Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rf7PoUTTs-z-m_N9ciGO9ZJrxRA.roa
File: Rf7PoUTTs-z-m_N9ciGO9ZJrxRA.roa (raw, json)
Hash identifier: AnkhqA0Cjtux8Uas18CbpBywTGoWVgUC3VPMMoxS5AI=
Subject key identifier: 45:FE:CF:A1:44:D3:B3:EC:FE:9B:F3:7D:72:21:8E:F5:92:6B:C5:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195619613EF20C598411193758CF0DC54F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rf7PoUTTs-z-m_N9ciGO9ZJrxRA.roa
Signing time: Tue 04 Mar 2025 14:36:20 +0000
ROA not before: Tue 04 Mar 2025 14:36:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209336
IP address blocks: 31.58.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:96:13:ef:20:c5:98:41:11:93:75:8c:f0:dc:54:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 4 14:36:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45fecfa144d3b3ecfe9bf37d72218ef5926bc510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:5c:ae:a4:5d:49:96:84:64:e5:21:57:c6:
79:e8:73:36:38:56:28:02:ba:f8:97:fc:af:97:bd:
a1:a3:07:51:18:41:f8:e9:16:e1:48:3a:e8:a3:74:
42:a9:85:b9:24:0d:07:d9:ad:73:81:be:cf:e9:ea:
85:34:b0:5e:0b:e0:8c:c6:6e:97:63:33:b1:b5:61:
e8:9c:c4:c6:6e:07:66:a2:9d:57:36:db:e0:d1:db:
ae:5a:5d:f5:d4:e3:48:56:23:11:1c:05:77:46:f4:
e8:55:f3:23:0a:f4:95:58:b6:91:ba:4e:d6:0d:e2:
45:51:10:ae:ae:c5:91:50:26:74:7a:25:9b:40:da:
7a:6e:bf:7a:79:9b:da:3f:01:31:24:f2:99:ca:19:
c1:93:e7:87:09:89:15:b8:51:ec:fc:27:b6:78:2f:
dd:01:20:56:1c:2a:46:2d:56:ce:ba:61:72:8f:48:
ae:bd:e5:cb:15:4f:3e:e3:15:75:7b:d8:28:30:27:
85:ae:ff:2a:a5:58:b7:71:47:3f:74:cf:3c:a7:7e:
4b:cc:29:f6:c7:f0:3a:f3:d3:86:83:86:b2:c4:f4:
1c:ca:74:79:a9:b6:58:9b:77:36:aa:4e:c8:c3:78:
90:c6:54:1f:77:af:04:86:62:bc:b4:3c:14:99:5d:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:CF:A1:44:D3:B3:EC:FE:9B:F3:7D:72:21:8E:F5:92:6B:C5:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rf7PoUTTs-z-m_N9ciGO9ZJrxRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0f:ab:3e:a2:ef:f7:9d:bb:8a:b4:0d:ad:59:b6:d0:02:d9:
b3:a8:7a:5b:42:ce:ba:09:d7:91:79:1d:f5:75:61:0d:c5:77:
38:ad:53:4d:d0:28:91:61:97:a7:75:ec:85:5a:b9:91:f1:b3:
0b:57:49:38:3d:48:f8:b4:9c:18:7c:ce:33:0e:e7:da:a8:43:
d9:56:4d:78:1a:d2:7b:bb:83:e5:39:d3:6c:1d:f7:26:f2:07:
77:44:56:3d:58:a3:65:57:85:61:af:50:41:15:ab:9c:c2:64:
b4:aa:c8:11:99:dd:f8:27:c2:06:05:2c:10:7d:10:d2:87:09:
24:d9:7f:7f:70:0e:ce:6c:62:e4:8b:c8:c6:46:1f:a3:fd:45:
2b:a2:55:b9:8b:b3:0f:f2:4d:75:29:dd:47:fc:76:8a:45:70:
2b:99:91:5f:0e:0e:47:3c:13:8f:d4:a5:b4:d8:31:1f:ac:55:
a6:b6:8a:a4:18:1a:50:be:a1:83:de:08:a8:89:74:9e:3c:b0:
a8:b1:3d:a9:15:03:c2:8c:79:71:82:96:c4:59:45:c6:04:01:
d3:e5:ad:47:ed:9f:2d:99:cf:39:61:09:22:6b:86:4c:b5:fb:
72:c7:31:c5:cd:f9:0a:b9:36:05:e6:31:e7:a8:cc:ba:cd:0e:
cf:af:75:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVhlhPvIMWYQRGTdYzw3FT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzA0MTQzNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWZlY2ZhMTQ0ZDNiM2VjZmU5YmYzN2Q3MjIxOGVmNTkyNmJjNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBcrqRdSZaEZOUhV8Z56HM2OFYo
Arr4l/yvl72howdRGEH46RbhSDroo3RCqYW5JA0H2a1zgb7P6eqFNLBeC+CMxm6X
YzOxtWHonMTGbgdmop1XNtvg0duuWl311ONIViMRHAV3RvToVfMjCvSVWLaRuk7W
DeJFURCursWRUCZ0eiWbQNp6br96eZvaPwExJPKZyhnBk+eHCYkVuFHs/Ce2eC/d
ASBWHCpGLVbOumFyj0iuveXLFU8+4xV1e9goMCeFrv8qpVi3cUc/dM88p35LzCn2
x/A689OGg4ayxPQcynR5qbZYm3c2qk7Iw3iQxlQfd68EhmK8tDwUmV21AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEX+z6FE07Ps/pvzfXIhjvWSa8UQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUmY3UG9VVFRzLXotbV9OOWNpR085WkpyeFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrhMA0G
CSqGSIb3DQEBCwUAA4IBAQAPD6s+ou/3nbuKtA2tWbbQAtmzqHpbQs66CdeReR31
dWENxXc4rVNN0CiRYZendeyFWrmR8bMLV0k4PUj4tJwYfM4zDufaqEPZVk14GtJ7
u4PlOdNsHfcm8gd3RFY9WKNlV4Vhr1BBFaucwmS0qsgRmd34J8IGBSwQfRDShwkk
2X9/cA7ObGLki8jGRh+j/UUrolW5i7MP8k11Kd1H/HaKRXArmZFfDg5HPBOP1KW0
2DEfrFWmtoqkGBpQvqGD3gioiXSePLCosT2pFQPCjHlxgpbEWUXGBAHT5a1H7Z8t
mc85YQkia4ZMtftyxzHFzfkKuTYF5jHnqMy6zQ7Pr3Ue
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:27 2025 by rpki-client