Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeb0OGBUnruiHwRmAgFAbi0oDp8.roa
File: oeb0OGBUnruiHwRmAgFAbi0oDp8.roa (raw, json)
Hash identifier: 82GupzoQENiAPYI4DFT7hneT0QA2wr6LEbzQRNcDl84=
Subject key identifier: A1:E6:F4:38:60:54:9E:BB:A2:1F:04:66:02:01:40:6E:2D:28:0E:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BEFBC8F7448ACA335CC014193A3145
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeb0OGBUnruiHwRmAgFAbi0oDp8.roa
Signing time: Tue 03 Jun 2025 12:23:18 +0000
ROA not before: Tue 03 Jun 2025 12:23:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212348
IP address blocks: 31.58.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:be:fb:c8:f7:44:8a:ca:33:5c:c0:14:19:3a:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:23:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e6f43860549ebba21f04660201406e2d280e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:7e:cc:03:a3:1a:a8:e8:cf:14:63:c5:ca:
2e:e5:05:16:30:03:fe:bf:82:aa:28:b6:a5:b5:c2:
09:5e:8d:f6:20:65:eb:dc:88:8a:6d:63:ef:a8:f8:
2e:12:60:bb:d0:8e:c2:60:1b:6e:f0:21:09:35:58:
47:44:75:bb:24:72:b1:de:ab:86:a7:82:1e:53:d1:
51:43:44:54:1e:5f:9d:4b:47:9a:5e:65:82:96:53:
2d:0c:50:66:ab:bc:f8:36:cb:e5:d9:45:ff:8c:07:
50:51:1d:c1:47:fb:aa:f6:2f:6e:86:6a:c7:0d:ef:
d7:d1:f9:f7:8e:9b:c5:1b:21:dd:53:cc:a5:4f:f3:
7f:d8:d2:5f:39:16:69:99:f3:22:2f:91:b3:b5:3d:
4b:be:88:da:68:15:39:d4:f7:6a:ac:c5:f6:95:ac:
21:e3:07:6b:f8:c7:96:1c:86:e8:a9:61:64:d8:a5:
b0:50:7d:f8:67:33:cf:bb:fd:ed:e2:e6:91:1d:a9:
0a:7f:bb:d0:61:a4:61:d9:44:76:e9:60:4e:e3:e8:
43:34:6e:f9:1d:28:c9:9c:52:2a:99:6f:c4:f6:3e:
81:70:94:ed:80:87:ee:10:14:de:d1:01:db:d2:38:
b6:2b:ba:75:35:0d:37:4a:1f:a5:89:76:54:00:b7:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:F4:38:60:54:9E:BB:A2:1F:04:66:02:01:40:6E:2D:28:0E:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeb0OGBUnruiHwRmAgFAbi0oDp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:65:45:73:9f:37:7e:76:d5:33:0a:c3:ce:5f:e6:67:fb:9c:
40:1b:00:39:1e:31:2c:9b:b9:97:79:ec:86:0b:d8:5d:71:e7:
9d:47:8e:fa:1c:8d:bd:52:2c:0c:5d:fe:39:66:6c:b6:58:2e:
bf:d6:3c:b3:9a:f9:52:11:4f:a2:dc:9b:52:74:26:b9:ab:ff:
83:fd:cb:66:62:6d:d7:35:f3:ed:26:f6:7b:67:ea:d6:5f:79:
e8:4d:52:4a:1e:4c:4b:38:19:b4:86:57:d2:18:35:4c:4a:49:
0b:2f:ef:e7:36:9c:31:27:32:52:24:be:a5:cd:ca:06:22:9c:
b7:85:a3:46:54:3a:9c:5a:43:06:82:0b:aa:17:70:fa:bd:89:
68:28:29:7b:7f:30:7f:01:bc:a7:01:66:0d:51:ca:0b:e7:70:
fd:30:c9:a8:45:81:37:a8:8e:4a:02:7b:77:12:77:06:18:03:
9b:28:c8:f7:c7:7a:93:11:cf:e9:15:c4:2f:ba:a6:ba:2c:a5:
3f:65:7b:8a:53:4e:db:c5:b0:aa:16:ee:56:67:84:5a:d5:6f:
63:06:3c:79:39:6f:90:c2:4c:cc:33:05:47:18:9a:e0:dd:86:
db:73:d0:f4:09:a4:ea:76:d7:1c:62:12:15:4f:1e:d5:51:9e:
b8:ca:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:23 2025 by rpki-client