Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a_e68_n0sN3VEmVslHQydhGBXkw.roa
File: a_e68_n0sN3VEmVslHQydhGBXkw.roa (raw, json)
Hash identifier: SbC1vRmx6M5FxczutOuoS1MY/rOC70asfKHVuxWm49Q=
Subject key identifier: 6B:F7:BA:F3:F9:F4:B0:DD:D5:12:65:6C:94:74:32:76:11:81:5E:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195EAA0A03123A1BFDD667EC53787072E83
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a_e68_n0sN3VEmVslHQydhGBXkw.roa
Signing time: Mon 31 Mar 2025 05:15:50 +0000
ROA not before: Mon 31 Mar 2025 05:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63902
IP address blocks: 31.59.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ea:a0:a0:31:23:a1:bf:dd:66:7e:c5:37:87:07:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 05:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bf7baf3f9f4b0ddd512656c9474327611815e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:96:fe:82:2d:99:79:e8:99:12:2c:dc:42:
fc:a5:10:b1:f6:63:5b:77:9f:2a:07:1a:4c:21:6b:
77:e6:a1:f0:05:58:91:f1:a6:05:39:0e:b1:68:85:
5f:0a:82:82:11:b7:01:82:22:f7:f2:89:e9:85:b4:
36:49:23:72:64:5c:cd:65:44:b8:d8:12:7e:c9:ae:
4b:ab:5b:4e:ae:c4:0f:c0:6f:bb:5f:30:ec:ee:0c:
2e:76:0b:75:02:54:c5:2f:fd:4e:18:89:99:9c:aa:
91:79:eb:ca:73:ba:14:7b:57:f6:ce:57:67:4f:6d:
4d:29:07:94:de:70:0f:47:5d:7e:ba:f0:90:97:87:
f7:5b:4c:35:13:2c:b6:cb:b1:89:c2:63:08:bb:b6:
a9:f2:a4:49:f4:3c:60:2d:32:b0:8d:15:b0:cd:24:
cc:52:e5:f2:7c:5a:83:b4:b5:15:82:d7:ad:04:67:
b5:0b:80:40:7b:2e:ce:11:c8:6c:69:f0:78:fd:d3:
f6:31:5d:36:46:0b:d2:55:72:d3:21:78:1b:e6:b1:
83:6c:72:11:8b:06:41:0f:a7:79:6d:8d:ac:2a:f1:
72:39:bc:4b:83:8b:ba:76:5c:57:75:6f:72:27:69:
ab:47:35:11:9c:d5:11:c3:4a:8c:58:15:ea:fe:18:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:BA:F3:F9:F4:B0:DD:D5:12:65:6C:94:74:32:76:11:81:5E:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/a_e68_n0sN3VEmVslHQydhGBXkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:83:3d:07:d8:35:66:0f:f2:ae:70:36:09:73:bc:7b:64:09:
0b:da:cf:e8:94:a2:9d:f1:7f:fd:19:db:75:ab:de:40:6e:7e:
6d:e9:1d:2c:6c:e1:23:e3:70:33:07:88:4a:55:92:17:24:61:
c0:6a:86:76:fb:5b:37:fc:45:09:ac:7b:a8:ec:54:a1:e9:4d:
2c:40:46:50:31:d4:2a:14:fa:b5:25:a6:ed:4d:9f:f5:86:dd:
90:5f:8e:f2:dd:f7:b7:c1:97:e9:fa:08:d7:58:d6:1b:9e:3b:
31:be:5e:0d:2c:c8:c5:91:4f:c4:5c:e8:78:3b:5d:d3:c6:f1:
9b:dd:29:9c:1b:fa:3f:7b:f5:b0:63:46:02:64:ca:fb:dd:a4:
f0:4d:70:ff:07:71:e9:21:20:98:da:ba:9e:47:31:6c:77:b5:
32:61:8d:08:4e:eb:c6:53:6c:a4:7b:8f:df:8b:bf:d0:35:b7:
5d:dc:5b:74:6e:ac:85:1e:31:b2:8a:c3:c8:e8:14:80:dd:c1:
97:bc:d5:2a:67:8e:b3:41:43:c9:c6:f4:5b:f2:da:4e:92:90:
3c:c9:f1:d6:a2:fe:c8:5a:fb:01:ad:4b:38:a3:18:09:aa:e0:
3f:dd:bb:7d:ed:16:f0:de:8f:69:4c:12:1b:70:ef:19:6e:a9:
f9:30:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:53:40 2025 by rpki-client