:d0:b8:ec:e6:b2:06:03:
84:f8:39:ed:f7:39:80:01:38:af:3b:f0:90:67:3e:d2:ed:57:
b2:4f:ea:e2:56:7d:b5:8d:f0:65:9f:57:94:79:80:fe:10:3d:
a6:02:77:62:d7:ba:9b:03:e4:3e:32:ed:32:c5:ee:46:d0:51:
74:f5:4b:65:39:46:67:09:53:22:88:71:87:21:0e:98:7d:f1:
ec:5f:6e:37:87:1c:72:ac:73:b7:a1:aa:c3:4e:85:4c:ae:2e:
9f:3f:3d:f7:17:c8:d8:14:9c:c0:17:37:b1:0c:2a:87:5f:74:
9f:6f:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:19:38 2025 by rpki-client