Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iGwq-GsgDwR-vXjNoCE4_7SThe4.roa
File: iGwq-GsgDwR-vXjNoCE4_7SThe4.roa (raw, json)
Hash identifier: H1Md0ccEiYAEKALISPshDLvPf2fcaSvWI34OQyQUwKQ=
Subject key identifier: 88:6C:2A:F8:6B:20:0F:04:7E:BD:78:CD:A0:21:38:FF:B4:93:85:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019765B6093B630715CD3462723B455BB239
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iGwq-GsgDwR-vXjNoCE4_7SThe4.roa
Signing time: Thu 12 Jun 2025 19:55:18 +0000
ROA not before: Thu 12 Jun 2025 19:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.56.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:b6:09:3b:63:07:15:cd:34:62:72:3b:45:5b:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 12 19:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886c2af86b200f047ebd78cda02138ffb49385ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:d5:ee:a1:ff:9c:e0:59:7d:e8:b2:af:00:
93:dc:b5:3d:3c:f5:75:b2:39:9b:dd:e3:4c:b6:c7:
e5:f6:7e:a8:2a:02:67:1e:27:9b:a4:2a:ad:c6:b8:
fb:04:76:83:e0:60:c2:57:cb:a9:74:a4:23:e6:38:
7d:b9:e1:df:10:f9:af:7d:75:67:94:40:c4:13:81:
b9:d0:c8:ff:1e:69:1d:b2:fd:9e:2f:a4:71:e5:27:
96:df:6d:67:d4:2f:11:96:a3:20:fe:31:e1:43:9b:
34:bd:69:8c:38:12:52:ac:e9:15:18:6c:16:42:e8:
af:b0:82:05:b2:7e:f7:6c:cc:f8:1b:95:c5:3b:a8:
c2:92:ea:e3:6c:13:88:ed:2e:fa:d9:53:62:66:ff:
05:54:fd:65:a3:ea:ec:bd:9f:18:f7:18:28:f7:76:
ae:88:06:0c:db:49:50:9c:74:c2:6b:3e:a0:0c:a5:
4b:c8:20:18:23:85:03:a3:e6:3a:23:f1:06:76:7c:
ee:7c:3c:86:a9:25:5f:ff:10:8f:4d:dd:09:a8:17:
69:08:b9:8f:0d:55:8c:c5:26:21:0b:6c:9c:14:10:
d1:5a:67:23:9c:06:7c:5a:20:62:fc:68:87:7a:d2:
40:c3:d6:43:6e:1a:01:81:44:d2:cf:41:ef:02:e1:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:2A:F8:6B:20:0F:04:7E:BD:78:CD:A0:21:38:FF:B4:93:85:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iGwq-GsgDwR-vXjNoCE4_7SThe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.211.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:29:1f:0f:0e:c1:05:6f:a2:33:1d:f1:71:ac:d4:3d:58:70:
44:2c:a7:e6:7e:5a:18:3a:14:18:17:7e:eb:b9:4c:20:6d:36:
75:5a:ae:2c:ff:e0:66:86:95:9b:22:7c:c5:93:23:c8:36:70:
cc:6c:8d:0b:fc:7f:b3:5e:a2:f2:c5:91:7f:cb:39:29:bf:a6:
cf:6a:3f:d4:d7:8d:60:49:e3:f8:5a:7e:58:c7:5e:ed:ba:10:
8e:72:cc:63:07:88:00:07:80:5e:79:a9:57:65:4e:f1:40:d3:
a9:1c:de:e1:37:ec:16:8d:e7:11:ac:36:4b:18:d5:bd:5a:85:
0b:a2:27:7d:cf:84:a6:d5:98:a5:ae:78:1f:4a:57:70:96:52:
7a:1d:4c:f5:0e:c5:f6:61:bb:44:a3:0f:29:e4:8a:eb:b1:75:
f1:1e:5a:8c:75:0e:a0:15:45:82:71:ea:79:16:56:e3:bd:e6:
1e:f5:99:3f:d0:26:b9:7e:3c:d8:46:73:fe:39:88:31:17:63:
5f:dc:7e:8c:0b:06:fd:a4:a6:a4:3c:9d:ff:4f:48:51:53:f9:
97:2f:41:8b:0e:a5:c2:6d:bb:ea:73:65:6e:b2:15:9f:4f:ac:
ea:23:99:65:d9:86:40:f7:75:27:de:9e:e5:54:28:3c:cf:bc:
da:93:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:06:06 2025 by rpki-client