Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WdjOuW_mDnh6vfQs-vbtZu6svpo.roa
File: WdjOuW_mDnh6vfQs-vbtZu6svpo.roa (raw, json)
Hash identifier: o/cKEEO/cCTP4Otz6e2zSsL/l2+jhLSJoCdJk+oTstM=
Subject key identifier: 59:D8:CE:B9:6F:E6:0E:78:7A:BD:F4:2C:FA:F6:ED:66:EE:AC:BE:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FF5EAED0642BAB631D59437C477DE66E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WdjOuW_mDnh6vfQs-vbtZu6svpo.roa
Signing time: Fri 04 Apr 2025 05:55:50 +0000
ROA not before: Fri 04 Apr 2025 05:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 31.59.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:5e:ae:d0:64:2b:ab:63:1d:59:43:7c:47:7d:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 4 05:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d8ceb96fe60e787abdf42cfaf6ed66eeacbe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:62:55:70:f5:e4:cf:62:6c:c9:de:0d:87:
01:1f:25:e5:53:2d:15:65:41:df:08:3d:04:93:08:
08:d2:65:6e:20:8f:f4:3f:91:f7:e7:7f:7d:b3:3c:
b0:e7:e2:aa:f1:cf:73:ac:1b:7f:88:de:d1:27:7d:
6d:d0:87:62:28:68:2b:13:d2:b9:e8:33:41:8b:dd:
29:47:da:e1:e8:37:d7:7b:2f:04:cd:3c:12:fe:d9:
d1:b4:88:cc:34:0d:24:b6:44:94:d0:fd:e8:8d:78:
c4:83:b4:8d:ca:b8:8a:3f:16:6d:7c:99:69:72:5b:
9a:3a:d8:7c:3b:6f:9f:db:ba:05:95:8d:ef:37:a2:
3e:41:7c:f5:2f:0b:6f:ea:20:a8:ce:ce:76:52:6a:
56:32:ce:92:d2:e2:07:d9:19:d9:4f:2c:88:b3:20:
60:d4:0b:0e:6f:ce:d1:64:a1:7a:6a:36:a8:16:8c:
3a:eb:79:90:9d:ad:ef:a6:07:17:77:ed:bd:d4:89:
63:fa:c5:57:a4:14:05:e0:08:2e:47:08:26:34:bd:
74:34:64:94:27:40:09:fa:39:21:8d:9f:bf:8b:e1:
fa:68:f4:c1:e8:d2:85:e2:de:42:19:c6:a1:d2:67:
f4:fd:7f:e2:a9:e0:ca:d6:bf:33:5e:c4:5a:d4:f9:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D8:CE:B9:6F:E6:0E:78:7A:BD:F4:2C:FA:F6:ED:66:EE:AC:BE:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WdjOuW_mDnh6vfQs-vbtZu6svpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e6:db:26:92:b4:31:70:4c:49:b2:07:1c:12:56:b5:af:7c:
76:7a:2f:99:a7:db:34:58:2b:be:2f:33:03:3b:1a:ef:3c:2f:
91:0a:82:9a:f1:ff:f7:ed:cd:0f:81:36:3f:6d:b7:ee:d2:22:
84:c7:ab:41:8d:e0:56:9e:0a:f7:fc:df:61:fa:2e:c1:43:54:
3b:90:c6:3b:9e:c0:06:96:ab:8c:ae:48:82:67:5b:b0:b8:db:
c1:e0:64:96:f5:06:e8:92:63:ab:d4:b9:1e:9a:c8:df:c1:58:
83:46:88:8d:e0:85:d0:27:7f:de:90:df:b9:57:44:56:0d:5b:
81:70:b3:fd:ce:30:97:e4:c5:e1:6e:29:61:4e:e0:bc:79:45:
26:21:0c:b8:52:1c:9e:58:c0:3a:90:29:e5:f2:db:01:d6:f4:
53:97:10:02:a2:f2:27:73:de:a4:f1:0a:c0:0a:28:86:17:cc:
78:f1:c7:af:2d:6a:75:fe:c7:ba:20:5b:a3:41:d3:a1:b9:43:
4d:75:36:49:0f:d8:57:78:2d:bb:c5:04:a5:46:e7:f1:4e:1d:
bf:6d:74:28:a4:37:26:ca:1d:43:08:f6:03:b7:ed:94:a1:0f:
c9:e8:c8:ba:f1:ce:36:cb:6a:b0:cc:82:25:f7:ea:3a:fa:4d:
55:9f:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:45 2025 by rpki-client