Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S0d-iDMDEf4spjVbtv4J2NQY4PY.roa
File: S0d-iDMDEf4spjVbtv4J2NQY4PY.roa (raw, json)
Hash identifier: O8vvIeAImzLrjP+cxN7mjq+34HOyIxiI18/YyKR7h78=
Subject key identifier: 4B:47:7E:88:33:03:11:FE:2C:A6:35:5B:B6:FE:09:D8:D4:18:E0:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197440B43667EDF3847696288120CFCD56C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S0d-iDMDEf4spjVbtv4J2NQY4PY.roa
Signing time: Fri 06 Jun 2025 07:01:18 +0000
ROA not before: Fri 06 Jun 2025 07:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 31.57.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0b:43:66:7e:df:38:47:69:62:88:12:0c:fc:d5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 07:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b477e88330311fe2ca6355bb6fe09d8d418e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:d8:9b:6b:46:a2:1a:e9:81:d7:fc:21:05:
01:5f:ef:dc:3a:1f:0b:a3:00:44:6a:c6:81:6b:c7:
c2:f4:81:f1:e9:20:a9:44:39:03:f2:af:4f:19:29:
57:a6:fe:45:73:fd:16:07:f5:7e:f3:8e:8c:f1:bf:
95:bc:b1:02:85:a7:f7:e6:f6:44:e2:0b:ce:2c:4d:
d3:db:6a:7c:da:54:80:a9:c7:2b:5d:70:c2:89:76:
cc:3e:1c:cf:ea:69:a6:6f:ec:0a:eb:57:45:ce:5a:
04:9e:84:1f:71:37:cd:d0:a3:47:9d:df:76:7c:62:
4f:e6:b3:74:76:da:22:c6:2b:92:31:c7:b9:e4:c0:
fa:ea:27:ff:ff:df:a3:cd:82:e1:e7:59:b1:bc:43:
6f:6a:e5:f1:9a:20:35:ec:7d:ef:4f:7f:05:79:67:
0c:27:8a:38:be:e2:90:ba:83:bb:9d:8c:c1:bc:69:
1c:d3:44:ed:a4:18:03:98:92:7e:33:08:a4:42:db:
d5:f6:22:84:60:88:e0:ed:84:a2:52:9d:e8:d2:1b:
80:3f:3c:04:b5:8a:c0:27:80:0e:e6:7f:b6:b6:18:
d6:eb:8d:57:24:b2:c6:d6:59:2c:6f:2a:75:d8:b0:
56:72:bd:0b:92:d6:57:bb:fc:5d:ca:dc:91:fa:84:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:7E:88:33:03:11:FE:2C:A6:35:5B:B6:FE:09:D8:D4:18:E0:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S0d-iDMDEf4spjVbtv4J2NQY4PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.182.0/24
Signature Algorithm: sha256WithRSAEncryption
84:30:7a:e0:00:09:1c:b6:a3:9d:a0:48:c9:b0:61:a5:39:41:
89:46:c8:e7:e9:8a:5b:c2:59:8f:4d:27:4b:53:f5:ea:84:45:
69:f5:fe:c6:93:3a:8a:40:66:39:4e:3d:25:29:bc:d8:27:ba:
dc:0b:9a:20:31:ab:ef:ed:0e:64:88:5a:8f:c0:5d:08:e3:f5:
f5:17:76:c3:83:30:74:ff:2e:87:06:57:7b:e2:86:59:1e:aa:
23:59:6b:25:4d:d4:91:cb:9c:b1:93:3b:a0:1c:b0:8b:9a:c6:
6a:20:d4:84:db:96:fc:4a:58:1f:37:27:cf:22:ee:53:44:2d:
29:29:9d:91:1d:9b:64:47:06:ff:bf:0f:a4:07:4f:32:89:c6:
d8:bd:eb:6f:8f:8e:7e:69:70:c8:51:52:3c:b5:c5:92:e0:0f:
35:c0:70:21:b0:47:7b:83:38:ab:d4:eb:68:a1:15:22:1c:fe:
b1:e3:e4:25:7e:f3:8a:45:04:7a:87:18:04:65:84:6f:45:36:
dd:bd:dc:5f:ef:c8:0b:f8:d2:96:f6:24:b8:59:44:2c:ce:1d:
bb:4d:c1:5a:95:54:38:a2:6a:79:44:e9:bb:1f:2b:9a:72:7c:
6e:17:05:14:bf:9f:c6:00:f1:17:e1:17:f5:c8:a4:e1:69:d1:
6a:70:cf:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdEC0Nmft84R2liiBIM/NVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjA2MDcwMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjQ3N2U4ODMzMDMxMWZlMmNhNjM1NWJiNmZlMDlkOGQ0MThlMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7HYm2tGohrpgdf8IQUBX+/cOh8L
owBEasaBa8fC9IHx6SCpRDkD8q9PGSlXpv5Fc/0WB/V+846M8b+VvLEChaf35vZE
4gvOLE3T22p82lSAqccrXXDCiXbMPhzP6mmmb+wK61dFzloEnoQfcTfN0KNHnd92
fGJP5rN0dtoixiuSMce55MD66if//9+jzYLh51mxvENvauXxmiA17H3vT38FeWcM
J4o4vuKQuoO7nYzBvGkc00TtpBgDmJJ+MwikQtvV9iKEYIjg7YSiUp3o0huAPzwE
tYrAJ4AO5n+2thjW641XJLLG1lksbyp12LBWcr0LktZXu/xdytyR+oQV2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtHfogzAxH+LKY1W7b+CdjUGOD2MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUzBkLWlETURFZjRzcGpWYnR2NEoyTlFZNFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzm2MA0G
CSqGSIb3DQEBCwUAA4IBAQCEMHrgAAkctqOdoEjJsGGlOUGJRsjn6YpbwlmPTSdL
U/XqhEVp9f7GkzqKQGY5Tj0lKbzYJ7rcC5ogMavv7Q5kiFqPwF0I4/X1F3bDgzB0
/y6HBld74oZZHqojWWslTdSRy5yxkzugHLCLmsZqINSE25b8SlgfNyfPIu5TRC0p
KZ2RHZtkRwb/vw+kB08yicbYvetvj45+aXDIUVI8tcWS4A81wHAhsEd7gzir1Oto
oRUiHP6x4+QlfvOKRQR6hxgEZYRvRTbdvdxf78gL+NKW9iS4WUQszh27TcFalVQ4
omp5ROm7HyuacnxuFwUUv5/GAPEX4Rf1yKThadFqcM/f
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:59 2025 by rpki-client