Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhOkxkU-pMF1cDtN6DrKiLItBV0.roa
File: UhOkxkU-pMF1cDtN6DrKiLItBV0.roa (raw, json)
Hash identifier: F4ucwNE+woYEKephZ5fatidQu4tQNMgLNHIlGVcSods=
Subject key identifier: 52:13:A4:C6:45:3E:A4:C1:75:70:3B:4D:E8:3A:CA:88:B2:2D:05:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197271C4C61420A9C4C045DD78915DD426E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhOkxkU-pMF1cDtN6DrKiLItBV0.roa
Signing time: Sat 31 May 2025 16:10:55 +0000
ROA not before: Sat 31 May 2025 16:10:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.58.227.0/24 maxlen: 24
31.58.229.0/24 maxlen: 24
31.59.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:1c:4c:61:42:0a:9c:4c:04:5d:d7:89:15:dd:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 31 16:10:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5213a4c6453ea4c175703b4de83aca88b22d055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:1b:de:ca:ce:33:19:8c:84:78:1c:bb:86:
76:c3:ec:eb:87:77:21:72:bb:99:c7:d9:5a:53:0f:
03:26:ef:c5:d5:f7:88:3c:e6:d6:44:14:37:b2:72:
00:d8:c5:93:e2:24:db:3b:98:64:dd:5c:3e:4b:a1:
0a:be:36:03:60:65:89:dd:ab:df:1c:65:ad:d5:10:
03:7d:41:43:10:0e:88:bf:0d:25:96:f4:af:06:a5:
2c:b2:89:5e:3a:fe:74:6c:81:63:31:fe:c0:03:52:
3e:a8:19:ae:22:08:a2:72:87:36:9f:78:6d:e2:0f:
28:03:1e:4a:b4:57:c5:89:19:34:29:26:1f:3b:c4:
27:ec:55:eb:13:a1:e3:1a:53:b1:08:a7:28:04:a0:
d9:39:5a:3e:2a:f5:66:49:3b:c5:95:89:80:76:9d:
44:34:ac:4b:c7:6e:49:e3:59:d3:a5:90:5a:c9:79:
76:48:13:9f:2d:b9:ea:a6:00:10:34:39:69:00:67:
4d:83:3d:41:48:3d:19:8d:ef:9d:9a:d3:72:fa:36:
95:2a:50:93:64:e6:37:77:9d:d8:be:89:9a:75:46:
27:4b:af:4d:01:9b:3d:d7:9a:57:7d:ef:d5:2f:9b:
2b:89:37:7a:ff:e3:82:b2:fd:6a:19:b8:66:9a:10:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:A4:C6:45:3E:A4:C1:75:70:3B:4D:E8:3A:CA:88:B2:2D:05:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhOkxkU-pMF1cDtN6DrKiLItBV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.227.0/24
31.58.229.0/24
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:07:13:be:c8:c6:2e:28:35:74:e1:51:4b:4a:af:a9:06:
2b:3b:26:f3:0a:4d:3e:26:d4:3d:27:a0:7d:6f:28:78:12:ab:
90:4f:a3:34:8d:ce:76:b1:8f:10:41:20:1e:16:5c:6f:7c:54:
1d:63:17:c0:ac:81:6b:05:be:f3:0c:65:a4:c0:3c:1d:b2:70:
d4:e5:3f:28:54:66:2a:34:c4:b4:9d:57:4b:ba:a1:35:01:0c:
11:85:ee:db:8c:c6:ed:e4:b0:a4:f5:07:52:54:9f:33:f6:c9:
18:6a:e5:e4:f4:5d:e1:15:41:61:8e:e3:f6:f6:f9:91:5d:d8:
a4:06:a0:1e:48:26:82:a1:10:05:6d:e6:e8:a1:7f:15:78:da:
d5:84:07:8f:fe:36:c6:bd:0b:ca:68:29:bf:19:51:f0:87:13:
33:9d:70:dd:24:e3:8c:8f:79:06:b0:b8:d6:8c:1b:7d:2d:8d:
1a:14:cd:ff:c6:8b:f5:1b:3c:0f:3a:e8:1c:70:38:75:98:6b:
f7:29:d1:ca:f4:d1:42:ba:cd:90:f7:b5:d3:cb:d2:13:4d:66:
a3:31:98:ce:b9:be:7d:15:88:75:4e:71:8e:2b:b7:a8:0d:e8:
d4:5c:78:1b:e8:6a:99:1b:f6:3f:f6:c1:bb:1f:ed:bd:ca:e4:
fe:a3:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:26:50 2025 by rpki-client