Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uQilFGKJgO8ScuFrooYiSkt8Lq4.roa
File: uQilFGKJgO8ScuFrooYiSkt8Lq4.roa (raw, json)
Hash identifier: RDXvSHib+hPFbA/SAMyae4xnL1sHMiCRbxJnaOk0dtw=
Subject key identifier: B9:08:A5:14:62:89:80:EF:12:72:E1:6B:A2:86:22:4A:4B:7C:2E:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197038B5FFC8DAC82031864D75D7434F217
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uQilFGKJgO8ScuFrooYiSkt8Lq4.roa
Signing time: Sat 24 May 2025 18:25:55 +0000
ROA not before: Sat 24 May 2025 18:25:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 31.57.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:8b:5f:fc:8d:ac:82:03:18:64:d7:5d:74:34:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 24 18:25:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b908a514628980ef1272e16ba286224a4b7c2eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:81:06:ad:17:dc:10:b3:cc:16:9e:18:9f:
d7:e2:75:72:be:da:a4:20:ba:a2:1c:3e:d3:79:c9:
49:e5:57:b0:5d:8b:74:e9:0f:5f:1c:c0:0c:8c:61:
9b:9e:8b:7a:0d:f0:f7:c1:69:22:9d:a1:7e:b8:3c:
70:00:a5:cd:99:7d:43:e4:80:84:f8:c6:ab:cb:7d:
c2:12:49:bf:c9:47:79:15:86:6e:1d:e4:31:9b:08:
df:f3:51:5c:ae:25:95:88:fc:9f:6e:dd:a7:3d:50:
eb:25:c8:10:25:16:e2:22:87:de:49:2b:9b:32:94:
1b:80:19:4d:eb:2e:6d:1e:07:94:48:0b:14:ce:22:
28:f0:07:4b:9d:e7:be:20:6c:92:29:ed:13:92:75:
fd:76:d8:10:da:b6:86:11:f9:be:85:67:ef:e7:ea:
93:29:47:45:ef:e0:3b:6e:c6:c2:cd:88:13:b2:c6:
ac:8b:73:7d:18:69:22:b2:93:1d:bb:f9:d7:c9:29:
c4:fc:fe:8e:40:4e:2c:39:9f:eb:5c:fe:02:9b:0b:
5d:33:63:38:e6:b1:14:f4:fd:36:e7:97:92:26:32:
17:7c:7f:7b:50:5a:e2:ea:b9:82:77:94:db:57:ac:
b7:2d:c4:7c:e8:0c:f0:57:d1:5f:ac:95:23:eb:18:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:A5:14:62:89:80:EF:12:72:E1:6B:A2:86:22:4A:4B:7C:2E:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uQilFGKJgO8ScuFrooYiSkt8Lq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:0a:d5:6b:e5:cd:be:55:99:f5:c0:95:47:aa:9f:8c:6a:
98:9e:0a:e2:31:d0:35:7a:ef:56:7b:c4:f9:28:31:0b:4d:cf:
63:82:00:0a:29:35:a3:65:ef:2b:00:4f:b9:48:e2:6d:e6:87:
38:51:37:4c:41:a5:8c:ce:c3:d2:e7:cb:6f:0d:ab:1b:40:1d:
8d:07:e3:ca:73:60:b2:62:3e:57:58:92:1f:ad:5e:6a:aa:44:
c0:ad:0a:ee:3d:42:bb:50:39:2a:d5:b8:46:5f:38:f0:4b:b2:
74:96:3b:c4:b6:7b:7c:68:d2:59:1f:b7:9a:c3:37:90:94:60:
74:b6:45:8e:9f:11:36:bf:b1:a4:c9:10:c2:99:8a:dc:b7:d0:
16:ac:db:78:2d:7a:b3:a2:b8:01:07:0e:39:07:c5:ad:6e:97:
59:ed:7d:87:00:24:71:46:46:2c:34:da:ab:15:5d:d3:50:21:
46:54:50:c0:d5:bf:53:5a:3b:da:36:43:7e:17:9a:1e:3d:9a:
8c:59:8c:3d:74:ba:35:32:5f:7c:d8:60:e9:2c:c6:6c:31:c7:
e6:89:14:39:b0:c4:c4:24:9e:fd:03:19:9f:16:86:b9:e9:30:
3b:a7:3c:e2:48:9e:d9:c7:61:7e:c1:b3:96:ce:12:05:16:25:
67:c8:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:28:41 2025 by rpki-client