Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tUnwYNOXSOXaPrVqIT5kPKOp_k.roa
File: 5tUnwYNOXSOXaPrVqIT5kPKOp_k.roa (raw, json)
Hash identifier: Zm2hRZ9UiQXqNxuhs2WFUm0HtfIDafhOkCy1833f/bM=
Subject key identifier: E6:D5:27:C1:83:4E:5D:23:97:68:FA:D5:A8:84:F9:90:F2:8E:A7:F9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019750D09BD5191BF41D1CC4DABE57F3F318
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tUnwYNOXSOXaPrVqIT5kPKOp_k.roa
Signing time: Sun 08 Jun 2025 18:32:18 +0000
ROA not before: Sun 08 Jun 2025 18:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207155
IP address blocks: 31.59.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:d0:9b:d5:19:1b:f4:1d:1c:c4:da:be:57:f3:f3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 8 18:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d527c1834e5d239768fad5a884f990f28ea7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:c8:4f:4d:c6:68:a1:88:9b:21:65:23:4d:
5d:91:bc:7c:2b:fe:bc:ee:b0:e3:59:5f:12:07:fd:
09:be:25:55:5e:d0:eb:f6:d3:33:c6:c7:0b:fa:a7:
62:08:c0:f4:d3:61:57:1d:0b:59:6b:56:22:22:d6:
37:4f:74:84:fd:36:22:1b:b9:12:1b:fd:6c:5c:41:
94:a7:c2:02:64:05:3b:30:e0:70:2c:09:d0:f0:ad:
01:d1:83:49:fb:14:c0:da:f4:e1:c4:2d:e6:2b:e6:
05:63:15:4a:f2:e6:cb:ca:46:95:11:27:d2:6d:2d:
a3:df:52:25:29:02:d1:29:52:b5:87:8e:0a:46:5c:
94:3b:2c:68:0c:36:08:8d:cd:04:ac:82:a6:89:5f:
41:44:f6:8e:f5:68:7a:2c:fb:75:70:39:92:ee:92:
2a:1d:36:63:f2:4a:22:22:1e:97:34:01:b0:9c:fc:
59:0c:6f:d0:d2:df:2d:94:5d:0d:24:b4:10:4a:fb:
60:76:99:2d:e3:e4:42:c4:d4:a8:6c:54:bd:77:b0:
78:ca:55:ed:91:1b:d2:81:19:1a:16:cb:e8:7f:b1:
65:c9:7b:1c:a1:b2:63:88:00:32:13:f5:63:ea:6d:
27:76:53:56:cf:5a:c6:56:06:b7:67:1b:e8:92:62:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:27:C1:83:4E:5D:23:97:68:FA:D5:A8:84:F9:90:F2:8E:A7:F9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tUnwYNOXSOXaPrVqIT5kPKOp_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:56:e6:f4:b5:d3:35:ff:e0:73:54:c3:2d:56:f5:02:d9:69:
90:e8:73:04:d6:d2:15:c9:ec:9d:93:7b:d4:b1:3d:99:48:eb:
10:d6:76:40:cb:1f:43:a0:f7:33:fb:36:28:27:23:20:ef:d5:
35:07:0e:f7:e0:c2:58:c0:61:40:26:71:48:67:cc:ca:68:12:
5d:c9:f7:23:fa:94:25:35:f0:5e:97:24:32:cc:26:6d:fe:02:
f0:b0:b0:74:84:77:a0:3e:9b:fb:d8:9a:c6:c2:2a:f7:89:2a:
a2:7c:88:2e:19:c2:73:28:07:27:fe:67:86:c9:b3:cc:ce:c2:
b7:83:6a:e4:8c:2b:79:73:fc:a8:da:ec:0d:18:a7:57:88:f3:
f9:4e:86:d8:69:5f:7b:66:39:ed:18:3f:ae:10:16:51:eb:7d:
d8:1d:af:19:47:33:73:6d:77:84:00:73:5f:14:c1:75:be:e1:
3f:ae:d6:5c:9b:68:c0:2f:eb:0e:31:c0:a9:59:8f:19:7f:13:
cd:fd:87:2b:55:a6:03:69:7c:0c:a9:df:e6:3c:b3:b5:04:3b:
58:75:b9:31:6f:a3:8c:24:7b:cb:ab:29:cd:ae:da:30:81:70:
b4:27:d7:13:a6:c4:e7:39:01:34:26:96:1a:1c:97:2b:5e:f0:
60:5a:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:34 2025 by rpki-client