Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBZ2VSBAEiY8u63BPmnCaIwgxyM.roa
File: kBZ2VSBAEiY8u63BPmnCaIwgxyM.roa (raw, json)
Hash identifier: 3Nx+uasTQ0enBHSEm6MjgH6pCFWh7KQLag/cplwX2Yc=
Subject key identifier: 90:16:76:55:20:40:12:26:3C:BB:AD:C1:3E:69:C2:68:8C:20:C7:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C4AF2A3F4BA4F43AA4F54464EADE5530
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBZ2VSBAEiY8u63BPmnCaIwgxyM.roa
Signing time: Tue 01 Jul 2025 06:31:43 +0000
ROA not before: Tue 01 Jul 2025 06:31:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208483
IP address blocks: 31.57.135.0/24 maxlen: 24
31.58.56.0/23 maxlen: 24
31.58.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:af:2a:3f:4b:a4:f4:3a:a4:f5:44:64:ea:de:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 06:31:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90167655204012263cbbadc13e69c2688c20c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:5e:58:f8:f6:55:08:88:6b:cb:c6:a3:bc:
2e:30:81:dd:b8:3c:1a:31:6b:f2:2e:50:3b:d4:44:
f6:29:96:da:01:6c:3a:57:37:6a:31:e1:77:ac:8d:
ab:52:c4:d1:21:60:59:dc:13:4a:45:ad:83:45:44:
fb:fa:c9:92:e0:a6:80:29:e1:1f:b9:46:4f:9f:a8:
d4:24:c7:c4:37:cf:6e:c7:f5:16:c0:9f:24:16:12:
90:f6:9c:e9:92:2c:06:64:b9:2e:23:b0:67:05:f6:
04:b8:07:54:31:12:aa:ad:84:f8:2a:af:ad:34:54:
24:f7:f7:4d:e8:6e:58:4b:7a:0d:cc:5a:d4:c9:28:
39:fb:a7:b2:88:9f:df:84:45:3c:ff:31:8f:e7:f5:
2c:0a:2a:41:2b:5b:65:3d:7e:5f:10:53:5b:db:c4:
2b:9f:d5:79:ff:98:31:b5:bf:a3:8e:0a:70:c1:fd:
8f:76:31:db:2e:79:6e:20:94:1e:dc:b3:65:a4:f6:
96:04:21:26:8f:f8:18:ce:59:4d:ed:ed:9d:5a:63:
a7:e5:77:79:22:06:ae:5b:30:23:e0:1a:a1:15:45:
0c:59:c0:1b:70:dc:44:0b:ae:0d:62:c7:18:b1:31:
14:64:70:93:37:7f:6a:9c:4b:8f:09:20:78:88:fe:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:76:55:20:40:12:26:3C:BB:AD:C1:3E:69:C2:68:8C:20:C7:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBZ2VSBAEiY8u63BPmnCaIwgxyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.135.0/24
31.58.56.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:8c:45:d6:29:0b:52:b7:2b:9c:13:31:58:60:eb:c0:20:21:
26:fc:d8:fb:9f:e5:fc:90:53:16:4f:33:4f:67:f0:0f:6a:25:
6c:29:a0:66:bd:8f:69:65:ab:53:fa:ef:a4:92:33:2b:e8:7a:
c4:1d:eb:1d:19:0a:a3:fd:e9:67:b5:e4:2d:2e:06:5c:92:3b:
9c:fb:fb:f9:c7:fa:89:65:3a:24:24:1b:f3:7c:20:0d:16:60:
c9:8b:fe:9d:91:7e:36:cc:0b:00:f4:e2:d1:4b:a3:49:07:92:
5d:6a:eb:b7:be:97:de:69:8e:db:27:8f:f8:df:12:fd:ef:3b:
1c:26:f8:67:a8:64:7a:d1:68:79:a0:3c:f0:d8:ff:54:6c:f7:
ff:96:10:5b:f0:54:89:09:ce:e2:44:5d:12:81:50:e5:59:f3:
22:08:7e:15:10:62:80:e0:96:03:80:29:65:6e:ef:99:90:ca:
60:60:89:a1:13:18:30:6e:02:36:f0:4f:98:fa:fe:79:da:ae:
2b:42:40:2c:1c:40:73:df:f8:66:59:70:e2:79:60:51:bd:55:
91:86:e2:01:ab:3d:14:58:45:40:12:75:a3:a3:20:c9:f4:98:
6e:c8:e1:be:34:7c:5b:d2:8f:22:d2:6b:d7:e7:de:26:39:12:
ee:2b:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:34:58 2025 by rpki-client