Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iZopj__t1jGOZSlYxkzvRYijgb4.roa
File: iZopj__t1jGOZSlYxkzvRYijgb4.roa (raw, json)
Hash identifier: v39MZ3wOgvi8T7POSA4TK9lGU8zoF9b5q13NBhgym3c=
Subject key identifier: 89:9A:29:8F:FF:ED:D6:31:8E:65:29:58:C6:4C:EF:45:88:A3:81:BE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C4EC80841456BAABA3A0E5B18338EBEB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iZopj__t1jGOZSlYxkzvRYijgb4.roa
Signing time: Tue 01 Jul 2025 07:38:43 +0000
ROA not before: Tue 01 Jul 2025 07:38:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.48.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.196.0/23 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.46.0/23 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/23 maxlen: 24
31.57.92.0/23 maxlen: 24
31.57.118.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.120.0/23 maxlen: 24
31.59.170.0/24 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.248.0/23 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ec:80:84:14:56:ba:ab:a3:a0:e5:b1:83:38:eb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 07:38:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899a298fffedd6318e652958c64cef4588a381be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:ef:74:fa:32:7e:e0:a4:c3:85:5f:b5:4a:
dc:65:7e:5f:6b:36:61:48:3e:f1:a5:05:c8:d1:64:
cc:b4:01:59:fe:9f:bb:ae:4f:8e:a6:36:13:04:78:
03:45:89:7b:7e:2c:29:9c:eb:16:67:d8:1e:f7:4d:
b3:6d:b1:07:df:27:16:35:3a:88:44:dc:f4:4b:ad:
f3:95:ef:cf:6f:fb:30:5a:c2:d6:0d:4f:cb:15:56:
58:90:60:47:ea:70:db:b0:74:33:cf:3d:54:18:7c:
a8:87:45:8e:ee:91:e3:77:80:c9:82:7b:6b:5b:6d:
05:4c:66:2a:95:13:e7:f1:5d:58:d2:72:73:6b:52:
2b:8b:ae:bd:37:25:c7:e2:d7:1d:11:51:c9:15:ec:
a7:86:85:06:0a:fc:c8:01:c1:10:5b:8f:2c:0c:d9:
00:2b:58:79:49:e4:e4:a1:e3:7c:f6:e1:97:76:ac:
40:3e:b4:05:19:26:60:ba:a8:b7:b7:9b:74:e0:2f:
be:4e:ed:73:45:09:e2:42:19:5b:f9:d4:a3:2e:b0:
9e:30:9b:46:8b:a0:d0:cd:f0:3d:97:74:9b:ff:19:
c0:a4:e1:6a:7d:2b:7b:b1:a7:af:a3:02:9a:79:50:
ed:bb:0c:9b:3c:84:9d:4a:54:74:a2:fa:51:bf:88:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:29:8F:FF:ED:D6:31:8E:65:29:58:C6:4C:EF:45:88:A3:81:BE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iZopj__t1jGOZSlYxkzvRYijgb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.48.0/24
31.56.146.0/24
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0/24
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.118.0/24
31.58.171.0/24
31.59.40.0/23
31.59.120.0/23
31.59.170.0/24
217.60.36.0/22
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:49:c2:91:d9:bf:64:20:b4:1e:e8:70:44:62:6b:45:5c:b9:
45:b8:e5:a0:78:6c:e8:99:54:fb:1b:0b:4b:2c:34:22:ba:10:
e7:41:34:18:d0:51:3d:3f:10:20:d4:75:41:08:de:83:60:a2:
7e:fc:09:9b:80:da:46:d4:07:27:02:2d:a8:c2:dc:d3:16:b9:
13:a2:7d:1a:f9:4d:33:1b:71:83:55:20:41:09:8a:59:07:4f:
9e:22:9c:2b:f1:10:00:a5:14:d8:26:2d:b3:17:e2:28:36:22:
9f:72:d1:00:e5:15:88:d2:c6:99:9e:44:d9:fb:95:22:f2:b3:
0f:d4:7d:f5:b9:d5:3b:56:94:d5:65:8f:a1:5f:6e:54:9b:0a:
6e:d4:70:74:08:c2:67:7b:e3:76:f6:bd:cc:13:da:5b:80:38:
72:b1:a0:10:cc:d7:7b:f5:8b:77:df:e0:0f:2d:69:33:9e:2d:
de:3d:86:0d:76:51:c7:21:e7:98:d6:8f:db:52:a8:fc:e3:c2:
f2:6a:25:f5:d8:1d:65:75:e8:cc:c4:8a:1b:e7:8f:71:fe:cc:
17:4d:39:60:d6:87:4e:0a:ca:81:c0:86:93:68:c4:e9:67:69:
26:6d:de:32:0a:26:85:58:84:bd:ab:92:3a:76:10:ed:b9:b4:
ff:55:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:42:13 2025 by rpki-client