Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RfFovcbLG4ZBr91p-xQ5xl0_Rjs.roa
File: RfFovcbLG4ZBr91p-xQ5xl0_Rjs.roa (raw, json)
Hash identifier: w/Zk9rQlG2vwvhn6HXWUyLBDKA11bq7dqIrxGdltZ44=
Subject key identifier: 45:F1:68:BD:C6:CB:1B:86:41:AF:DD:69:FB:14:39:C6:5D:3F:46:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959F9F45040C62EBE65C888633FFBDBE61
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RfFovcbLG4ZBr91p-xQ5xl0_Rjs.roa
Signing time: Sun 16 Mar 2025 15:42:50 +0000
ROA not before: Sun 16 Mar 2025 15:42:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213200
IP address blocks: 31.57.96.0/22 maxlen: 24
31.57.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:9f:45:04:0c:62:eb:e6:5c:88:86:33:ff:bd:be:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 15:42:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f168bdc6cb1b8641afdd69fb1439c65d3f463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:49:5c:c8:57:d4:ae:b3:2b:2c:7e:40:b8:c6:
18:e2:97:3c:a8:8d:64:86:ba:a6:53:93:a9:be:7b:
78:0a:11:3e:e5:57:c1:9b:58:2e:75:54:8f:40:d1:
d2:9a:5d:bc:45:01:5a:42:88:b8:79:f0:d0:39:a4:
86:94:05:a6:8a:d9:b2:e8:70:e7:6d:7f:1a:a3:46:
90:b8:b0:10:84:74:53:74:ba:a0:db:9a:99:4d:83:
08:5f:01:d9:2f:c3:a7:22:c9:32:bb:55:ae:ce:c1:
59:b8:01:fd:54:02:13:b1:0d:07:7b:01:01:68:a1:
da:2f:d3:b3:6a:12:d3:11:f9:f8:18:2e:fe:f9:51:
00:d0:2a:a9:e4:d0:fe:64:70:40:3f:9d:dd:df:de:
7f:f3:ad:9c:64:e4:24:78:41:8e:67:9d:a4:5b:e9:
6f:54:9f:06:6e:46:76:24:5c:7e:7d:4c:c1:91:d8:
9b:db:4c:15:0e:24:c7:9e:a7:91:fc:b6:9e:59:34:
2b:96:62:59:66:1f:ac:6e:f4:b2:0e:bb:6f:27:44:
a5:56:94:29:76:54:4e:70:22:a4:8c:3b:0f:fc:c3:
cc:51:8f:2e:55:86:36:e1:91:e5:4b:71:78:d6:94:
50:69:df:63:b1:d0:a5:38:7d:09:64:9b:f0:c1:af:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:68:BD:C6:CB:1B:86:41:AF:DD:69:FB:14:39:C6:5D:3F:46:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RfFovcbLG4ZBr91p-xQ5xl0_Rjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.96.0/22
Signature Algorithm: sha256WithRSAEncryption
68:87:cd:44:f9:c6:64:cb:b1:e6:7c:2f:32:1d:c1:5e:ba:82:
ac:e8:cb:5d:1b:2b:6f:a7:5a:11:c4:8c:3c:8c:1b:5a:f3:5d:
1c:a8:c9:3d:61:32:ce:0d:9e:8e:31:3c:e9:66:2a:14:48:4e:
15:05:6f:33:7a:ea:1e:78:55:1c:72:42:b2:5b:69:d9:da:83:
2b:01:a4:83:8c:f6:62:b9:55:47:c3:a9:40:bc:47:a7:30:b4:
50:c9:6a:45:82:dd:08:97:f8:cf:b1:50:87:c8:cf:a9:a6:5a:
85:4b:d3:bd:b3:26:41:c7:93:ab:55:39:5b:e0:6a:98:65:3b:
e2:1e:6c:c8:21:6c:ad:5e:c1:6e:c4:1a:e1:11:07:ed:4e:e2:
cc:b4:2c:5d:c2:2b:91:e0:80:8c:fd:8b:e9:62:14:76:5e:0c:
b8:24:c3:65:87:2a:93:c9:70:09:4b:02:89:c5:40:4a:09:21:
42:d2:ba:a5:03:ce:26:cc:c2:4d:e9:83:dd:6d:e2:e6:60:b3:
5e:0b:54:52:28:4b:1d:7f:f2:50:4f:bd:64:97:4c:87:0e:bc:
dd:99:db:0e:e8:a2:b5:71:51:96:6e:65:97:9e:09:ca:46:ae:
44:cb:8f:a8:4c:33:d5:87:ba:8f:f9:3b:8d:60:bd:f0:88:5d:
d4:d9:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:36 2025 by rpki-client