Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yibgjzv51lbmyNOH1JGmmVaPPGM.roa
File: yibgjzv51lbmyNOH1JGmmVaPPGM.roa (raw, json)
Hash identifier: 7cYqwOTKigfsW+yjS9j2+baD8Aa7HiingO+b866kwXU=
Subject key identifier: CA:26:E0:8F:3B:F9:D6:56:E6:C8:D3:87:D4:91:A6:99:56:8F:3C:63
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196629EB833BF159F1D90D5C096D7C019DE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yibgjzv51lbmyNOH1JGmmVaPPGM.roa
Signing time: Wed 23 Apr 2025 12:28:10 +0000
ROA not before: Wed 23 Apr 2025 12:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 31.59.224.0/24 maxlen: 24
31.59.225.0/24 maxlen: 24
31.59.226.0/24 maxlen: 24
31.59.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:9e:b8:33:bf:15:9f:1d:90:d5:c0:96:d7:c0:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 23 12:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca26e08f3bf9d656e6c8d387d491a699568f3c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:83:42:b1:a5:d6:de:ff:6b:73:6d:01:4f:
60:46:cb:da:ba:42:61:70:cc:11:1f:75:26:ae:b2:
ca:dd:92:2c:ec:7c:d8:d5:6f:62:26:c7:df:38:4b:
66:bb:40:0c:35:99:35:cb:b2:aa:08:28:b4:3f:89:
6c:37:05:c8:52:25:a9:db:00:26:76:6d:7f:e5:72:
49:be:85:e0:7e:4c:a4:09:ef:b2:89:1f:82:b3:6f:
a7:0a:5e:fb:53:58:f5:d4:a8:bd:58:73:86:65:3f:
08:7d:3e:6d:49:5f:b7:e0:ed:84:97:6d:56:72:0c:
b6:44:d0:93:d0:03:03:44:b4:e4:ef:dc:9a:f0:28:
d8:29:0e:02:0e:00:d7:fe:99:04:88:58:11:79:5b:
b6:f1:a1:81:37:1e:ff:9c:d1:6c:82:22:70:e1:d3:
04:7a:06:08:25:58:00:46:70:92:58:dc:bb:d7:e2:
36:b5:ce:d9:81:a9:84:2b:6d:05:d7:1d:1c:a4:54:
6a:35:37:c5:a4:7c:c5:ee:ae:d7:0a:1e:e5:8f:2a:
d5:4b:84:df:9c:71:d0:89:c2:8a:f5:fc:82:f2:df:
44:53:19:24:ec:b9:59:b8:89:78:f5:69:66:d7:28:
4a:9e:10:8b:10:f9:54:46:38:74:cb:b2:47:00:a5:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:26:E0:8F:3B:F9:D6:56:E6:C8:D3:87:D4:91:A6:99:56:8F:3C:63
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yibgjzv51lbmyNOH1JGmmVaPPGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b8:22:ba:ee:fa:1c:05:c5:7a:8b:c4:b3:cd:5e:79:9f:ef:
15:fc:b9:34:6f:9b:e4:b9:38:11:43:ad:76:f6:56:d2:5c:cf:
c1:4e:c4:24:1b:ad:95:1d:61:fa:25:88:c8:4d:e5:01:be:a7:
21:e6:97:17:c9:36:1b:c5:09:86:65:b4:ed:6f:ff:3a:05:f1:
99:99:b5:ad:16:8e:9b:8f:ce:aa:3f:a9:82:45:17:f5:2a:a7:
17:a2:71:b9:43:83:23:db:a7:a3:c2:10:97:5c:53:b4:77:73:
17:52:6b:27:f7:9a:43:eb:a2:df:60:3a:c1:76:d8:f6:55:f7:
7b:c2:e0:db:ad:1f:bf:52:85:97:14:fc:c7:4c:63:69:3d:b7:
71:ee:61:b7:3d:06:f1:13:bc:ea:ec:0d:9d:57:0e:de:1e:cc:
ec:8e:57:ad:bd:e6:62:8b:91:95:cf:8e:d7:e1:5e:34:93:7a:
e1:2c:66:37:e8:e6:ad:ac:c2:c4:04:57:ce:bc:eb:96:03:98:
e5:dc:1b:ff:f1:2a:ba:86:96:b7:b1:07:10:31:d4:36:28:0a:
c2:5c:3e:c2:10:34:d0:18:c5:70:73:45:80:aa:5e:22:c7:ed:
fa:72:e3:33:9f:a9:c9:54:74:52:24:ab:e7:4a:6a:6a:94:e9:
aa:92:c3:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZinrgzvxWfHZDVwJbXwBneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDIzMTIyODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTI2ZTA4ZjNiZjlkNjU2ZTZjOGQzODdkNDkxYTY5OTU2OGYzYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze+DQrGl1t7/a3NtAU9gRsvaukJh
cMwRH3UmrrLK3ZIs7HzY1W9iJsffOEtmu0AMNZk1y7KqCCi0P4lsNwXIUiWp2wAm
dm1/5XJJvoXgfkykCe+yiR+Cs2+nCl77U1j11Ki9WHOGZT8IfT5tSV+34O2El21W
cgy2RNCT0AMDRLTk79ya8CjYKQ4CDgDX/pkEiFgReVu28aGBNx7/nNFsgiJw4dME
egYIJVgARnCSWNy71+I2tc7ZgamEK20F1x0cpFRqNTfFpHzF7q7XCh7ljyrVS4Tf
nHHQicKK9fyC8t9EUxkk7LlZuIl49Wlm1yhKnhCLEPlURjh0y7JHAKVyAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMom4I87+dZW5sjTh9SRpplWjzxjMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveWliZ2p6djUxbGJteU5PSDFKR21tVmFQUEdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzvgMA0G
CSqGSIb3DQEBCwUAA4IBAQAauCK67vocBcV6i8SzzV55n+8V/Lk0b5vkuTgRQ612
9lbSXM/BTsQkG62VHWH6JYjITeUBvqch5pcXyTYbxQmGZbTtb/86BfGZmbWtFo6b
j86qP6mCRRf1KqcXonG5Q4Mj26ejwhCXXFO0d3MXUmsn95pD66LfYDrBdtj2Vfd7
wuDbrR+/UoWXFPzHTGNpPbdx7mG3PQbxE7zq7A2dVw7eHszsjletveZii5GVz47X
4V40k3rhLGY36OatrMLEBFfOvOuWA5jl3Bv/8Sq6hpa3sQcQMdQ2KArCXD7CEDTQ
GMVwc0WAql4ix+36cuMzn6nJVHRSJKvnSmpqlOmqksMD
-----END CERTIFICATE-----
Generated at Thu May 1 07:55:21 2025 by rpki-client