Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mYEGD5GaRZHAPX8prhml8QX49Jw.roa
File: mYEGD5GaRZHAPX8prhml8QX49Jw.roa (raw, json)
Hash identifier: 2VFfjFGNup0FoEc1id709VrepeCuShc7LpuCW+IC2Po=
Subject key identifier: 99:81:06:0F:91:9A:45:91:C0:3D:7F:29:AE:19:A5:F1:05:F8:F4:9C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BFE678C2C69D9B145EADD83A3C8CB7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mYEGD5GaRZHAPX8prhml8QX49Jw.roa
Signing time: Tue 03 Jun 2025 12:24:18 +0000
ROA not before: Tue 03 Jun 2025 12:24:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 31.59.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:bf:e6:78:c2:c6:9d:9b:14:5e:ad:d8:3a:3c:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:24:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9981060f919a4591c03d7f29ae19a5f105f8f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:85:4a:2e:50:80:55:bc:a4:80:06:15:64:
bb:ee:34:48:e4:a6:eb:0d:eb:3d:27:73:93:78:3a:
63:fc:05:11:48:61:03:c8:87:d8:58:e2:be:64:b7:
35:81:c3:7d:b6:86:57:13:6c:62:95:6b:16:98:e0:
5a:66:c1:18:3b:84:2a:50:c2:ab:ef:00:44:04:c0:
11:d4:05:f5:23:6c:1c:57:91:c9:35:e2:4f:3e:7a:
e6:89:1b:b7:8d:b3:ce:00:50:13:de:4c:a3:77:19:
b7:2a:08:cb:7d:00:1a:61:c6:28:7a:d3:58:cb:f4:
7a:3b:14:61:67:c7:4e:19:c9:46:47:e0:fa:f5:cf:
7b:cb:81:aa:fd:7b:46:57:c8:f9:22:7c:54:aa:3a:
37:ad:96:e9:15:18:73:f9:7c:2d:06:45:2d:ed:0c:
cc:de:51:26:9c:ec:52:c6:95:8c:02:da:1b:f7:03:
bd:4f:4e:31:76:2e:13:51:50:5b:d1:ab:b2:2b:79:
de:95:4a:f3:cb:09:63:eb:59:c6:4c:32:72:d3:89:
8b:0d:c5:a8:7c:25:db:c6:41:d2:f4:c7:30:59:2f:
77:9d:72:dc:0c:4b:53:9a:d3:e9:b4:bb:fc:59:0a:
06:12:0d:d5:35:da:a3:1f:1c:19:17:a8:36:c3:89:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:06:0F:91:9A:45:91:C0:3D:7F:29:AE:19:A5:F1:05:F8:F4:9C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mYEGD5GaRZHAPX8prhml8QX49Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.212.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d6:57:73:1d:d3:6c:e7:28:3a:3e:a8:79:1f:ea:f3:aa:59:
d9:cf:3c:09:3f:35:6e:56:f6:15:21:52:ec:50:d6:2a:b5:88:
27:18:bc:ce:e8:2c:a4:f3:d6:5f:bf:e4:4e:85:2c:7e:4c:6f:
3a:7b:d7:8f:8c:ac:2c:59:85:58:62:8c:87:35:dd:d6:be:8c:
e8:74:da:56:6d:17:5c:ff:4e:31:51:50:ea:f1:20:be:db:05:
06:76:91:9b:28:dc:a8:db:4e:f0:0d:90:fb:17:d4:44:e5:65:
ca:85:13:55:84:b9:15:2f:e3:57:74:83:0f:6b:47:90:3f:ac:
a1:e2:f9:df:cb:99:5a:68:44:42:77:7e:35:86:5a:6a:5d:00:
20:45:d1:a2:e8:72:6b:83:9c:aa:8e:d4:59:8b:f4:48:dc:6e:
c7:bf:6e:14:66:13:ac:a1:63:68:69:2a:c7:24:72:fc:6e:87:
3c:9a:82:c0:c8:de:87:54:46:44:91:90:0d:33:73:df:0d:4d:
94:72:c7:af:30:69:fb:de:07:14:2c:69:b7:08:fd:d2:1f:45:
f5:ee:a0:39:a4:44:42:ec:2b:e2:2c:62:30:05:e2:b1:f5:1b:
8d:83:ed:01:c6:58:6e:74:3f:93:48:9e:59:13:58:5b:99:16:
4f:b3:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:40:25 2025 by rpki-client