Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rBzg7OAHJz3dIh4XPAjiBO5QoqQ.roa
File: rBzg7OAHJz3dIh4XPAjiBO5QoqQ.roa (raw, json)
Hash identifier: pLssd9noBDNJxaiyb6qxfPAO0TE1uNUqtUmnKSIcnm8=
Subject key identifier: AC:1C:E0:EC:E0:07:27:3D:DD:22:1E:17:3C:08:E2:04:EE:50:A2:A4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01963542EBD96DB31616F38CA2D56AEB078B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rBzg7OAHJz3dIh4XPAjiBO5QoqQ.roa
Signing time: Mon 14 Apr 2025 17:05:00 +0000
ROA not before: Mon 14 Apr 2025 17:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214240
IP address blocks: 31.56.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:42:eb:d9:6d:b3:16:16:f3:8c:a2:d5:6a:eb:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 14 17:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac1ce0ece007273ddd221e173c08e204ee50a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:40:3d:07:62:83:a1:1e:a6:35:86:d5:13:
6c:b0:d8:9f:a7:03:5f:ee:da:49:c9:b9:fa:52:fb:
84:b6:fe:5f:0f:0c:10:8f:14:36:0f:7f:1b:a1:93:
b8:b1:c1:35:1e:3f:ee:45:3f:5b:9c:12:cd:a3:67:
bd:ed:96:d6:f9:b4:22:3d:a4:45:d1:07:a7:0d:0e:
3e:14:60:3e:5c:15:da:d4:2f:69:52:b6:81:b6:7e:
71:4b:d3:d3:b5:a4:0e:22:3e:9b:d9:42:a5:3b:2a:
f1:b5:d5:1c:31:c6:ba:62:b8:29:88:f8:da:d7:a4:
9e:65:99:d8:e4:49:21:a8:5e:e1:e7:f0:fb:78:e1:
ff:53:50:91:75:8b:88:1e:0c:c9:77:d2:77:0a:0f:
3c:05:f9:1e:c6:43:bf:08:21:04:8b:8f:66:3a:84:
7a:1a:4a:26:04:63:70:42:f1:97:6c:0d:7b:12:b4:
3d:10:c3:54:54:dc:61:4e:4b:40:ba:e4:46:f3:e3:
4d:08:44:fc:55:a5:4b:01:86:a1:02:0a:17:18:57:
7c:2c:0b:a6:32:1d:83:c7:a7:77:6a:ec:ae:08:2f:
e0:f2:a5:17:09:12:92:13:3c:83:0c:d6:65:48:de:
1d:ac:fb:5a:21:64:52:96:27:e0:9b:f6:9c:b1:6f:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1C:E0:EC:E0:07:27:3D:DD:22:1E:17:3C:08:E2:04:EE:50:A2:A4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rBzg7OAHJz3dIh4XPAjiBO5QoqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.68.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dc:d6:64:42:35:d7:58:d3:02:48:95:c3:20:e5:33:a6:aa:
6d:0f:c1:71:fe:1a:87:73:53:85:dc:bb:fe:17:5c:13:dd:ab:
ca:21:0c:22:3b:2c:f2:b5:5f:71:58:a4:49:00:93:cb:5c:d2:
8e:69:3d:c6:a8:f8:00:b6:a6:d6:b7:84:31:b0:8e:ae:1f:8c:
be:f6:7a:b9:fd:0d:07:1c:8d:33:3b:c0:c2:4d:6e:3f:e1:43:
ce:9c:50:89:c5:49:60:d1:b3:73:d9:24:0a:70:47:46:6f:de:
7f:aa:50:8c:5e:a0:bd:e5:01:3f:81:f2:6c:c2:e6:cb:c4:53:
94:8e:8d:cc:08:cc:8d:98:ad:a9:c0:04:40:1d:a8:28:d9:87:
64:b4:74:b2:f9:f5:21:3a:c2:01:d5:4c:90:e3:6e:52:2c:50:
a7:5e:f6:c3:b9:16:e0:10:f6:18:03:40:65:4f:c6:4c:53:97:
31:df:86:fa:94:fa:ee:d2:45:08:31:02:45:1c:c8:b7:52:62:
49:b1:49:f5:62:b4:67:ee:bd:2b:61:6a:b5:fd:8e:c5:7b:e1:
bc:b6:f4:51:a3:af:6f:02:7d:b9:ef:8b:f7:4e:4f:4f:7a:90:
25:2a:36:82:30:19:cb:7b:d9:a6:bb:84:44:4c:19:65:37:48:
43:1a:c5:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY1QuvZbbMWFvOMotVq6weLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDE0MTcwNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzFjZTBlY2UwMDcyNzNkZGQyMjFlMTczYzA4ZTIwNGVlNTBhMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvtAPQdig6EepjWG1RNssNifpwNf
7tpJybn6UvuEtv5fDwwQjxQ2D38boZO4scE1Hj/uRT9bnBLNo2e97ZbW+bQiPaRF
0QenDQ4+FGA+XBXa1C9pUraBtn5xS9PTtaQOIj6b2UKlOyrxtdUcMca6YrgpiPja
16SeZZnY5EkhqF7h5/D7eOH/U1CRdYuIHgzJd9J3Cg88BfkexkO/CCEEi49mOoR6
GkomBGNwQvGXbA17ErQ9EMNUVNxhTktAuuRG8+NNCET8VaVLAYahAgoXGFd8LAum
Mh2Dx6d3auyuCC/g8qUXCRKSEzyDDNZlSN4drPtaIWRSlifgm/acsW9fcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwc4OzgByc93SIeFzwI4gTuUKKkMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvckJ6ZzdPQUhKejNkSWg0WFBBamlCTzVRb3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhEMA0G
CSqGSIb3DQEBCwUAA4IBAQCI3NZkQjXXWNMCSJXDIOUzpqptD8Fx/hqHc1OF3Lv+
F1wT3avKIQwiOyzytV9xWKRJAJPLXNKOaT3GqPgAtqbWt4QxsI6uH4y+9nq5/Q0H
HI0zO8DCTW4/4UPOnFCJxUlg0bNz2SQKcEdGb95/qlCMXqC95QE/gfJswubLxFOU
jo3MCMyNmK2pwARAHago2YdktHSy+fUhOsIB1UyQ425SLFCnXvbDuRbgEPYYA0Bl
T8ZMU5cx34b6lPru0kUIMQJFHMi3UmJJsUn1YrRn7r0rYWq1/Y7Fe+G8tvRRo69v
An2574v3Tk9PepAlKjaCMBnLe9mmu4RETBllN0hDGsWs
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:02 2025 by rpki-client