Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CXQkkkOtLofzf0VUOtkjH5hfbTw.roa
File: CXQkkkOtLofzf0VUOtkjH5hfbTw.roa (raw, json)
Hash identifier: BqpcAVOAKyT39lcxYFE5bTTNfbW5dFRuNFfLj5Oa04M=
Subject key identifier: 09:74:24:92:43:AD:2E:87:F3:7F:45:54:3A:D9:23:1F:98:5F:6D:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019649B092F07575470DE4BCF257E4A68B91
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CXQkkkOtLofzf0VUOtkjH5hfbTw.roa
Signing time: Fri 18 Apr 2025 16:17:10 +0000
ROA not before: Fri 18 Apr 2025 16:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 31.56.62.0/24 maxlen: 24
31.57.218.0/24 maxlen: 24
31.57.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:b0:92:f0:75:75:47:0d:e4:bc:f2:57:e4:a6:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 16:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0974249243ad2e87f37f45543ad9231f985f6d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:72:b5:66:e1:cb:28:dc:a7:48:af:11:b9:
80:c0:c8:f8:b5:d9:d3:1f:7d:d7:04:a8:c6:ca:c1:
47:23:3f:f6:9f:e3:12:68:ce:0d:43:ae:ab:80:cb:
fb:d2:e6:a2:6d:af:a2:c8:32:79:7e:fe:d3:d6:6a:
2a:c2:2c:c7:88:27:2f:39:62:59:9d:f0:35:99:74:
6b:75:f5:79:2b:8e:a3:a3:b7:7c:7d:40:b0:78:8e:
9d:41:92:65:8f:e8:87:a0:24:c1:5e:56:81:fa:2f:
7a:ff:b1:49:12:f7:a9:2a:2b:1c:a0:16:76:70:01:
48:4e:6f:7c:bf:98:e1:09:50:2a:19:10:f0:5c:dc:
f2:47:80:2e:e4:a5:e2:8d:41:16:7f:92:f4:9f:18:
c5:c9:a3:91:02:98:0e:df:5a:26:63:3b:c0:48:3a:
97:75:b0:5a:27:52:11:69:9a:57:24:72:7a:f5:9c:
01:45:67:70:e0:bb:43:85:6c:db:66:32:3e:0c:9d:
fa:06:87:8e:ab:9d:d4:d9:54:54:14:80:8b:30:96:
39:a1:8e:7d:a5:4e:73:20:fa:09:a0:ae:ad:92:76:
db:90:f4:e7:e2:d5:4e:4c:7d:29:f8:fa:1b:d5:a0:
98:40:97:cb:a7:3f:3c:91:74:1c:cd:f4:6a:2c:cf:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:24:92:43:AD:2E:87:F3:7F:45:54:3A:D9:23:1F:98:5F:6D:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CXQkkkOtLofzf0VUOtkjH5hfbTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.57.218.0/24
31.57.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:91:b8:0c:6d:9d:fd:54:6d:eb:fd:1c:5b:55:51:92:12:3c:
89:16:eb:83:a1:20:b2:e6:92:c3:c3:63:e8:52:c6:21:9c:ee:
d9:71:73:d8:06:94:3c:27:b6:25:58:24:24:f5:b3:44:e8:fc:
64:85:17:f1:8b:70:28:39:7d:e5:f8:36:d4:dc:98:30:6c:4b:
f0:d4:5b:e9:c5:cd:30:20:d8:9b:70:33:8c:5f:a1:94:02:0f:
89:8f:6e:05:92:82:fe:0f:eb:d9:55:90:ba:f7:6f:44:57:aa:
16:5e:da:ec:29:ae:45:62:8a:aa:d5:59:6e:f3:13:40:9a:03:
bc:33:bc:5e:5d:5c:dc:82:19:21:b7:0b:a2:dd:ff:2b:6f:d5:
dd:35:ff:74:be:3b:9a:5b:73:fb:9f:90:8a:89:49:33:97:fc:
aa:5c:93:e2:34:5e:29:aa:d0:c5:60:3d:d6:79:a7:ca:8a:63:
eb:7c:18:c2:9b:bb:da:c6:fc:09:30:9a:ee:4c:61:13:38:0f:
b8:f6:e7:53:5a:65:54:17:73:80:b3:42:2d:68:5e:e8:f4:3d:
7e:30:f6:79:21:45:bc:81:bf:18:69:1d:4e:c2:65:ba:42:ba:
1b:3f:71:e1:21:dd:a6:41:94:80:f2:eb:d9:a3:cc:cb:a6:7a:
28:c4:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:43 2025 by rpki-client