Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pTOJn9_vKs4ghmTx0KiWgwBsNIM.roa
File: pTOJn9_vKs4ghmTx0KiWgwBsNIM.roa (raw, json)
Hash identifier: Bf2kUiak1BHnMHwSEi0IyqWW/URKcBVOwXc14eIC1SU=
Subject key identifier: A5:33:89:9F:DF:EF:2A:CE:20:86:64:F1:D0:A8:96:83:00:6C:34:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01975ADFCE6ED447C798047C7DB52D3677CD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pTOJn9_vKs4ghmTx0KiWgwBsNIM.roa
Signing time: Tue 10 Jun 2025 17:25:06 +0000
ROA not before: Tue 10 Jun 2025 17:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 31.57.186.0/23 maxlen: 23
31.58.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:df:ce:6e:d4:47:c7:98:04:7c:7d:b5:2d:36:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 17:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a533899fdfef2ace208664f1d0a89683006c3483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:74:c1:81:f0:66:05:a6:41:60:a8:ca:93:
64:ce:a5:f0:db:08:37:7c:89:55:94:cb:2d:46:79:
32:ee:b1:cf:c4:ff:46:3f:c8:89:c7:9a:07:ef:75:
49:bc:7a:36:f8:c9:cc:61:0a:06:1e:4d:ba:ec:d8:
68:b9:b9:09:48:14:22:0f:f9:3a:c5:13:c9:41:e4:
84:43:0e:71:f9:10:99:ba:18:8d:6b:1e:af:49:de:
b6:73:98:6f:49:85:89:38:b9:e5:c6:54:2d:8d:04:
96:d6:52:4c:82:3f:82:58:63:61:90:df:ac:51:35:
2c:74:42:84:47:3f:3c:5f:dd:5f:1e:42:e9:94:66:
f5:3d:85:e6:68:4a:12:c1:52:0f:32:30:1e:46:d5:
c3:31:31:b3:91:97:5e:c3:e3:e2:5c:81:70:d2:56:
08:a5:83:4a:bd:76:16:84:c7:03:8b:af:53:a5:b3:
52:c8:19:d0:a8:0b:e5:6a:14:a9:e2:45:b6:40:00:
a0:13:da:6d:b0:0b:93:6a:ce:55:8e:4c:fa:2a:3f:
eb:f4:ff:dd:41:10:ba:ba:81:b9:d1:73:6f:cc:72:
43:c9:93:8e:df:43:ac:58:ff:17:ad:92:2f:4f:03:
1c:45:f9:3c:71:7f:82:78:77:6c:44:f0:dc:df:94:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:89:9F:DF:EF:2A:CE:20:86:64:F1:D0:A8:96:83:00:6C:34:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pTOJn9_vKs4ghmTx0KiWgwBsNIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.186.0/23
31.58.56.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bb:35:3b:f5:06:22:43:21:67:50:e8:10:1e:4a:4a:53:67:
af:37:7c:9b:a2:de:45:ca:a1:49:c9:fb:7a:e5:11:a1:db:cc:
50:11:0d:5e:31:15:aa:5d:f0:b3:5c:79:b0:7c:58:46:24:70:
07:63:1c:7e:25:93:4e:5e:b5:4e:ce:44:cc:fb:35:d5:38:ce:
b0:a3:2d:1b:32:9c:ef:90:b8:49:0c:38:6a:df:c8:2d:43:a9:
ab:eb:8c:e3:79:f8:62:43:d1:43:cd:b1:39:35:05:a7:0d:bd:
28:8f:ce:85:2e:f7:a9:7f:82:8e:ad:e0:32:a8:7b:71:23:8a:
0f:65:eb:f7:aa:b6:32:a8:eb:c8:be:a4:72:84:6f:53:d0:91:
e4:91:75:1b:e2:46:b5:84:b7:6a:96:3f:dd:58:89:bb:72:c9:
89:7e:72:97:6a:5b:df:0a:b0:17:5d:30:c2:92:8f:51:27:60:
a7:5b:de:0e:4e:33:86:71:50:3a:47:53:75:b7:15:27:08:db:
5a:1f:a2:8b:f0:7d:2e:aa:12:99:86:b5:55:aa:2a:0c:f7:ec:
dd:6b:23:29:db:ba:60:4d:9c:0b:32:58:ce:38:39:dd:db:ce:
b0:cb:0c:3a:0d:ad:b4:7c:95:42:46:df:d3:76:27:0a:b1:ba:
94:8f:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:12 2025 by rpki-client