Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wlsoh7Z0OsjcizxZ8qTakEIVYYw.roa
File: wlsoh7Z0OsjcizxZ8qTakEIVYYw.roa (raw, json)
Hash identifier: UuUDTmaplpDtH4xKl72N0axlQk9YkhXvNStjv7bNNTg=
Subject key identifier: C2:5B:28:87:B6:74:3A:C8:DC:8B:3C:59:F2:A4:DA:90:42:15:61:8C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01972A71919CFD60426FD4223192590DFEFE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wlsoh7Z0OsjcizxZ8qTakEIVYYw.roa
Signing time: Sun 01 Jun 2025 07:42:55 +0000
ROA not before: Sun 01 Jun 2025 07:42:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 31.56.40.0/24 maxlen: 24
31.57.201.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:71:91:9c:fd:60:42:6f:d4:22:31:92:59:0d:fe:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 1 07:42:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c25b2887b6743ac8dc8b3c59f2a4da904215618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:21:e7:d4:89:d0:cb:3b:d0:e0:5c:22:c6:
f1:57:b0:bf:70:75:df:88:20:cf:de:df:5a:ba:c6:
99:3b:bf:9e:3c:62:f2:cf:f6:72:cd:77:de:56:d0:
ae:94:ca:46:70:80:14:19:4a:26:f3:76:f1:07:a2:
c7:05:76:c4:34:d2:3a:b4:a8:60:9e:55:58:d2:5c:
82:a0:d4:56:ec:dd:77:83:78:f7:55:6f:23:35:cc:
78:5b:4e:09:52:b1:ec:e1:91:47:2d:63:1c:79:ac:
9d:ca:5b:44:4a:d2:35:a9:b4:a9:ad:38:89:e8:a9:
b4:cc:b6:51:44:f4:62:b9:43:95:39:9f:f0:6b:76:
0c:7c:6d:85:de:90:bd:51:f0:27:09:02:74:ea:39:
39:22:4e:42:26:13:d4:46:12:07:51:2d:d2:7c:56:
6b:df:31:8c:d3:4c:7e:b9:58:a5:37:87:5e:99:9b:
c4:2c:33:e5:29:31:98:83:d4:78:54:12:2b:29:2f:
1e:c3:73:c4:3c:74:dd:60:7b:08:c8:24:f6:4a:53:
7a:39:75:25:51:07:6d:13:1a:fa:e3:71:c8:22:86:
ef:f4:2b:3f:3f:b2:33:b2:08:bf:e4:ca:9b:f2:b8:
65:c4:9d:b6:64:ee:81:a5:a5:df:b6:3f:48:e1:ee:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:28:87:B6:74:3A:C8:DC:8B:3C:59:F2:A4:DA:90:42:15:61:8C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wlsoh7Z0OsjcizxZ8qTakEIVYYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.40.0/24
31.57.201.0/24
31.57.207.0/24
31.57.220.0/24
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e7:53:18:48:c5:39:3d:53:94:ff:fb:51:f4:24:2e:06:3c:
64:e4:c7:2f:ae:e4:a9:c3:74:1c:76:96:af:b9:1d:5b:9e:51:
da:fc:7a:aa:da:68:f9:b8:00:10:4d:ba:72:11:3c:a2:55:5d:
62:0a:3c:60:0e:8a:8e:87:1e:59:7f:8e:69:05:50:17:5e:95:
94:80:c0:8d:24:8f:20:75:d9:b5:87:cf:8b:87:1f:1f:4a:b5:
3b:a1:be:10:14:30:56:b3:9e:bd:bd:3a:dd:19:3c:28:90:96:
64:7c:0c:74:b8:fd:12:a6:24:01:cb:1e:48:3b:79:bc:d3:b5:
81:34:c1:9f:37:04:1f:22:cf:7c:2e:77:5f:ff:c1:c5:9a:ba:
36:4e:b9:c0:10:3e:c5:91:cf:21:43:b4:e6:9b:26:42:68:c5:
54:4e:42:4c:eb:e8:2f:31:d6:37:ea:55:01:1f:42:a3:36:80:
0c:47:a0:bb:e7:2d:fe:68:20:52:3b:7e:be:3f:ae:7b:ef:8a:
e5:20:30:92:01:c4:42:97:74:fb:7c:3d:9a:44:60:9d:d4:bb:
b7:0c:5d:7a:db:ee:61:35:0d:0a:a4:40:c8:41:30:9e:60:ce:
b9:be:16:43:73:77:bc:4e:49:bb:7b:e7:50:02:c9:22:8b:07:
51:07:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 04:24:54 2025 by rpki-client