Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-iz5Wv2B1si_GiEufrA88lyBP4.roa
File: j-iz5Wv2B1si_GiEufrA88lyBP4.roa (raw, json)
Hash identifier: pcFvz9BSfmJItSm3WxVsNRnBHZsy1wCnhvEmwYd8Umc=
Subject key identifier: 8F:E8:B3:E5:6B:F6:07:5B:22:FC:68:84:B9:FA:C0:F3:C9:72:04:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D0908A93DD7D967088E0CDDA0FE043BB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-iz5Wv2B1si_GiEufrA88lyBP4.roa
Signing time: Thu 03 Jul 2025 13:53:43 +0000
ROA not before: Thu 03 Jul 2025 13:53:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 31.56.192.0/22 maxlen: 22
31.56.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:90:8a:93:dd:7d:96:70:88:e0:cd:da:0f:e0:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 13:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe8b3e56bf6075b22fc6884b9fac0f3c97204fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:22:79:c1:0a:e7:52:b4:86:e9:d1:bb:ac:88:
19:1e:06:78:88:a0:97:f5:f4:6b:38:51:a2:e7:06:
9e:f6:f9:47:64:22:3a:4d:58:bb:d5:fb:39:e6:b4:
27:58:8f:9f:54:53:20:fa:38:b7:a0:4d:a9:9e:83:
23:4d:5d:8a:8e:5d:88:d9:2f:53:17:98:3f:18:ee:
f0:09:16:b4:1f:81:16:5d:96:45:7a:2d:1f:bc:29:
39:71:48:28:a6:f2:57:83:b3:57:61:72:c1:d9:39:
ed:d4:82:fa:7b:e2:9d:7b:61:87:06:c4:32:52:7c:
39:56:89:92:8a:5b:0e:bc:61:00:e5:c9:ed:5b:2b:
25:dc:82:7c:cc:20:2d:c8:bc:ea:39:df:f2:0c:b1:
75:99:6e:cc:54:40:60:b6:5f:d4:31:a3:ed:d5:de:
63:9f:c0:0d:18:58:78:f1:7d:6c:62:46:2e:c8:b1:
9c:8c:e0:34:9a:fc:bf:12:a0:db:f0:90:ad:e2:0e:
72:9a:ba:77:34:11:57:9b:09:59:ad:20:f2:e7:d1:
31:bb:e1:44:70:fc:c5:57:fd:3e:89:f8:2d:9e:5c:
a7:01:bb:0e:98:f9:e6:68:5a:2d:5e:b6:14:3f:31:
c7:ca:d3:c3:de:87:7a:e7:50:5f:b7:5d:d7:69:25:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:B3:E5:6B:F6:07:5B:22:FC:68:84:B9:FA:C0:F3:C9:72:04:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-iz5Wv2B1si_GiEufrA88lyBP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.192.0/22
31.56.216.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a8:f7:b1:53:67:75:59:ed:8e:34:62:0e:be:d4:f1:67:81:
ae:33:8a:3c:ab:21:d5:ac:e7:04:ae:0c:7d:09:34:6c:0a:b6:
33:4b:49:ee:b9:be:c2:10:a0:aa:d4:dd:18:31:39:ab:9b:38:
4b:62:08:51:43:fe:53:82:e7:e0:f9:b7:7c:bb:65:1b:5f:5b:
a8:01:13:d6:3d:85:28:e2:8a:55:19:05:75:93:c2:df:aa:24:
f4:d6:43:f8:79:f3:43:2e:8b:a8:d6:0d:6d:ad:19:77:19:51:
d4:b8:f1:cc:1a:4d:73:da:48:e4:33:96:35:a1:b5:54:a7:9e:
bd:06:36:b3:4c:f6:92:62:a4:32:50:fe:c8:a8:b7:48:b3:b7:
79:ad:3d:d1:e1:8d:78:16:ad:5e:d2:d9:ab:62:24:48:28:60:
6a:11:6b:3c:18:46:f2:c6:e2:87:e8:17:e7:3f:4d:12:13:90:
4f:06:30:c4:4c:59:12:44:56:4d:1f:fe:64:78:72:ea:22:68:
ef:0a:35:4e:25:8b:fa:88:51:4b:90:d4:83:49:01:78:0b:fe:
87:dd:bf:a4:8f:0d:1b:5e:7d:52:eb:35:97:fd:ba:71:ae:16:
71:2b:6e:5b:bd:63:45:19:bd:63:9d:7e:4b:aa:f0:8a:dd:3e:
18:b9:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:22:02 2025 by rpki-client