Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XOrpW8HvyYxTQMyGOFu7d_RzWgU.roa
File: XOrpW8HvyYxTQMyGOFu7d_RzWgU.roa (raw, json)
Hash identifier: qkLZ3cv10NpYAtJV2PJ3GVYiR5TS7KQ5qqUgJJFDsM4=
Subject key identifier: 5C:EA:E9:5B:C1:EF:C9:8C:53:40:CC:86:38:5B:BB:77:F4:73:5A:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197165A22DCE5807022A12B81769862EFE7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XOrpW8HvyYxTQMyGOFu7d_RzWgU.roa
Signing time: Wed 28 May 2025 10:04:55 +0000
ROA not before: Wed 28 May 2025 10:04:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211854
IP address blocks: 31.56.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:5a:22:dc:e5:80:70:22:a1:2b:81:76:98:62:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 28 10:04:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ceae95bc1efc98c5340cc86385bbb77f4735a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:09:1d:7c:06:ee:b2:b2:8d:88:ff:0a:bf:
31:57:8f:f2:43:06:f1:33:0c:b0:df:27:cf:76:e3:
9b:24:03:56:cc:1b:9b:b4:b8:18:3f:c5:96:92:f3:
5c:0a:e2:d6:03:16:8c:7b:27:2c:cf:c9:fe:b7:14:
72:ab:68:c6:5f:82:dc:40:3e:4a:49:85:e4:d7:42:
6f:82:d6:4c:af:c3:9c:4b:3b:e2:ab:03:fe:91:c3:
88:9a:54:3d:05:9b:96:71:ae:e0:a4:96:6e:97:28:
50:7a:05:ca:d0:28:55:2e:17:6a:a8:11:f8:81:34:
a7:eb:bb:5c:4e:3a:9d:92:a8:8c:38:f7:d8:75:b1:
ba:f5:56:e3:54:a3:f5:9e:00:d0:7d:08:16:8c:49:
b3:c3:ac:90:ca:8f:a0:d0:66:83:9f:01:8a:62:1d:
6f:3f:8b:dd:59:87:dc:bc:60:ed:d9:e2:e1:46:4f:
e0:0f:bd:fd:2c:b8:50:4f:a2:35:e5:6d:09:cc:b3:
4f:7e:72:42:fe:db:f2:e4:78:a8:a3:55:a0:4a:0b:
04:a2:3d:f0:a7:e5:bb:71:ae:65:a4:1c:e5:a0:65:
42:ac:75:4c:8a:9c:15:f3:c0:e8:30:57:93:f4:62:
72:b9:b9:5c:12:a0:22:63:bd:fc:39:1b:21:b7:a2:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:E9:5B:C1:EF:C9:8C:53:40:CC:86:38:5B:BB:77:F4:73:5A:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XOrpW8HvyYxTQMyGOFu7d_RzWgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:eb:ed:c5:d3:93:38:a5:55:f1:c3:7d:4b:9b:47:c9:6f:3f:
ce:cd:75:9d:6a:a4:32:65:cf:50:29:c6:f1:50:3a:1c:3f:62:
d1:97:a4:34:7a:13:c8:98:ed:69:03:30:11:5a:0a:a8:37:e4:
31:bf:42:86:55:50:47:23:73:39:76:6b:fb:a5:cd:d4:a9:b6:
b5:69:97:db:32:f9:c7:33:d8:8d:25:1c:c6:81:66:33:34:03:
d1:e1:e4:db:ef:b4:bb:8a:7c:6b:93:1e:01:40:52:43:ec:72:
bc:f2:b8:12:66:52:d1:f1:b9:12:e3:7e:8a:0c:4a:da:b1:60:
92:c5:01:59:61:90:29:ee:e4:30:c4:0c:75:6c:5e:e5:6b:1a:
4c:51:6d:8f:a2:c4:fd:54:45:4e:21:63:2e:63:6c:1f:37:78:
7d:82:d7:0c:be:d5:ae:93:15:29:11:b5:56:f5:08:89:e8:de:
db:9e:21:bf:f5:38:f2:8a:4a:92:09:0e:41:05:8b:01:93:34:
fe:2a:8c:c1:ee:81:1c:05:e6:05:af:5f:06:3b:32:3c:e3:bb:
64:6e:50:b3:3a:ee:4f:79:9d:53:19:b2:b2:d7:1a:90:74:26:
0e:cc:d6:9d:e7:39:01:05:52:d2:44:cc:fd:5f:da:13:d2:b7:
97:ad:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:26:47 2025 by rpki-client