Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F2OWeSZG5CxyDnQksbTtQm0P65U.roa
File: F2OWeSZG5CxyDnQksbTtQm0P65U.roa (raw, json)
Hash identifier: /wn6edS/zxKlNgPNF6cu4rVUMcYJKFDFD8JsLVkq5WU=
Subject key identifier: 17:63:96:79:26:46:E4:2C:72:0E:74:24:B1:B4:ED:42:6D:0F:EB:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196078700B823291613043E2BAF11551CF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F2OWeSZG5CxyDnQksbTtQm0P65U.roa
Signing time: Sat 05 Apr 2025 19:56:50 +0000
ROA not before: Sat 05 Apr 2025 19:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 31.56.34.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:87:00:b8:23:29:16:13:04:3e:2b:af:11:55:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 5 19:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176396792646e42c720e7424b1b4ed426d0feb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:32:bc:da:f1:28:5f:dc:a3:b7:8a:d9:82:
d1:1a:f4:6b:cc:b0:48:c0:cf:48:72:08:41:0a:49:
f2:97:0c:aa:bd:76:50:42:13:43:c2:85:1d:95:0a:
e3:cf:e6:79:1b:ea:81:fb:a2:e1:a4:e7:c0:60:c6:
be:ee:1f:fb:23:81:70:66:d2:69:4c:a1:7b:a5:44:
97:24:d3:ef:b9:b5:c3:45:54:e0:51:c3:4d:0b:73:
e6:6f:6c:8f:4e:c4:de:57:a2:44:49:bb:3e:62:8e:
41:ac:3f:0a:0b:9b:dd:74:0f:56:29:12:d2:5b:65:
3f:25:39:d4:b6:b8:d0:6f:5a:83:e6:b9:03:63:3e:
c9:b9:52:65:70:88:3a:22:e7:a8:6e:82:6c:dd:cf:
e1:9f:a3:fc:69:2b:c2:6e:07:f3:12:3c:c2:ca:bc:
ed:65:e3:b0:1c:da:96:ae:2d:08:21:45:5c:e3:cf:
85:e5:1f:1f:55:15:33:25:69:a4:f2:81:a1:08:02:
d7:0e:86:3d:6f:89:a9:4a:35:51:71:08:aa:a9:65:
4b:b9:84:83:cb:b1:f6:e5:2a:76:09:9e:df:d2:43:
cd:d5:42:6d:ab:04:58:73:6f:7b:8a:4b:f6:f9:5d:
ac:a0:ea:22:2a:54:f5:30:ed:4a:84:49:1c:7d:91:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:96:79:26:46:E4:2C:72:0E:74:24:B1:B4:ED:42:6D:0F:EB:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F2OWeSZG5CxyDnQksbTtQm0P65U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.34.0/24
31.57.119.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:20:78:97:72:7f:8c:3e:d5:de:0d:d8:09:b1:0a:a5:12:f5:
1c:ab:c1:61:95:60:9d:e6:ed:7f:da:3d:39:8a:a4:48:72:7d:
24:11:7a:42:d5:98:df:69:a2:c2:9b:4b:6d:05:6f:96:71:3c:
d4:f4:bc:42:e1:00:93:bb:b5:7f:bc:01:b7:0c:7c:f0:fe:c4:
42:e8:42:34:2e:56:f1:ea:34:80:d0:ed:99:2e:71:ba:a5:ba:
8d:61:60:03:87:54:cf:ea:f2:11:88:c1:e5:69:2a:e7:ef:9c:
c6:53:f8:75:0b:5e:b3:f7:60:4b:3b:68:37:10:df:16:8e:d8:
ec:4b:c8:cc:90:f1:af:d0:da:dd:e3:80:b0:f3:3e:0c:2d:db:
7e:a2:dd:6d:da:7a:f8:25:d9:c5:c9:aa:0c:a3:87:4b:cf:e8:
59:67:20:f1:13:c5:2d:96:57:fc:57:b2:b1:21:d5:ac:3d:32:
81:e1:f3:97:c4:a1:93:d5:f7:2c:73:40:62:94:d1:9e:b8:c5:
11:3c:fa:78:98:76:28:bd:e6:33:04:16:c7:4f:16:e0:e1:18:
92:3c:e2:5c:10:b8:4f:02:fc:03:2b:fd:3c:37:06:15:9c:9a:
29:b6:92:a3:07:8d:2d:ef:ec:2b:d0:c8:80:ae:28:7a:5d:e4:
47:16:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:46 2025 by rpki-client