Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uHyPmrQTr8wieP5mmiTRejlGT5k.roa
File: uHyPmrQTr8wieP5mmiTRejlGT5k.roa (raw, json)
Hash identifier: PZLidCPEALaO+hb7hAbktwAsDgVk1TjS467k6wJYcE0=
Subject key identifier: B8:7C:8F:9A:B4:13:AF:CC:22:78:FE:66:9A:24:D1:7A:39:46:4F:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FEA347145CF740F0F52969C76C312B34
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uHyPmrQTr8wieP5mmiTRejlGT5k.roa
Signing time: Fri 23 May 2025 19:33:55 +0000
ROA not before: Fri 23 May 2025 19:33:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216324
IP address blocks: 31.58.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:a3:47:14:5c:f7:40:f0:f5:29:69:c7:6c:31:2b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 19:33:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87c8f9ab413afcc2278fe669a24d17a39464f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:da:c0:f6:7f:cd:63:dc:98:0d:f4:e1:67:
f4:6d:72:e0:76:5e:a8:68:0a:ce:02:97:8d:e6:be:
8d:a9:0a:5a:f6:27:3c:c2:f2:1d:31:97:04:c0:af:
cf:06:54:fc:b2:3a:d9:5f:2b:46:c7:10:1d:69:6e:
96:00:52:d2:3f:8f:76:7e:ca:01:78:e3:91:05:74:
55:e9:b0:43:a2:8f:49:ea:f7:85:40:79:98:89:5f:
d8:c3:6c:60:ae:01:21:38:51:f6:a2:84:c6:3d:b0:
e6:88:e1:c7:30:a7:93:d2:e3:63:86:9b:10:0e:fe:
dc:46:60:d9:f5:3c:c3:cc:52:bd:d3:54:05:b4:12:
e3:26:db:45:f3:5a:76:b7:93:53:89:93:4e:83:66:
09:16:dc:a7:58:69:9d:6a:a2:c9:50:ec:64:3a:ae:
18:de:61:81:f1:19:bb:e9:90:61:e5:6f:25:1b:ee:
6a:e8:fe:07:bb:3e:7d:c3:a4:d2:97:76:45:2b:50:
21:4c:14:69:37:2c:5d:32:ba:ba:49:56:e0:81:30:
d8:06:57:67:59:ce:07:7c:81:a8:e7:c4:3e:c1:24:
6e:c3:3b:2b:b0:68:6e:80:89:0d:39:9f:37:2d:ea:
16:3f:d3:42:75:9f:2e:91:aa:e5:ea:3b:1e:05:f7:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:8F:9A:B4:13:AF:CC:22:78:FE:66:9A:24:D1:7A:39:46:4F:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uHyPmrQTr8wieP5mmiTRejlGT5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:58:dd:c5:b2:05:87:f5:4f:d9:56:1b:56:59:70:ab:d7:33:
d0:c0:be:90:4c:77:63:04:bf:f3:be:d2:b0:a7:71:4a:67:4e:
68:54:8f:d6:26:7f:5d:f2:a7:27:7c:7f:29:c1:52:47:e6:7a:
3e:55:c8:03:21:f0:d4:1f:92:5e:ef:49:f2:93:40:e4:a5:19:
28:cf:c8:a3:4a:2c:98:aa:ec:16:42:6f:1d:5d:b2:e9:48:b5:
b7:40:c6:79:fe:09:d2:fd:63:13:3d:69:2a:12:8f:84:17:c2:
2f:03:c4:77:39:e7:0e:19:fc:6c:e5:4a:7c:93:72:fd:2e:6f:
00:e2:a6:05:a4:0a:3b:7c:84:43:66:bd:5e:8e:50:e4:e3:91:
0a:59:43:ff:72:d3:bb:bb:cd:d5:87:fc:0d:4a:ce:b5:62:2b:
83:4f:82:eb:ba:5c:d0:b8:e1:66:cb:32:e6:69:4e:21:ce:83:
ae:f8:de:08:55:39:f9:7e:5b:d3:46:09:61:66:cf:3f:47:d5:
d7:e6:be:3d:4b:64:fb:49:26:6d:d2:e4:4f:bc:d0:df:bd:b2:
95:f7:fa:de:e3:92:93:c2:88:66:b5:6c:c4:df:fa:47:1f:64:
6e:4c:f1:93:71:ee:c9:78:6f:92:ba:63:5e:be:e6:08:32:91:
5a:ea:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:36 2025 by rpki-client