Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0wtvOfReGBQgIf3Kbzj1iupt9o.roa
File: e0wtvOfReGBQgIf3Kbzj1iupt9o.roa (raw, json)
Hash identifier: 1Prw+M1H+LZdedL7Dc++M9ZeR0lXv8hZ2iNXrb5U1QA=
Subject key identifier: 7B:4C:2D:BC:E7:D1:78:60:50:80:87:F7:29:BC:E3:D6:2B:A9:B7:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019715669BAB08CCE0D9087C99EBAD343DBA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0wtvOfReGBQgIf3Kbzj1iupt9o.roa
Signing time: Wed 28 May 2025 05:38:55 +0000
ROA not before: Wed 28 May 2025 05:38:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:66:9b:ab:08:cc:e0:d9:08:7c:99:eb:ad:34:3d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 28 05:38:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b4c2dbce7d17860508087f729bce3d62ba9b7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:61:62:83:93:bd:aa:df:b2:67:76:59:c3:
83:15:47:79:74:2b:75:f4:0b:b0:06:f8:0a:54:43:
00:91:bc:84:68:01:8d:b4:a3:4d:1d:e5:35:d2:50:
36:ca:bb:f3:68:f6:2a:65:29:0c:5b:a2:2f:51:86:
ce:37:24:a9:c9:e2:de:e5:9c:8c:fb:38:c1:a3:9e:
9f:cb:ec:8e:e4:ec:a2:e3:ca:e8:36:c4:f9:33:55:
7e:1c:90:86:8d:9d:2e:0c:f1:f8:60:14:0c:98:b1:
67:53:79:76:7a:f8:13:31:d7:d2:38:dd:a7:8e:64:
6d:6b:89:af:24:11:94:25:e8:f6:01:75:d4:5f:91:
b9:f0:3d:8a:11:13:4b:7a:f6:03:34:2d:a5:a1:ee:
e0:3e:4b:38:f3:63:5f:6f:40:03:8d:5c:e2:58:ca:
c7:36:4c:d3:e1:9d:21:28:99:b4:9c:db:b1:bf:79:
b4:2c:ec:5a:b3:d4:58:5d:fb:b7:34:85:fa:eb:10:
36:f3:b3:44:5d:1f:c4:a4:a7:c3:4d:03:2c:f5:7b:
7c:c9:f8:4e:33:d5:89:50:32:60:03:77:98:dd:c1:
61:64:b5:03:7d:3b:f2:1a:10:ae:38:d7:b4:b6:04:
47:4c:6e:4d:ca:18:7f:bb:2f:c2:0b:4d:32:8e:05:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:2D:BC:E7:D1:78:60:50:80:87:F7:29:BC:E3:D6:2B:A9:B7:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e0wtvOfReGBQgIf3Kbzj1iupt9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.199.0/24
31.59.68.0/24
31.59.71.0/24
Signature Algorithm: sha256WithRSAEncryption
50:16:cd:72:2f:36:30:a2:ab:ac:3a:0f:21:03:bf:07:9c:f6:
53:3f:fe:e1:86:1d:9e:76:27:66:6d:43:cf:99:b0:4b:9f:1d:
c3:af:37:e6:c5:61:f8:e4:67:93:da:7b:8a:fa:76:18:1d:75:
62:e2:df:cf:ba:4c:43:b7:56:60:1f:2d:80:df:80:9d:e1:47:
68:2c:14:62:ed:6f:d7:a4:9e:a4:ee:a2:c7:5b:75:f2:f9:f6:
d5:94:8e:96:d2:f0:d6:4c:59:68:09:a3:d8:79:97:96:7e:37:
49:4a:65:38:99:86:b7:e9:7e:50:7b:7d:1e:f7:d9:ec:3b:85:
f1:e5:51:2d:f1:6b:1c:66:73:31:b1:9f:0f:04:ac:11:da:ec:
68:22:ba:84:fd:b6:08:dd:8f:73:a0:43:95:2b:e4:27:c7:67:
7f:1e:c5:56:bc:d6:20:06:ed:70:49:bb:5a:d7:d5:3f:2d:bf:
42:63:81:c6:24:22:16:75:e4:25:07:8e:20:02:a5:c4:68:e4:
3a:32:19:a6:19:0c:62:b7:b3:11:f0:c4:c9:05:75:ba:67:5b:
a7:d4:00:7f:87:6f:9a:eb:78:fe:f4:5f:1f:fd:a3:c3:9a:0f:
32:c6:5e:35:1b:67:45:12:3e:d3:36:87:b6:04:9f:c0:1e:86:
e8:55:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:35:07 2025 by rpki-client