Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxdicW5H0OldEkQZ9LIZgo3W9nU.roa
File: AxdicW5H0OldEkQZ9LIZgo3W9nU.roa (raw, json)
Hash identifier: XMSKX73TPJ5vNJ28fFf5rMgycK7bHt1uHXmqaV6Gv5M=
Subject key identifier: 03:17:62:71:6E:47:D0:E9:5D:12:44:19:F4:B2:19:82:8D:D6:F6:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197440D182EDE6B8187F6550508CFDED86E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxdicW5H0OldEkQZ9LIZgo3W9nU.roa
Signing time: Fri 06 Jun 2025 07:03:18 +0000
ROA not before: Fri 06 Jun 2025 07:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 31.57.159.0/24 maxlen: 24
31.59.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0d:18:2e:de:6b:81:87:f6:55:05:08:cf:de:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 07:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=031762716e47d0e95d124419f4b219828dd6f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:55:b5:12:40:8a:56:3b:ab:ba:3c:ab:05:
b5:8b:78:1f:dd:3f:8b:9d:db:04:1a:e3:24:4e:90:
85:3a:24:a9:41:a9:42:12:b3:ea:eb:0a:dc:75:e0:
5e:19:b0:76:2a:2b:8a:83:64:00:61:62:83:e8:4a:
d2:fb:1e:18:14:40:3e:13:b4:01:ca:97:7c:c3:ab:
59:20:49:bf:e6:47:b5:51:9a:50:0e:3c:4d:14:02:
88:02:37:7b:c1:7f:0a:8b:fd:bf:14:40:23:21:b1:
2c:fd:0f:a2:9c:10:86:ce:7b:de:cb:35:1c:97:77:
df:b4:c3:84:7e:e7:09:87:c5:93:f3:f0:75:62:a2:
7c:fe:e1:ae:99:db:2a:6d:b0:69:f7:92:8f:d6:17:
5d:7f:ce:63:69:9b:68:6e:08:37:1b:c6:47:72:b1:
5a:d5:1b:44:90:da:b5:cb:37:a6:3f:10:e7:b9:cb:
82:87:cb:06:2a:e2:43:a3:2d:78:4d:4e:8b:52:5a:
b9:c2:c2:25:0e:6a:c6:4e:8a:4e:7c:ca:f3:bb:7b:
74:14:c1:04:fd:94:aa:34:3b:7f:74:fb:0c:04:59:
56:45:64:57:8f:e1:73:a0:c2:cf:73:db:7a:80:52:
33:ec:7e:8a:50:82:92:b0:e8:4a:ba:81:75:97:62:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:62:71:6E:47:D0:E9:5D:12:44:19:F4:B2:19:82:8D:D6:F6:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxdicW5H0OldEkQZ9LIZgo3W9nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.159.0/24
31.59.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a8:b9:aa:4c:7a:9b:95:36:e7:9a:98:64:33:94:48:28:cd:
e6:1a:36:bf:1e:48:40:96:b3:f7:c9:3d:e8:10:ea:6b:26:09:
95:85:96:2f:75:43:50:55:69:d4:39:2c:01:48:bc:29:3d:c1:
76:d1:37:24:1a:a0:68:19:c7:da:07:bc:bf:88:97:2b:b6:69:
60:00:78:1f:06:90:f7:82:bb:17:b1:87:29:c1:73:2a:a8:0c:
0c:5e:cf:fe:a7:b1:d7:ad:48:73:b8:67:f1:01:e7:07:0e:dd:
ad:6c:97:be:5a:fd:6f:11:1f:4f:11:5c:29:43:f5:17:f5:d5:
19:4a:ce:bb:f0:5a:a2:bf:c4:d3:cc:53:c5:db:3f:6b:f5:46:
c5:7d:e1:93:bf:23:b3:ad:ad:76:75:1c:86:ec:dc:b7:de:39:
15:2f:57:4d:7c:82:ee:4b:df:13:4e:e1:dd:43:fa:ac:c5:e4:
f7:93:e2:8e:7a:c5:da:ba:b0:e1:ca:97:9e:d0:87:6e:b0:fb:
df:a0:37:ab:27:4c:ce:6d:53:0d:3a:9e:8e:a1:92:c7:07:74:
aa:8b:ac:c0:a8:2a:ff:23:ae:4e:27:96:f6:41:17:5d:67:0b:
f5:40:f2:42:a1:44:f7:6c:de:b6:a6:c8:b6:dc:23:2f:f7:c3:
25:4d:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:54 2025 by rpki-client