Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVaBX3IkA4ssLO8Mb1Ld4n7wAzw.roa
File: FVaBX3IkA4ssLO8Mb1Ld4n7wAzw.roa (raw, json)
Hash identifier: k836PHCIh1VMpe7aSb8/j0yJZNG2Vn/S6XXbAe25dbQ=
Subject key identifier: 15:56:81:5F:72:24:03:8B:2C:2C:EF:0C:6F:52:DD:E2:7E:F0:03:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01973EA87ABF77D2362C10B44BA72CD4D190
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVaBX3IkA4ssLO8Mb1Ld4n7wAzw.roa
Signing time: Thu 05 Jun 2025 05:55:18 +0000
ROA not before: Thu 05 Jun 2025 05:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 31.57.123.0/24 maxlen: 24
31.58.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:a8:7a:bf:77:d2:36:2c:10:b4:4b:a7:2c:d4:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 5 05:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1556815f7224038b2c2cef0c6f52dde27ef0033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:6a:9f:84:8f:81:f9:e7:b8:f5:d5:6e:0a:
c5:e3:c1:6a:40:7a:0c:66:dc:46:6a:0f:dc:ab:ff:
cc:63:cd:e0:04:c2:eb:da:cb:b2:d5:83:ab:d4:10:
b6:40:a0:18:22:20:39:d3:fb:e6:e2:ba:6b:f9:e6:
a8:1d:dd:50:ad:77:a2:75:20:46:2c:ff:d2:8e:a4:
9c:c4:fe:f8:23:a1:d9:0f:64:98:dd:5c:34:fa:e6:
fe:7a:5a:a2:c8:e3:d1:51:d0:70:92:5c:9a:af:8b:
bb:1f:8f:de:11:1a:c6:ca:4c:d0:54:51:bd:17:c0:
86:0d:b8:05:4a:5a:27:45:d7:09:eb:a1:af:1f:25:
08:26:7b:74:51:5d:f3:73:9b:e1:08:30:16:5a:7a:
f5:a0:14:5b:0f:0e:75:01:04:be:fc:7f:bb:cd:66:
c5:5b:ce:a3:3e:16:1e:f7:65:a9:66:87:9b:55:28:
97:28:ea:c7:c3:60:b8:d0:3a:6b:3f:31:ec:b0:1a:
9b:5f:99:f4:9e:c6:d0:08:b2:b0:f1:a9:6b:94:e3:
40:46:4a:68:4d:00:2a:37:3d:79:39:6d:1c:c1:61:
98:70:b8:9b:fc:a2:fb:c0:ce:37:f2:38:38:a1:eb:
5b:ab:21:2f:cb:16:4d:d0:b9:1f:0b:4c:45:eb:7d:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:81:5F:72:24:03:8B:2C:2C:EF:0C:6F:52:DD:E2:7E:F0:03:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVaBX3IkA4ssLO8Mb1Ld4n7wAzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.123.0/24
31.58.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6c:69:59:bf:9b:4e:12:f4:e7:e7:f4:71:e1:9a:ed:c1:36:
12:c9:7c:e9:c4:90:32:dd:a3:75:ad:29:28:f3:4e:b1:35:3b:
79:91:fb:fb:cc:f8:4c:ba:21:5d:42:dc:61:6a:f7:85:86:89:
79:0f:0e:41:f2:d7:49:ed:95:b2:71:35:8b:cf:dc:96:fd:b4:
c0:5e:fa:43:63:9e:24:74:f4:3d:e9:da:6d:46:94:74:84:e9:
d7:f2:af:1e:4e:68:44:3a:ff:d5:03:81:a4:3d:e5:f9:e9:56:
4c:c5:57:19:b1:f9:6c:0b:3b:66:d5:16:96:4e:ff:b5:d2:cd:
3d:6d:1a:f4:ad:fc:7c:cc:c8:f0:ba:37:df:b8:cf:ed:bc:9f:
af:17:e4:1c:95:dd:24:c2:f7:81:fd:b2:2e:7e:44:6a:59:73:
6a:f2:7e:0e:9b:76:78:2e:4d:a1:4a:51:81:7c:72:cd:f0:b5:
8c:4d:96:82:1a:8d:27:1a:b9:da:31:72:d6:d6:ea:c6:3f:59:
bb:cb:3e:58:12:17:79:f8:52:27:61:83:50:55:43:dd:ee:81:
ce:e3:65:5b:db:19:40:29:b5:61:27:20:96:79:ee:94:5a:1f:
c5:57:c9:3c:d1:ed:ba:e9:55:0b:88:67:b0:33:8e:4f:d4:1f:
95:02:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:10 2025 by rpki-client