Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vIpcnaduR0NrJlXcqrV5-i0j6GQ.roa
File: vIpcnaduR0NrJlXcqrV5-i0j6GQ.roa (raw, json)
Hash identifier: pVgmSU85YNJJaUQeLZkSEv4Uudr8q7NiBECBP2sDOmg=
Subject key identifier: BC:8A:5C:9D:A7:6E:47:43:6B:26:55:DC:AA:B5:79:FA:2D:23:E8:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197C4CA23DD2542AEDA743858CE48DFE72A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vIpcnaduR0NrJlXcqrV5-i0j6GQ.roa
Signing time: Tue 01 Jul 2025 07:01:11 +0000
ROA not before: Tue 01 Jul 2025 07:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 31.59.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:23:dd:25:42:ae:da:74:38:58:ce:48:df:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 07:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8a5c9da76e47436b2655dcaab579fa2d23e864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:94:b9:c0:23:94:cd:39:33:de:57:f7:fc:
e6:a0:96:f9:ac:b2:41:09:fa:fb:fd:22:0e:31:9f:
54:06:f8:ad:83:fe:6e:4e:5a:c7:58:52:4e:7a:b3:
0f:4b:08:34:fb:d0:6b:56:86:00:f4:5c:62:ee:98:
61:03:5e:76:75:b5:73:7b:9c:8e:57:f3:e9:63:b0:
d2:e3:db:86:c5:d4:9b:08:eb:85:e0:13:f8:ce:f1:
46:89:3a:8f:5c:48:a6:07:88:4c:9b:1c:2c:07:cd:
13:ac:3e:1f:08:2c:51:ff:8b:5b:f9:99:11:ee:4a:
65:6e:3c:d4:4c:7a:05:57:9f:e4:20:b9:8d:7a:c0:
db:5d:0e:3e:6f:80:2b:3e:18:d1:d3:59:e0:d3:7b:
a4:be:29:32:1e:e3:7b:8b:b1:99:82:a1:68:52:d1:
3d:b8:21:cc:87:f9:20:c3:f6:b8:50:65:4a:e3:b0:
4b:d7:d7:1e:e2:32:54:50:f8:c7:26:cb:7b:67:33:
2d:e7:53:b4:26:90:fd:64:98:a5:f8:43:fe:2b:5f:
55:4b:95:5c:94:2c:1b:e4:e8:f4:7d:aa:ee:42:0d:
22:57:2e:91:82:6f:24:7a:aa:45:f0:96:88:dc:df:
79:86:ea:06:67:c8:c5:25:2c:75:56:81:08:95:67:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:5C:9D:A7:6E:47:43:6B:26:55:DC:AA:B5:79:FA:2D:23:E8:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vIpcnaduR0NrJlXcqrV5-i0j6GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.131.0/24
Signature Algorithm: sha256WithRSAEncryption
27:67:a4:0e:95:80:91:d6:d8:74:45:46:94:0b:14:f9:dc:af:
be:2a:65:85:42:15:76:05:75:66:86:c7:03:bd:38:a8:31:3b:
c5:7d:61:5b:56:d3:a6:18:02:11:97:ee:e9:e9:1f:e9:93:f7:
b3:db:a8:d3:38:12:6a:a4:e4:88:c7:eb:ff:bd:46:fe:f7:9c:
69:01:67:80:08:a2:c9:7f:10:32:b7:a7:62:54:aa:df:75:ab:
4e:b7:37:66:d7:cb:fd:8c:6e:2e:41:8a:11:c1:12:9e:f3:21:
8e:22:f6:66:45:09:de:0d:38:c1:7c:df:2a:f5:52:c6:a9:39:
3c:04:a7:56:d2:c1:0b:4f:91:64:e2:7a:9d:6f:32:b5:5e:1a:
b9:1b:34:a0:84:5f:36:04:c6:2f:cf:0e:98:4d:3f:05:ef:1c:
8f:65:40:83:3d:b4:bd:14:e5:b1:00:6f:53:7a:8d:55:df:28:
ec:3d:7f:d0:06:97:55:57:85:71:b9:eb:9a:fa:9f:9c:74:53:
7c:c2:d2:f9:ed:35:82:b4:7a:46:96:79:f5:d1:2f:c4:8a:9a:
ec:d8:8a:a9:fc:4f:8a:d9:f6:1b:1f:79:34:93:4a:ed:db:d0:
36:d4:f2:ba:76:d8:15:68:f2:79:28:fa:98:c1:69:fc:8a:39:
0c:99:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:44:54 2025 by rpki-client