Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/amWVDMtJJJTrJUCrhStDTdSxPmU.roa
File: amWVDMtJJJTrJUCrhStDTdSxPmU.roa (raw, json)
Hash identifier: h1JkZdHTJbC8tH+wdNI5SRVDxnSfHj7kYYqNuJJo0zY=
Subject key identifier: 6A:65:95:0C:CB:49:24:94:EB:25:40:AB:85:2B:43:4D:D4:B1:3E:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01958BA5221A45B5BE01D6451EC689DDCBC4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/amWVDMtJJJTrJUCrhStDTdSxPmU.roa
Signing time: Wed 12 Mar 2025 18:36:49 +0000
ROA not before: Wed 12 Mar 2025 18:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213488
IP address blocks: 31.58.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:a5:22:1a:45:b5:be:01:d6:45:1e:c6:89:dd:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 12 18:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a65950ccb492494eb2540ab852b434dd4b13e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2a:e8:5b:72:3e:aa:6a:7f:5a:8e:bf:d2:8b:
67:fe:22:d5:4f:57:2b:f0:8d:ad:fc:53:c6:1e:9f:
99:ed:a1:05:9c:13:c2:92:05:ea:e0:4e:e9:68:eb:
be:23:88:26:f8:28:3a:13:d7:c6:b7:6d:b2:d4:27:
c9:62:2b:7f:60:84:f0:67:65:ee:1e:0d:3b:40:5d:
a6:f2:3a:0a:47:b3:33:8b:32:17:b4:d8:0e:e1:ac:
2d:a1:a5:27:29:bf:7b:d9:1e:e7:46:51:da:9c:18:
62:4a:f9:27:22:84:a8:9f:3f:c0:a3:6c:4d:ae:06:
85:20:54:f1:02:c5:16:09:65:79:1c:55:e0:ac:a8:
15:f6:8e:1e:97:fa:97:46:e0:69:19:ae:67:03:24:
d0:fa:03:2b:c0:d2:70:2d:13:fb:b3:8a:90:17:86:
05:77:ab:d9:27:9e:03:72:56:e7:01:86:b1:f8:f0:
bd:53:f2:92:13:9b:a1:8c:18:26:be:36:4d:0f:0a:
5a:20:a7:7b:29:29:78:41:23:37:ca:95:01:12:c3:
69:df:20:34:f9:ef:3b:a4:ad:9c:4e:96:ac:11:90:
28:f6:b6:1e:55:d9:7c:0d:65:d1:77:3c:af:ba:12:
ca:51:45:dc:69:8e:59:9e:30:51:37:7f:90:a8:94:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:65:95:0C:CB:49:24:94:EB:25:40:AB:85:2B:43:4D:D4:B1:3E:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/amWVDMtJJJTrJUCrhStDTdSxPmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.234.0/24
Signature Algorithm: sha256WithRSAEncryption
21:70:92:22:9e:bf:ae:ea:b4:22:ab:c5:4a:c0:1b:25:0e:5f:
a5:41:79:6c:bf:b4:b5:fa:23:52:13:09:86:cd:18:13:d5:ba:
b4:3d:cd:48:68:11:66:1d:46:7c:d1:81:12:dd:42:40:76:f1:
bf:d7:32:e7:02:8d:41:42:5d:ad:92:d6:ea:f9:a2:f5:6c:28:
fb:34:22:6c:72:c8:0c:e5:75:35:3f:ef:45:c8:cc:00:bb:fd:
09:78:3e:bb:30:ae:19:bc:24:67:bb:6c:6b:f9:19:c1:30:84:
d7:78:ab:0e:7a:0e:b6:5a:1a:e5:67:98:1e:c3:40:34:96:2e:
c1:82:5a:5a:e8:93:3a:da:b1:6a:b0:2e:71:76:50:c4:9d:9b:
01:a0:5c:2b:4b:be:bd:c5:c1:e9:52:b6:ca:e6:3c:9e:7c:de:
a2:a1:e5:ba:3d:65:d1:75:7c:44:aa:a0:2c:fb:49:0e:ce:f5:
d4:a2:43:ff:f5:ad:7e:08:c7:6c:fc:79:89:81:82:d1:6f:22:
90:bb:b5:a1:69:eb:17:8f:f3:f7:9c:a1:2e:3e:c7:1a:df:a1:
4a:d0:9b:2c:b4:62:c2:57:33:e1:fa:a7:9d:c4:56:2d:c0:3d:
d0:56:1d:53:a5:db:ac:0d:c5:50:59:23:0e:88:27:23:ce:65:
ba:7a:4b:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWLpSIaRbW+AdZFHsaJ3cvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzEyMTgzNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTY1OTUwY2NiNDkyNDk0ZWIyNTQwYWI4NTJiNDM0ZGQ0YjEzZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SroW3I+qmp/Wo6/0otn/iLVT1cr
8I2t/FPGHp+Z7aEFnBPCkgXq4E7paOu+I4gm+Cg6E9fGt22y1CfJYit/YITwZ2Xu
Hg07QF2m8joKR7MzizIXtNgO4awtoaUnKb972R7nRlHanBhiSvknIoSonz/Ao2xN
rgaFIFTxAsUWCWV5HFXgrKgV9o4el/qXRuBpGa5nAyTQ+gMrwNJwLRP7s4qQF4YF
d6vZJ54DclbnAYax+PC9U/KSE5uhjBgmvjZNDwpaIKd7KSl4QSM3ypUBEsNp3yA0
+e87pK2cTpasEZAo9rYeVdl8DWXRdzyvuhLKUUXcaY5ZnjBRN3+QqJTorQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpllQzLSSSU6yVAq4UrQ03UsT5lMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYW1XVkRNdEpKSlRySlVDcmhTdERUZFN4UG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrqMA0G
CSqGSIb3DQEBCwUAA4IBAQAhcJIinr+u6rQiq8VKwBslDl+lQXlsv7S1+iNSEwmG
zRgT1bq0Pc1IaBFmHUZ80YES3UJAdvG/1zLnAo1BQl2tktbq+aL1bCj7NCJscsgM
5XU1P+9FyMwAu/0JeD67MK4ZvCRnu2xr+RnBMITXeKsOeg62WhrlZ5gew0A0li7B
glpa6JM62rFqsC5xdlDEnZsBoFwrS769xcHpUrbK5jyefN6ioeW6PWXRdXxEqqAs
+0kOzvXUokP/9a1+CMds/HmJgYLRbyKQu7WhaesXj/P3nKEuPsca36FK0JsstGLC
VzPh+qedxFYtwD3QVh1TpdusDcVQWSMOiCcjzmW6ekv0
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client