Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfIgZasmyl_LsK1Q4sBGtWCbNto.roa
File: PfIgZasmyl_LsK1Q4sBGtWCbNto.roa (raw, json)
Hash identifier: VPDCqMrRLjlpG095cvAEWS37zLGxe6ajDWXe4SNqsYI=
Subject key identifier: 3D:F2:20:65:AB:26:CA:5F:CB:B0:AD:50:E2:C0:46:B5:60:9B:36:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197682D8C6FFF198FE1C1962D24FB57FAFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfIgZasmyl_LsK1Q4sBGtWCbNto.roa
Signing time: Fri 13 Jun 2025 07:25:04 +0000
ROA not before: Fri 13 Jun 2025 07:25:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44259
IP address blocks: 31.59.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:2d:8c:6f:ff:19:8f:e1:c1:96:2d:24:fb:57:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 13 07:25:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df22065ab26ca5fcbb0ad50e2c046b5609b36da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:18:b9:ce:bb:b3:8f:99:8a:7e:76:44:e5:
c6:11:96:a0:95:94:46:5d:ff:a9:ef:07:5e:f1:13:
e1:18:51:c1:d5:93:a2:d1:93:8f:66:45:4b:92:cf:
cb:05:92:c2:9b:72:d2:a6:2e:42:4c:f3:cf:c6:17:
62:a6:83:a6:24:57:d1:33:50:fe:34:a2:b9:b3:4f:
79:f7:ca:1e:ae:96:0f:fe:d8:98:64:57:41:8a:c4:
88:92:c4:5a:18:66:46:57:8b:fe:41:60:5a:1f:5f:
a5:f3:2c:84:67:31:33:9d:a0:e5:34:e8:e8:0a:a0:
25:00:9f:c9:da:30:5c:16:3b:d2:48:4d:7a:8a:95:
2f:6e:a6:35:3e:06:a0:4f:34:ee:28:61:03:48:1f:
c9:96:d5:e3:dd:6d:6d:a1:6d:31:7c:b4:d2:c8:44:
cc:87:42:14:b6:d2:d6:b1:5e:54:8f:18:88:9e:6d:
05:f0:d4:1a:d5:65:0a:09:ef:10:d9:21:1d:79:ae:
9c:ea:3f:7e:79:4b:13:20:7c:f4:57:4a:4c:14:78:
f3:e9:a6:dd:9b:86:c0:40:e8:2b:5b:57:c2:8b:12:
03:ca:05:e2:6b:25:00:be:ee:b0:f1:f6:10:6c:52:
39:0c:f7:49:83:9f:e3:07:fb:be:57:a1:49:9b:36:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:20:65:AB:26:CA:5F:CB:B0:AD:50:E2:C0:46:B5:60:9B:36:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PfIgZasmyl_LsK1Q4sBGtWCbNto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.184.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8b:19:25:2d:9b:da:3f:02:d1:3e:f7:84:f8:4a:e8:f6:04:
3d:a7:c0:62:01:7b:44:86:94:29:cb:1b:f2:5e:bc:d6:f0:50:
8e:c3:54:bb:fb:18:2b:60:94:ec:5b:47:5a:e9:ed:13:43:80:
be:49:83:5b:f0:98:dd:14:94:95:f8:3d:b2:5d:2f:b5:77:cc:
60:0f:15:38:20:d2:8d:4b:15:e8:b6:d9:de:15:10:c6:23:24:
a6:1f:cc:36:0c:28:6c:f0:c5:6c:5a:d6:b3:2d:70:df:c9:d7:
fc:d9:91:0b:ff:63:fe:f7:9e:bc:dc:a0:0a:a7:73:fc:37:ba:
2f:22:73:f9:31:22:6d:21:63:d6:25:75:69:73:af:6c:1c:15:
fb:0c:fa:5a:da:39:70:3a:26:f6:86:82:dc:18:b1:f2:40:8a:
38:3b:d6:8f:81:22:bd:58:c1:6b:e3:21:29:9f:e6:82:e0:9d:
72:84:eb:28:9f:50:c3:10:44:97:a5:1c:32:15:be:77:c3:a8:
af:26:f6:44:6e:63:6f:eb:62:29:a3:6e:6f:c3:f5:15:1f:97:
ea:e2:73:85:e3:3d:86:87:85:7b:61:f5:51:00:fc:3b:9f:68:
ed:86:91:78:41:b6:92:3a:95:83:a0:dc:ec:37:10:2d:c1:b5:
af:d7:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:27 2025 by rpki-client