Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XoV-2PtWdrguWrUAjibhlxEiZF8.roa
File: XoV-2PtWdrguWrUAjibhlxEiZF8.roa (raw, json)
Hash identifier: uU0n2zv1U78QatxAZYzQx/yR6VmQ6T0wK77piigWwFc=
Subject key identifier: 5E:85:7E:D8:FB:56:76:B8:2E:5A:B5:00:8E:26:E1:97:11:22:64:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197ACB3A2BE3C2EB7B8FACE9A694853A465
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XoV-2PtWdrguWrUAjibhlxEiZF8.roa
Signing time: Thu 26 Jun 2025 14:45:42 +0000
ROA not before: Thu 26 Jun 2025 14:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214828
IP address blocks: 31.57.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:b3:a2:be:3c:2e:b7:b8:fa:ce:9a:69:48:53:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 14:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e857ed8fb5676b82e5ab5008e26e1971122645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:ba:c6:58:21:28:60:67:6e:12:cf:52:57:
44:fb:6b:a8:2d:da:4e:14:85:15:57:f1:f1:9a:bb:
54:8a:e1:51:6e:14:33:69:da:b3:c7:37:ae:3b:32:
4b:cf:3c:8a:fa:03:03:05:1b:a5:28:c8:4f:66:42:
f4:25:50:91:3a:c8:f2:41:9d:8b:66:78:cf:40:7f:
40:f3:38:c3:61:4e:3f:97:b0:c2:8b:73:3b:26:7b:
0f:06:1f:cc:8d:1e:7d:c7:9c:07:b6:f4:6a:e4:0a:
3f:20:2c:00:ec:2f:0e:35:30:c3:c2:10:f7:70:2c:
f1:b3:fc:f3:4b:44:4f:60:fc:53:50:a5:08:9f:bb:
21:15:6b:72:00:d2:39:cc:07:2d:a0:64:e7:57:36:
12:ea:57:9f:02:6a:04:23:32:e2:22:b9:b9:9f:03:
75:20:7e:83:87:90:d2:2c:c0:47:ee:15:63:4d:df:
7d:76:13:c8:aa:fe:47:69:70:e8:62:78:64:84:33:
ee:da:3b:2b:c6:dd:fe:75:59:26:88:09:b4:cb:8e:
c4:83:9c:97:2a:ba:20:75:3c:df:b4:f4:04:ab:d6:
5c:33:ef:39:30:9b:e3:87:4c:01:be:0c:8b:da:39:
09:21:4d:e4:d7:00:c7:1b:37:f7:17:3b:cd:ea:0e:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:7E:D8:FB:56:76:B8:2E:5A:B5:00:8E:26:E1:97:11:22:64:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XoV-2PtWdrguWrUAjibhlxEiZF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.10.0/24
Signature Algorithm: sha256WithRSAEncryption
55:df:ac:2b:6b:01:28:ab:bf:7e:f0:2a:6a:7a:57:5f:b9:4f:
23:3f:a5:2c:bb:7e:e1:f5:e7:1a:26:bf:00:a2:e5:66:06:aa:
0f:5e:b4:04:a6:f1:22:98:9f:78:81:d7:44:74:93:f5:e4:c3:
1d:14:67:b7:60:d4:1c:42:93:c0:d3:74:1f:99:ec:6c:ea:79:
08:a4:0a:48:ba:d8:bc:b3:77:4a:2b:9b:02:1d:c8:f3:40:81:
55:b3:04:f2:c2:8a:af:f9:e4:8e:98:81:63:d0:20:77:38:7c:
6a:4b:c6:b2:6d:50:0a:46:c9:85:74:60:64:4b:59:30:95:dc:
93:e3:c8:12:34:b3:68:1c:2c:9e:22:5a:5f:8a:13:3c:ea:5b:
24:67:4a:e7:ef:a9:25:e0:b8:72:53:77:d0:66:d6:dc:2b:b2:
c5:02:60:c3:ea:37:fc:45:30:62:7e:a9:54:51:a9:89:80:35:
f6:a8:67:e5:44:05:9f:e1:a8:88:cd:3d:11:1e:60:f2:86:b7:
31:37:c5:36:57:bb:62:89:e6:d1:91:a2:16:74:63:ee:e6:ef:
f0:16:68:5a:30:9e:a9:aa:4d:69:2f:b0:9d:aa:02:4d:0c:3a:
9b:22:76:18:e7:18:52:ca:72:b7:e7:80:16:c2:57:8d:61:f5:
a6:76:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:06:46 2025 by rpki-client