Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7coJkphhwr0HKBtV6tlLZQMLFOg.roa
File: 7coJkphhwr0HKBtV6tlLZQMLFOg.roa (raw, json)
Hash identifier: s5j2IDmByl2Ds2keZLeXS7pepzdLGSJ8HfIUd3xu7wg=
Subject key identifier: ED:CA:09:92:98:61:C2:BD:07:28:1B:55:EA:D9:4B:65:03:0B:14:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019634DE36D0CDB9721177731288B4688C35
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7coJkphhwr0HKBtV6tlLZQMLFOg.roa
Signing time: Mon 14 Apr 2025 15:15:00 +0000
ROA not before: Mon 14 Apr 2025 15:15:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:de:36:d0:cd:b9:72:11:77:73:12:88:b4:68:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 14 15:15:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edca09929861c2bd07281b55ead94b65030b14e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:9a:3f:d8:24:52:a8:d8:46:29:6d:83:8b:
d0:52:ee:d1:98:ca:73:5e:25:d4:fd:95:bc:22:eb:
a0:16:96:a2:6a:6a:32:49:19:4e:dd:16:e7:a0:21:
64:20:21:11:f1:9c:29:67:23:af:45:8b:f6:e0:06:
93:b7:22:99:05:9f:14:9d:d9:35:ce:ac:43:11:8b:
73:4a:01:46:88:6f:28:fa:08:78:1a:be:a3:51:29:
2c:6a:51:30:67:ae:6f:a5:06:23:aa:e9:8f:21:09:
a2:2f:40:4d:87:aa:0f:2e:80:f1:21:74:fe:2c:8b:
c0:ad:a6:31:92:3d:e1:5b:b2:7d:b5:ed:b8:c4:5e:
c7:87:f3:f2:91:26:9b:ff:d9:5c:94:7b:c3:39:76:
83:30:31:f5:6c:7f:80:17:21:a0:36:89:46:d6:e5:
d1:65:45:9d:da:2a:99:b7:f5:38:90:cb:08:69:a7:
88:d8:17:ae:8b:a6:2f:1f:01:ae:6a:01:36:3c:4c:
01:2a:f0:8b:b7:a0:82:97:2f:65:10:5d:7c:95:29:
3d:80:ae:5d:4f:bd:6a:a2:ad:c9:c7:ea:33:b0:5f:
5f:38:26:61:39:90:fb:cc:e0:83:8d:9f:62:f2:b5:
14:7a:3a:d5:94:8e:ff:05:74:e0:2d:1e:24:4e:ca:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:09:92:98:61:C2:BD:07:28:1B:55:EA:D9:4B:65:03:0B:14:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7coJkphhwr0HKBtV6tlLZQMLFOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.253.0/24
31.57.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:79:2b:bf:d4:72:97:e0:ac:23:3b:30:c1:6b:e3:a6:bf:90:
2b:12:06:1a:d1:5b:7e:fa:8a:bc:d3:c5:1e:33:a7:85:53:0d:
a3:c3:14:18:e4:00:a1:26:93:0a:07:bd:d6:77:02:4a:2c:df:
08:8b:6a:c8:d7:38:f8:64:81:9b:2f:b8:5a:63:7d:5d:04:d4:
70:b1:22:c7:ee:5c:84:4e:99:31:0f:14:71:30:bc:df:b7:12:
8a:07:2d:dc:95:33:09:15:f7:4b:32:c1:99:9f:63:de:82:27:
56:07:f2:29:f0:c3:8d:bb:5f:6c:b8:fc:b2:88:d0:84:ee:b0:
1e:b1:b5:84:94:da:56:76:b6:5c:49:46:8f:06:1b:87:e3:4c:
a0:cb:f9:4d:f5:32:a1:a6:fe:e9:33:07:b8:b6:36:50:0b:49:
25:39:a5:9f:af:0f:48:63:a9:73:d5:eb:13:74:c1:2e:02:ac:
67:77:4a:bd:c7:bf:a5:74:c0:ac:85:a7:19:a3:50:61:79:6e:
41:d0:d4:cf:59:c5:cc:d4:12:42:c7:24:3a:36:3c:7a:60:79:
17:22:f9:e8:5b:08:6f:c5:be:61:8e:9d:60:df:c3:83:ce:fd:
0c:62:ca:d7:e4:1f:c2:cd:c4:be:73:3e:23:a1:98:39:0f:c9:
a0:0c:5b:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZY03jbQzblyEXdzEoi0aIw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDE0MTUxNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGNhMDk5Mjk4NjFjMmJkMDcyODFiNTVlYWQ5NGI2NTAzMGIxNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mOaP9gkUqjYRiltg4vQUu7RmMpz
XiXU/ZW8IuugFpaiamoySRlO3RbnoCFkICER8ZwpZyOvRYv24AaTtyKZBZ8Undk1
zqxDEYtzSgFGiG8o+gh4Gr6jUSksalEwZ65vpQYjqumPIQmiL0BNh6oPLoDxIXT+
LIvAraYxkj3hW7J9te24xF7Hh/PykSab/9lclHvDOXaDMDH1bH+AFyGgNolG1uXR
ZUWd2iqZt/U4kMsIaaeI2Beui6YvHwGuagE2PEwBKvCLt6CCly9lEF18lSk9gK5d
T71qoq3Jx+ozsF9fOCZhOZD7zOCDjZ9i8rUUejrVlI7/BXTgLR4kTspD0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO3KCZKYYcK9BygbVerZS2UDCxToMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvN2NvSmtwaGh3cjBIS0J0VjZ0bExaUU1MRk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzn9AwQA
Hzn/MA0GCSqGSIb3DQEBCwUAA4IBAQDAeSu/1HKX4KwjOzDBa+Omv5ArEgYa0Vt+
+oq808UeM6eFUw2jwxQY5AChJpMKB73WdwJKLN8Ii2rI1zj4ZIGbL7haY31dBNRw
sSLH7lyETpkxDxRxMLzftxKKBy3clTMJFfdLMsGZn2PegidWB/Ip8MONu19suPyy
iNCE7rAesbWElNpWdrZcSUaPBhuH40ygy/lN9TKhpv7pMwe4tjZQC0klOaWfrw9I
Y6lz1esTdMEuAqxnd0q9x7+ldMCshacZo1BheW5B0NTPWcXM1BJCxyQ6Njx6YHkX
IvnoWwhvxb5hjp1g38ODzv0MYsrX5B/CzcS+cz4joZg5D8mgDFvU
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:05 2025 by rpki-client