Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GeyjngNAn9ABYkgqXy_pZcGi2NY.roa
File: GeyjngNAn9ABYkgqXy_pZcGi2NY.roa (raw, json)
Hash identifier: QyqXBG09mGp5bGw8pOYIMgyvAypU4YMmfpAJkwgMxJI=
Subject key identifier: 19:EC:A3:9E:03:40:9F:D0:01:62:48:2A:5F:2F:E9:65:C1:A2:D8:D6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01965DF04A7A4EB1A478FC6DA6952057001D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GeyjngNAn9ABYkgqXy_pZcGi2NY.roa
Signing time: Tue 22 Apr 2025 14:39:10 +0000
ROA not before: Tue 22 Apr 2025 14:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.23.0/24 maxlen: 24
31.56.42.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:f0:4a:7a:4e:b1:a4:78:fc:6d:a6:95:20:57:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 22 14:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19eca39e03409fd00162482a5f2fe965c1a2d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:90:a0:94:13:09:41:b2:1a:47:55:58:0e:
97:70:3e:e1:f7:0d:30:f4:bd:ed:3d:6b:23:d4:f9:
2e:df:b4:b9:b6:6c:3a:e6:96:72:42:b6:60:d0:43:
3a:73:c4:db:da:7b:0d:ce:82:81:74:27:ab:72:01:
04:5c:16:86:8e:84:09:1b:1c:5c:b9:78:c4:ed:34:
41:61:9f:13:f3:c1:a0:cf:0b:07:cb:ac:e1:42:c9:
97:a5:cf:fc:da:fb:5b:24:be:02:b3:94:a5:dc:59:
b6:ee:58:2b:71:b4:f7:c0:d4:12:34:fb:dc:da:38:
80:73:00:a5:7a:8d:75:ec:fc:08:e2:99:9f:d0:24:
9a:9d:97:e7:4f:37:81:cf:dd:1e:c5:9a:ab:fd:ff:
56:ee:b0:84:b6:2d:2d:d5:4c:65:0d:6e:59:fa:85:
43:19:09:4e:b8:cb:88:f2:44:7e:18:12:d8:aa:2a:
22:ef:a9:5e:37:bd:1b:3d:72:94:3d:3b:56:c0:07:
59:00:50:94:ca:e6:84:2b:53:f9:9d:b1:13:cd:eb:
ce:6e:b4:ec:8c:55:f1:2f:d3:b9:3d:b4:43:14:3b:
59:22:04:5b:49:fc:03:f8:b3:db:f8:5c:a9:de:26:
48:5a:e0:ca:36:0d:89:a0:30:0e:4c:c9:a7:f5:60:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:A3:9E:03:40:9F:D0:01:62:48:2A:5F:2F:E9:65:C1:A2:D8:D6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GeyjngNAn9ABYkgqXy_pZcGi2NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.23.0/24
31.56.42.0/23
31.57.120.0/23
31.57.126.0/23
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.173.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
0b:f9:fd:bb:29:b8:f3:be:47:b9:e7:8b:4c:e2:bf:39:94:4f:
a7:7f:87:5a:a1:87:8a:65:c9:4b:2a:76:9e:65:23:68:b1:80:
10:a4:c1:a4:d5:70:a2:e2:3d:38:c5:a2:ee:01:96:e6:79:a0:
2c:e4:08:6d:61:7f:c4:a9:48:ff:ed:3a:b2:9d:04:6c:26:0f:
59:1e:ce:4d:7e:8b:dd:3f:5e:34:cf:b4:92:ce:c1:73:0c:dd:
17:21:3d:04:63:fd:20:dd:e7:b7:ff:73:2f:bf:90:96:fa:8b:
47:8a:5c:25:bb:da:b7:85:ab:f7:17:50:92:86:60:48:d4:ec:
8d:12:90:20:96:51:16:56:c2:ec:5d:08:ab:42:4b:2e:d4:c3:
f3:f8:63:82:ec:fd:f0:6c:53:ec:09:6b:c6:85:76:20:77:63:
fb:01:0f:e2:2a:36:e8:c9:af:07:1a:93:0c:8b:bc:04:47:db:
94:55:01:0a:b0:83:71:43:b3:8c:29:8d:cb:19:fb:9e:16:69:
28:19:6d:e8:0e:c9:8f:32:ff:64:a5:44:8a:40:52:82:fe:ae:
a3:d0:75:27:86:d3:8d:4d:1d:52:fe:97:98:59:b7:1c:5e:d6:
b1:b5:a0:e2:85:61:21:88:b6:e8:e7:34:78:eb:20:5c:86:91:
6f:b1:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:33 2025 by rpki-client