Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pmuJOhOFvg8OFhpQeGt7s6S93CA.roa
File: pmuJOhOFvg8OFhpQeGt7s6S93CA.roa (raw, json)
Hash identifier: dY5rc3aryuOavTPLx8IBT1HiO0vLQZrNARiuljKAKUU=
Subject key identifier: A6:6B:89:3A:13:85:BE:0F:0E:16:1A:50:78:6B:7B:B3:A4:BD:DC:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196453F7E204C32287B820ECACF630ADC71
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pmuJOhOFvg8OFhpQeGt7s6S93CA.roa
Signing time: Thu 17 Apr 2025 19:35:10 +0000
ROA not before: Thu 17 Apr 2025 19:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:3f:7e:20:4c:32:28:7b:82:0e:ca:cf:63:0a:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 17 19:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66b893a1385be0f0e161a50786b7bb3a4bddc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:98:a0:60:0c:42:32:09:4c:d5:1b:c2:cd:
c4:8e:ac:bd:0c:95:ce:dc:90:7b:f4:65:bc:21:c6:
16:28:d7:d8:aa:89:7e:2f:82:9c:05:67:ff:1c:98:
33:10:85:0b:69:92:99:53:5b:72:1e:2c:b7:8a:b6:
32:fc:15:ee:cd:89:72:2f:db:e2:2c:c6:4b:64:ef:
4d:6a:63:31:1c:1c:54:f5:97:7c:08:64:b2:93:e3:
b1:42:a6:56:be:90:8c:99:94:1e:c5:9e:de:d5:ec:
e5:cc:67:23:e0:b5:82:a9:02:3a:9d:67:63:a9:e0:
65:fa:68:87:88:20:5d:28:4f:6b:8a:bb:7e:bf:89:
f3:e4:f9:a0:bd:e3:2a:ba:1b:c3:f5:ba:52:05:9b:
b6:c8:2e:22:9e:16:6c:48:52:7b:28:fe:dc:f8:a3:
50:3f:cc:e9:2a:89:f6:8e:99:74:33:65:1b:2e:41:
c1:12:d4:6b:97:f5:81:36:62:f6:74:4c:e2:eb:79:
4f:83:1d:2e:9d:48:5a:57:1a:95:cb:31:66:50:5b:
db:41:73:9c:ff:3d:5e:35:21:ef:98:72:90:7a:01:
26:5b:90:ca:b0:e0:4e:26:7b:9f:d6:b9:3f:93:5c:
6e:43:b2:63:79:b7:c6:2d:dc:b7:df:53:38:42:84:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:89:3A:13:85:BE:0F:0E:16:1A:50:78:6B:7B:B3:A4:BD:DC:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pmuJOhOFvg8OFhpQeGt7s6S93CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bb:0b:88:12:66:55:66:2a:6f:6e:ad:fb:3d:8a:51:4e:c8:
78:6f:77:46:f9:6a:b1:01:6d:a7:38:2c:cc:92:1b:2f:1a:e7:
e0:30:e2:d4:82:61:c1:6b:31:e5:b1:51:16:4f:b7:be:44:92:
4a:f0:e3:d2:46:1b:7c:89:d0:04:9a:02:64:46:50:a6:4b:fd:
d4:9a:71:90:8a:8c:c7:e6:20:04:5e:1e:a6:a7:ce:95:71:bb:
b6:ed:88:29:a4:f7:a0:ad:52:aa:38:3a:ec:64:d3:16:f9:4e:
46:57:f1:af:56:b3:e4:50:bc:fa:1e:32:56:72:d2:42:88:bd:
1e:6e:fe:46:78:89:ab:91:70:9d:74:23:8d:9a:ad:d1:53:e5:
be:9e:57:f1:ff:21:f6:34:c4:14:be:11:79:de:eb:9d:ac:c2:
1d:19:12:c1:7d:e7:3f:31:a0:c9:ff:e8:21:42:49:20:2c:d3:
8b:d2:b8:cb:8d:35:62:c6:68:21:c2:fd:ab:84:b5:4b:45:50:
b7:59:1f:b9:2a:af:2b:d4:54:1c:2d:f5:fd:5f:a6:7c:1a:01:
ed:bf:23:c9:54:21:21:07:f0:33:e3:a0:58:21:ea:ea:d7:d1:
63:df:38:bc:61:0f:85:65:bf:c7:9d:c1:4f:06:55:a8:f1:a9:
86:fe:64:a5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZZFP34gTDIoe4IOys9jCtxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDE3MTkzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjZiODkzYTEzODViZTBmMGUxNjFhNTA3ODZiN2JiM2E0YmRkYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx96YoGAMQjIJTNUbws3Ejqy9DJXO
3JB79GW8IcYWKNfYqol+L4KcBWf/HJgzEIULaZKZU1tyHiy3irYy/BXuzYlyL9vi
LMZLZO9NamMxHBxU9Zd8CGSyk+OxQqZWvpCMmZQexZ7e1ezlzGcj4LWCqQI6nWdj
qeBl+miHiCBdKE9rirt+v4nz5PmgveMquhvD9bpSBZu2yC4inhZsSFJ7KP7c+KNQ
P8zpKon2jpl0M2UbLkHBEtRrl/WBNmL2dEzi63lPgx0unUhaVxqVyzFmUFvbQXOc
/z1eNSHvmHKQegEmW5DKsOBOJnuf1rk/k1xuQ7JjebfGLdy331M4QoT4BwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKZriToThb4PDhYaUHhre7OkvdwgMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcG11Sk9oT0Z2ZzhPRmhwUWVHdDdzNlM5M0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQDHzgIAwQA
Hzh+AwQBHziOAwQCHziUAwQAHzlyAwQAHzl0AwQAHztPAwQAHzvkAwQAHzvmMA0G
CSqGSIb3DQEBCwUAA4IBAQCwuwuIEmZVZipvbq37PYpRTsh4b3dG+WqxAW2nOCzM
khsvGufgMOLUgmHBazHlsVEWT7e+RJJK8OPSRht8idAEmgJkRlCmS/3UmnGQiozH
5iAEXh6mp86Vcbu27YgppPegrVKqODrsZNMW+U5GV/GvVrPkULz6HjJWctJCiL0e
bv5GeImrkXCddCONmq3RU+W+nlfx/yH2NMQUvhF53uudrMIdGRLBfec/MaDJ/+gh
QkkgLNOL0rjLjTVixmghwv2rhLVLRVC3WR+5Kq8r1FQcLfX9X6Z8GgHtvyPJVCEh
B/Az46BYIerq19Fj3zi8YQ+FZb/HncFPBlWo8amG/mSl
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:57:51 2025 by rpki-client