Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BomC4yiSLoIDYhICIcblMvrz0As.roa
File: BomC4yiSLoIDYhICIcblMvrz0As.roa (raw, json)
Hash identifier: birOymEGddg+xXwDV7Kc9dX5QsFNSGKmOkSJtfWspYM=
Subject key identifier: 06:89:82:E3:28:92:2E:82:03:62:12:02:21:C6:E5:32:FA:F3:D0:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019690ACE05BF69EB05D331E3803BE92B965
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BomC4yiSLoIDYhICIcblMvrz0As.roa
Signing time: Fri 02 May 2025 11:06:10 +0000
ROA not before: Fri 02 May 2025 11:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213724
IP address blocks: 31.57.103.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:ac:e0:5b:f6:9e:b0:5d:33:1e:38:03:be:92:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 2 11:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=068982e328922e820362120221c6e532faf3d00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:55:6a:4c:3f:f5:e0:52:70:89:0f:26:7d:
0a:db:65:6f:1f:e0:ad:70:e0:68:83:c9:9d:6b:5b:
1e:ca:37:97:c7:d7:ee:45:3d:d5:60:e1:03:ba:e5:
f4:6c:c9:c9:0e:9f:28:19:e7:8d:21:2f:80:2c:8d:
fa:b9:20:33:d2:aa:ce:ef:47:22:70:b9:5e:00:f8:
7b:44:d6:7b:da:c3:98:49:66:11:70:c9:e8:28:b2:
40:eb:9e:4d:c4:32:a3:b5:88:ec:3c:82:ce:13:f5:
9a:4a:99:b0:e4:a0:a6:26:1f:94:c2:1f:71:f5:76:
e1:21:2a:8d:3e:0c:6e:b0:a5:4a:2d:66:07:2a:dc:
2b:fc:99:d5:bd:08:44:d5:b3:e4:12:c4:92:5f:54:
ce:16:b6:67:51:b0:cc:67:fb:c8:9e:45:b8:e6:ad:
06:7b:54:cf:58:12:e9:e9:20:74:63:48:a1:14:5b:
fb:0d:79:a6:01:ce:92:83:67:30:12:0a:19:bf:fd:
af:88:0d:37:05:f0:6e:c5:65:1a:58:76:b3:67:b9:
ed:b4:2e:41:fb:85:0c:0c:eb:a4:2b:9b:0e:fc:9a:
16:d7:d9:c4:13:11:d3:57:13:08:16:8b:79:c1:56:
d6:46:12:2a:67:1d:3e:fa:2e:b0:ca:db:16:ee:41:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:82:E3:28:92:2E:82:03:62:12:02:21:C6:E5:32:FA:F3:D0:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BomC4yiSLoIDYhICIcblMvrz0As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.103.0/24
31.57.111.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5f:79:e3:ce:e0:73:c2:61:23:45:d0:24:42:e7:d3:1b:9f:
21:9d:f8:bd:5a:7b:12:78:8c:b8:48:6c:ca:c5:a7:a9:03:80:
e6:2b:1b:fa:e0:b9:61:17:3b:f6:6f:80:14:1f:6d:eb:98:83:
ff:07:e1:0f:15:a7:29:4d:82:89:82:15:0e:61:60:cf:2b:0a:
47:8a:d3:4e:db:45:5a:8f:7a:5e:04:a5:31:9b:83:72:0f:63:
aa:5b:09:b0:ff:3e:60:f1:a7:aa:89:df:e8:f1:69:dd:e3:61:
88:1f:36:5d:d3:18:95:66:dc:3c:24:3b:17:ab:b2:44:f9:a1:
f0:eb:1b:33:af:91:1f:2f:d1:ab:d5:3e:34:d1:fa:22:c8:2c:
26:6e:33:74:ca:4d:cc:88:82:9a:aa:9e:fd:75:2b:e4:64:51:
30:ad:9a:87:6a:18:a0:12:80:b7:4d:82:31:d9:ce:75:07:e4:
2a:67:da:4b:2f:74:f0:33:8f:0f:f0:0f:84:fe:83:44:09:a4:
76:2f:c6:9e:e3:20:ad:d2:51:21:95:ac:39:8b:ae:8e:86:9f:
ad:f4:2d:2b:17:e6:38:45:99:f4:ed:45:71:ed:32:18:70:93:
b9:8c:80:ae:72:4d:b2:9f:81:b2:c7:5f:b0:47:88:d1:f7:76:
5e:e8:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:47:24 2025 by rpki-client