Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xY3F2OjQ1nKaA_hLEBbVyvueW9w.roa
File: xY3F2OjQ1nKaA_hLEBbVyvueW9w.roa (raw, json)
Hash identifier: fkY6JJIn9aOnxvG5B09tjX98HhaNhtg4R+SS0JIlxWQ=
Subject key identifier: C5:8D:C5:D8:E8:D0:D6:72:9A:03:F8:4B:10:16:D5:CA:FB:9E:5B:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F6F0C98BC74EAE0276727D9D2DAC0A0F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xY3F2OjQ1nKaA_hLEBbVyvueW9w.roa
Signing time: Wed 02 Apr 2025 14:38:50 +0000
ROA not before: Wed 02 Apr 2025 14:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 31.57.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:f0:c9:8b:c7:4e:ae:02:76:72:7d:9d:2d:ac:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 14:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c58dc5d8e8d0d6729a03f84b1016d5cafb9e5bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:ce:77:3d:aa:fc:0e:71:62:b5:1e:3b:62:
a0:5e:ad:a9:af:7e:84:41:22:59:a8:55:49:2b:59:
b9:40:df:14:70:09:16:26:ef:72:34:2b:20:2a:7a:
5b:66:7a:c8:9f:3a:10:2c:b1:fb:24:24:47:ef:53:
20:06:15:0b:d2:29:19:7a:ce:54:d2:d5:eb:f6:9f:
0a:c8:2b:b6:27:0a:67:15:8e:b1:f1:b4:33:ae:6b:
61:01:9b:a6:3a:7f:0e:26:e9:1e:bc:37:44:85:34:
12:71:f8:13:22:63:bb:22:fd:21:c3:e0:91:83:44:
50:04:95:fb:26:7f:ed:d9:e4:d6:98:91:e5:6b:72:
7a:fc:24:1e:2c:23:89:71:fc:24:92:ae:f1:11:48:
06:cb:cf:27:6e:10:1b:bd:e6:93:05:39:48:a0:ae:
93:b9:dd:d5:bf:23:92:30:1c:aa:07:bb:1f:dd:93:
11:42:37:cf:7c:0e:91:22:2c:8b:a0:6a:56:37:b9:
d3:c9:9d:28:1f:f2:0f:45:0a:3b:5a:19:df:9a:27:
5b:d1:02:cc:f2:e8:7b:db:f4:3d:6d:97:dd:d5:f5:
74:22:d3:56:79:0f:4c:3f:ef:c7:6c:81:de:66:2e:
52:17:4d:72:10:af:3d:db:67:8d:3b:8e:3d:a6:a4:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:C5:D8:E8:D0:D6:72:9A:03:F8:4B:10:16:D5:CA:FB:9E:5B:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xY3F2OjQ1nKaA_hLEBbVyvueW9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1e:fd:e8:b0:56:99:8c:de:96:b6:93:a5:7d:13:59:e3:c9:
e1:1a:1a:16:11:7d:48:a0:dc:48:05:0f:9b:3e:a1:28:ec:b6:
a8:68:6f:16:c1:a2:5a:bc:c9:04:42:d9:7c:70:9a:70:90:6a:
b2:3d:d0:c6:c5:e8:07:c2:ab:8d:2d:2e:f9:85:c3:2d:93:e6:
04:89:ad:33:96:ac:2a:c4:f2:0a:a7:ef:b2:8d:a8:b5:e6:5a:
b1:5d:03:2b:cf:d2:e0:04:5c:62:1b:d8:30:9e:19:20:d1:8d:
58:36:b1:a2:9b:cd:7f:b8:ea:d4:4e:8b:01:2d:44:d0:cc:42:
30:b8:a6:96:8f:dc:a8:52:94:a3:9d:e9:cd:7a:59:83:c0:4a:
29:01:cb:ba:b2:a8:a9:88:95:50:c5:47:ab:99:6c:36:84:78:
d3:c4:62:e1:d1:e4:07:e4:0a:a8:f8:7a:3f:b0:c8:26:67:08:
0b:5a:54:06:72:59:f8:15:8c:25:91:2a:8e:f6:1d:c6:c1:44:
4a:0d:46:32:ed:8e:54:d2:4c:38:68:ef:45:7b:d9:63:31:f1:
7c:76:07:ff:84:f4:ff:c9:b1:29:32:d4:b6:d1:f4:d0:ac:1e:
8b:87:fb:88:e6:ea:09:da:1e:e7:ad:4d:ab:4b:39:93:a7:7c:
68:6b:36:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX28MmLx06uAnZyfZ0trAoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDAyMTQzODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNThkYzVkOGU4ZDBkNjcyOWEwM2Y4NGIxMDE2ZDVjYWZiOWU1YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHOdz2q/A5xYrUeO2KgXq2pr36E
QSJZqFVJK1m5QN8UcAkWJu9yNCsgKnpbZnrInzoQLLH7JCRH71MgBhUL0ikZes5U
0tXr9p8KyCu2JwpnFY6x8bQzrmthAZumOn8OJukevDdEhTQScfgTImO7Iv0hw+CR
g0RQBJX7Jn/t2eTWmJHla3J6/CQeLCOJcfwkkq7xEUgGy88nbhAbveaTBTlIoK6T
ud3VvyOSMByqB7sf3ZMRQjfPfA6RIiyLoGpWN7nTyZ0oH/IPRQo7Whnfmidb0QLM
8uh72/Q9bZfd1fV0ItNWeQ9MP+/HbIHeZi5SF01yEK8922eNO449pqS0FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWNxdjo0NZymgP4SxAW1cr7nlvcMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveFkzRjJPalExbkthQV9oTEVCYlZ5dnVlVzl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkKMA0G
CSqGSIb3DQEBCwUAA4IBAQBPHv3osFaZjN6WtpOlfRNZ48nhGhoWEX1IoNxIBQ+b
PqEo7LaoaG8WwaJavMkEQtl8cJpwkGqyPdDGxegHwquNLS75hcMtk+YEia0zlqwq
xPIKp++yjai15lqxXQMrz9LgBFxiG9gwnhkg0Y1YNrGim81/uOrUTosBLUTQzEIw
uKaWj9yoUpSjnenNelmDwEopAcu6sqipiJVQxUermWw2hHjTxGLh0eQH5Aqo+Ho/
sMgmZwgLWlQGcln4FYwlkSqO9h3GwURKDUYy7Y5U0kw4aO9Fe9ljMfF8dgf/hPT/
ybEpMtS20fTQrB6Lh/uI5uoJ2h7nrU2rSzmTp3xoaza+
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:17 2025 by rpki-client