Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Eoz3BgbbsWzuuOSEClIEFqIHlNs.roa
File: Eoz3BgbbsWzuuOSEClIEFqIHlNs.roa (raw, json)
Hash identifier: vrrrbo1yLApJL04Y01z1VbmRmtCaOEm8ihukNKTeORc=
Subject key identifier: 12:8C:F7:06:06:DB:B1:6C:EE:B8:E4:84:0A:52:04:16:A2:07:94:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196F2691267934D62E1DEB3790C66AEACFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Eoz3BgbbsWzuuOSEClIEFqIHlNs.roa
Signing time: Wed 21 May 2025 10:34:54 +0000
ROA not before: Wed 21 May 2025 10:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:69:12:67:93:4d:62:e1:de:b3:79:0c:66:ae:ac:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 10:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128cf70606dbb16ceeb8e4840a520416a20794db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:bf:63:a8:29:97:a8:c2:01:97:82:bf:81:
ef:90:a2:6b:44:43:fa:48:ad:5d:6c:18:62:89:82:
30:8a:99:cf:a6:5e:5d:e6:a9:8b:8c:27:30:45:a0:
a6:6b:e1:79:5b:36:77:32:f6:72:f2:7b:e5:8a:a0:
c9:85:13:bb:0b:92:e8:e0:6f:1c:6a:40:80:37:9f:
71:85:00:cb:f5:b1:ef:58:f6:60:9a:97:df:46:b2:
68:af:2b:5f:cd:a3:0c:3e:b2:b4:33:b4:53:08:a5:
1a:da:18:08:8b:a3:d7:65:55:1b:fb:f2:73:4e:af:
26:d7:e7:74:2f:76:32:e8:c0:24:4e:72:8a:17:46:
52:ed:68:86:24:0f:95:0b:d3:70:e0:ca:18:ad:f3:
a9:07:c5:34:49:d6:cd:04:7f:fe:9d:ac:fb:c0:6e:
f6:c4:2d:09:1d:e0:b0:22:3e:e4:52:aa:2c:e2:98:
1b:5d:3f:e5:d5:f9:0f:33:33:d3:80:d1:c1:b8:a6:
e5:5c:b8:7e:df:45:b1:49:e1:cb:c9:58:8c:a1:7b:
1d:d3:54:0d:8c:06:fd:99:dd:85:99:ce:dd:8f:56:
e3:ec:8c:1d:32:b6:e3:3b:1d:47:43:84:dd:0a:3b:
ca:f9:82:88:9a:88:03:8b:4a:c6:2f:c5:1d:4d:94:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:F7:06:06:DB:B1:6C:EE:B8:E4:84:0A:52:04:16:A2:07:94:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Eoz3BgbbsWzuuOSEClIEFqIHlNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.84.0/24
31.57.104.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:f3:09:8b:5c:c8:8e:fa:85:1a:5f:c9:e2:55:75:70:ab:ce:
1d:bc:90:26:e8:f3:25:33:07:7f:36:a4:5a:73:ce:23:18:a9:
80:bd:72:44:e6:05:7d:19:e7:ee:0b:0c:8d:97:f4:c6:94:f6:
97:53:63:14:fd:ba:27:d7:c0:8b:d1:4d:6a:02:53:4d:26:94:
19:26:3a:a0:73:81:09:df:2d:c6:3e:f3:66:2e:a3:41:c2:48:
0d:36:09:65:14:05:27:d7:c7:82:5f:82:ec:e4:66:b1:77:9e:
07:cf:cc:49:13:0a:cd:8d:ce:b1:d5:25:cb:ed:02:b9:ac:c8:
01:66:b4:32:ff:49:da:c3:fd:1a:b3:c3:fc:b3:86:e6:f4:d7:
1c:05:0e:79:5a:10:10:d2:35:23:2d:5f:ec:3e:48:17:bb:74:
d1:84:f7:81:86:5a:57:ef:04:21:fb:d3:db:6e:56:bb:e6:41:
1f:11:a4:b3:e6:0b:a3:59:59:2f:17:f3:ee:29:9b:86:ef:e1:
bf:86:87:06:2e:d5:4a:3b:7e:ef:75:b3:0a:0f:20:cc:41:17:
ff:ff:e8:7f:08:58:c7:14:c0:c2:5f:af:72:f8:9b:cb:0f:a6:
c3:f0:32:20:c0:0f:77:87:e9:5f:e9:1f:c5:e8:58:77:89:7e:
18:70:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:35 2025 by rpki-client