Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhYpJd_rJhoOoBKNapT30A-ZtwA.roa
File: WhYpJd_rJhoOoBKNapT30A-ZtwA.roa (raw, json)
Hash identifier: XxhJ8+LWjuEY6+e28g/kQf2vt3+JO6vl/6+hilr9UAM=
Subject key identifier: 5A:16:29:25:DF:EB:26:1A:0E:A0:12:8D:6A:94:F7:D0:0F:99:B7:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A53F6576B1048893BF1FDCC80CD2EFF8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhYpJd_rJhoOoBKNapT30A-ZtwA.roa
Signing time: Mon 17 Mar 2025 17:55:50 +0000
ROA not before: Mon 17 Mar 2025 17:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 31.57.33.0/24 maxlen: 24
31.57.77.0/24 maxlen: 24
31.57.154.0/24 maxlen: 24
31.57.156.0/24 maxlen: 24
31.58.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:3f:65:76:b1:04:88:93:bf:1f:dc:c8:0c:d2:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 17:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a162925dfeb261a0ea0128d6a94f7d00f99b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:1c:1b:85:27:99:b9:bf:13:79:4f:2c:38:
b0:3f:93:26:af:ba:18:ff:10:3e:59:f6:7c:4d:7e:
00:ed:4f:e2:5d:35:e9:2c:68:69:59:df:4c:84:f6:
5a:cf:bf:1e:cf:e9:35:cc:50:72:ce:45:04:b9:91:
e1:77:95:c6:b7:5b:d7:f5:ff:b9:2d:24:16:0c:ce:
69:79:95:12:f0:0b:d4:b3:f1:ce:56:de:62:9b:09:
b3:10:b2:50:03:c3:a3:6e:cd:0e:3d:3d:10:80:e9:
e4:81:04:04:f5:56:f6:e5:ae:62:7a:eb:af:54:54:
eb:36:fc:03:1f:10:57:f1:b0:2d:fa:cf:ad:d1:42:
ca:a0:c2:85:ac:95:5b:44:3b:f2:42:91:21:db:e6:
86:1e:75:3e:c4:71:01:b3:2d:5a:be:18:06:3e:70:
15:b6:4b:1b:01:92:c3:65:9f:15:4e:8d:b7:a8:77:
2d:ae:ed:c0:c3:1d:2e:6f:f1:70:75:ca:54:93:b6:
e9:a9:22:5e:09:69:48:2e:ab:ee:47:06:3d:e2:f0:
57:b3:0e:af:31:fa:48:7f:67:0a:09:d0:db:d1:70:
e0:bd:2f:3c:da:49:26:72:d8:5b:52:3d:7d:fc:0a:
c7:32:a0:ad:7b:6a:ca:c7:93:d2:80:84:d9:29:b8:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:29:25:DF:EB:26:1A:0E:A0:12:8D:6A:94:F7:D0:0F:99:B7:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WhYpJd_rJhoOoBKNapT30A-ZtwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.33.0/24
31.57.77.0/24
31.57.154.0/24
31.57.156.0/24
31.58.91.0/24
Signature Algorithm: sha256WithRSAEncryption
63:29:2b:7c:87:28:38:48:b2:39:2a:e7:2d:f5:9a:60:94:cc:
2c:30:da:7e:c8:28:6c:c0:27:f0:e6:3a:4a:f1:10:cc:fd:ce:
80:76:ee:52:62:4b:bc:68:4b:43:7a:19:ce:88:00:61:16:1f:
7d:da:17:40:eb:40:50:f8:e1:e2:40:0d:15:0a:fb:dc:da:da:
a2:3e:83:57:5d:e1:45:c5:87:ee:fc:e3:5a:a3:e8:f7:44:2b:
1a:6c:a5:0f:b3:9e:5c:e2:37:78:5b:ba:a3:8e:7f:8a:6c:7a:
95:7e:70:74:e7:30:ef:8e:44:27:c8:c3:d8:7f:17:75:f6:98:
18:3f:89:86:b4:b3:04:b9:fd:e9:7c:be:d2:7a:1f:3f:1c:0f:
66:f1:aa:b7:97:75:ec:aa:33:62:e1:40:f1:5e:32:c5:f9:0d:
6d:37:14:b1:41:2f:db:29:3f:e3:2c:c4:ce:7b:57:06:80:c1:
1f:c1:0a:48:0f:cc:46:3c:2e:e1:71:c5:1e:f6:15:2e:62:14:
8a:14:a5:f3:93:b4:dc:be:d4:fb:a9:cd:28:d9:94:52:e8:b9:
4e:21:90:a1:7f:25:fa:aa:f9:b0:81:a7:6c:41:f1:95:f2:ca:
69:d7:3f:46:57:18:8b:e5:39:0e:58:2c:81:9f:b5:de:e1:b2:
6b:d0:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:09 2025 by rpki-client