Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jqnitz2fB-EjL_OXE-OPsobJUmQ.roa
File: jqnitz2fB-EjL_OXE-OPsobJUmQ.roa (raw, json)
Hash identifier: YOzuLbdrPH8A+c6v27yFL/kD1zCjneIKWiOSAqM0+s0=
Subject key identifier: 8E:A9:E2:B7:3D:9F:07:E1:23:2F:F3:97:13:E3:8F:B2:86:C9:52:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C1287401509553B89EFB4386804ED688
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jqnitz2fB-EjL_OXE-OPsobJUmQ.roa
Signing time: Mon 30 Jun 2025 14:05:43 +0000
ROA not before: Mon 30 Jun 2025 14:05:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149513
IP address blocks: 31.57.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:28:74:01:50:95:53:b8:9e:fb:43:86:80:4e:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 14:05:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ea9e2b73d9f07e1232ff39713e38fb286c95264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:ec:9c:70:0a:64:61:f6:df:ef:63:45:08:
f9:27:10:49:6c:c6:10:ad:50:d1:ac:d0:a6:c7:e2:
b6:45:65:75:23:20:e0:56:3e:9f:29:cd:8f:d5:aa:
6c:88:2e:fe:3b:76:d4:a6:dd:0e:ea:ce:95:48:c3:
33:e3:92:a3:0e:9c:29:01:a0:a6:dc:26:96:b9:e5:
16:72:57:de:df:41:83:af:67:46:e1:c8:97:d0:02:
d6:c8:38:d0:f5:6d:1e:b2:34:5b:c4:2c:ad:da:91:
bb:40:ed:38:f7:fb:0a:4a:16:b6:18:57:7d:27:88:
2a:1e:57:0e:48:28:e2:bf:d5:f8:fc:46:f1:28:45:
9a:6e:ce:7e:76:8a:57:db:e0:0f:a6:e3:8d:4e:c8:
28:a9:4a:94:f7:04:05:6f:b5:7e:81:44:46:1d:ba:
e6:c7:39:9c:ea:31:fc:40:47:c2:70:12:8f:c1:1f:
fd:ef:fb:94:69:b6:45:34:00:7a:9b:38:98:1f:a4:
0b:a9:37:94:a1:08:27:68:fc:83:81:ee:80:99:97:
55:d1:6d:19:6e:27:93:97:86:00:41:14:6b:6d:f5:
6f:53:69:89:9b:c1:5e:85:7c:05:78:0f:62:94:42:
4d:58:4c:cc:7a:ee:73:60:1c:dd:9d:a2:6b:65:db:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A9:E2:B7:3D:9F:07:E1:23:2F:F3:97:13:E3:8F:B2:86:C9:52:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jqnitz2fB-EjL_OXE-OPsobJUmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:93:8c:d9:6d:a8:44:70:d7:77:5b:64:b7:02:37:48:5f:ee:
59:80:23:4b:4f:e8:44:7c:e2:59:a6:0e:59:d8:75:d2:13:2f:
41:2c:22:8a:16:51:da:c3:57:28:a2:f1:f8:29:79:06:0f:98:
a0:e9:52:fb:f8:65:d1:1f:4e:be:d9:6f:38:d0:3f:bd:89:d7:
8b:98:2d:37:87:c2:78:5b:8c:62:fc:c5:1b:4e:f6:77:29:9b:
c2:88:6c:0c:fb:0b:84:f1:cd:45:a1:1f:30:aa:21:6a:c9:c2:
3c:ff:43:00:00:bc:e6:da:35:4e:f2:03:0d:d4:dd:ec:48:34:
2e:54:e9:30:b8:16:fb:90:0e:d6:e2:8c:ad:60:69:6d:90:a7:
0e:b5:e5:70:9b:fb:0d:b4:11:66:51:27:f3:72:5b:7f:8a:95:
88:13:39:67:2e:ca:c9:f0:f1:33:50:b5:ec:9f:c0:da:30:04:
86:f4:fc:7d:b7:29:a3:99:a7:5b:4a:97:d3:2a:52:90:1f:fa:
ad:be:1c:2e:82:0c:ea:46:a1:60:2b:83:97:9a:2b:92:82:04:
d4:95:66:ad:53:8a:bd:a5:11:9e:9d:52:65:92:82:1f:e8:63:
5a:63:d8:69:a5:c2:fe:0b:1d:e5:a8:4a:e1:46:ea:32:c1:94:
57:d7:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:19:43 2025 by rpki-client