Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UVLkmJQkdmumtJjefQZM4TiLd6M.roa
File: UVLkmJQkdmumtJjefQZM4TiLd6M.roa (raw, json)
Hash identifier: 68cP79pQS9t+tUY/tGhOwv3MzGmbiSKQa4d7bvAvrXU=
Subject key identifier: 51:52:E4:98:94:24:76:6B:A6:B4:98:DE:7D:06:4C:E1:38:8B:77:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197405E1A3F00B365203D6699AFA353CCC1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UVLkmJQkdmumtJjefQZM4TiLd6M.roa
Signing time: Thu 05 Jun 2025 13:53:18 +0000
ROA not before: Thu 05 Jun 2025 13:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.135.0/24 maxlen: 24
31.57.168.0/23 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.216.0/23 maxlen: 24
31.57.250.0/23 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.40.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:5e:1a:3f:00:b3:65:20:3d:66:99:af:a3:53:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 5 13:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5152e4989424766ba6b498de7d064ce1388b77a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:a5:0e:54:1b:4a:d1:11:77:d4:6a:ef:7d:
ab:c4:c7:3d:4e:c9:e2:7a:77:6f:67:9e:01:21:5e:
ec:29:97:31:39:f1:08:bb:ee:48:e4:b7:7a:7c:21:
23:ce:83:4b:c3:ff:8b:ae:c3:34:36:ba:20:55:d7:
b2:0c:20:4b:db:13:90:5a:ca:b1:96:20:e9:65:d3:
85:92:bc:ce:a4:db:a2:aa:33:41:07:5d:5d:0e:99:
a4:98:f7:d2:0c:bf:a6:f7:d7:ff:1c:40:34:9f:cb:
80:89:f4:c5:1c:92:63:3b:75:6e:04:cc:7d:c0:0a:
f1:4b:e9:d1:3f:dc:c7:3a:a9:5d:1a:e2:07:77:39:
53:7b:9a:9c:59:cb:75:e5:91:9b:9a:8b:0a:1c:da:
44:c6:36:89:33:1f:28:28:c8:a2:d4:71:ff:88:60:
7a:e6:56:1b:f7:56:ab:b8:af:2e:f7:bc:d5:e7:33:
4c:b1:e4:8e:3a:ea:0e:82:b0:e0:47:94:54:17:bf:
2d:45:28:22:a6:a4:ee:45:a7:63:45:10:f0:ba:1a:
45:1e:e2:32:48:dd:50:e1:ff:d7:0d:95:7d:97:1a:
9f:93:18:c6:e2:73:65:83:45:66:c1:bc:7b:f1:e6:
42:77:97:b9:05:47:5a:d8:1c:bc:7e:9f:56:09:1b:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:E4:98:94:24:76:6B:A6:B4:98:DE:7D:06:4C:E1:38:8B:77:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UVLkmJQkdmumtJjefQZM4TiLd6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.57.36.0/23
31.57.135.0/24
31.57.168.0/23
31.57.184.0/23
31.57.208.0/22
31.57.216.0/23
31.57.250.0/23
31.58.76.0/22
31.58.92.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0/24
31.58.240.0-31.58.244.255
31.58.250.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.140.0/22
31.59.148.0-31.59.165.255
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.16.0/21
217.60.28.0/22
217.60.40.0/22
217.60.64.0/18
217.60.187.0/24
217.60.196.0/23
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:61:35:c3:a7:96:e9:f1:b1:e2:5e:12:5e:c1:93:0e:3c:21:
b6:ab:45:66:75:1e:18:fa:0e:89:ce:98:de:4a:a7:be:3c:eb:
39:73:41:4d:ca:65:7d:7b:83:b4:5f:fa:06:b0:d9:4e:6d:bb:
56:ad:de:5a:c2:ba:7f:c2:8b:e6:b9:3e:0a:21:0e:c8:a5:3f:
52:40:00:4c:4e:8f:62:95:9e:8e:60:b4:f7:01:a0:0f:2c:c9:
66:9c:06:38:82:b8:85:f1:96:9d:d5:07:a7:0e:07:39:2a:6a:
10:50:fe:39:4e:9e:6d:7d:69:4e:42:a3:34:7c:9b:36:1d:1f:
f0:e5:a7:a6:ba:33:ea:50:a9:70:1e:7b:3c:5d:f1:d7:60:30:
a8:f5:ad:e2:a8:b1:d1:46:44:ed:a2:0d:01:7d:da:34:ff:2c:
4a:86:5c:36:e2:29:f7:bf:f5:eb:86:a8:3b:64:4a:05:1f:3e:
01:26:ab:81:29:7f:61:f2:3c:51:9e:30:28:90:74:22:ec:b9:
64:e7:f3:0b:c8:88:58:83:f1:2b:c6:67:26:24:e6:12:29:56:
dc:27:58:bb:47:1c:9b:e5:fb:3c:11:e9:9b:2f:9d:e4:ff:71:
7a:1d:b3:af:7e:bd:dc:62:25:94:6b:9f:a8:e6:f6:3b:a9:13:
ae:12:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:28 2025 by rpki-client