Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbZHbwt697lqhMyd5pEaDpMN04A.roa
File: CbZHbwt697lqhMyd5pEaDpMN04A.roa (raw, json)
Hash identifier: w8JMGCBuUNE9FBuFbmSkU8FKwtxa2vNDZwZFOnCfLs8=
Subject key identifier: 09:B6:47:6F:0B:7A:F7:B9:6A:84:CC:9D:E6:91:1A:0E:93:0D:D3:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196AA4D8B4F92914E80C2E23506C20332E2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbZHbwt697lqhMyd5pEaDpMN04A.roa
Signing time: Wed 07 May 2025 10:32:10 +0000
ROA not before: Wed 07 May 2025 10:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:4d:8b:4f:92:91:4e:80:c2:e2:35:06:c2:03:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 7 10:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b6476f0b7af7b96a84cc9de6911a0e930dd380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:86:9f:dc:0f:c2:4a:15:34:16:da:bc:a7:
95:41:36:60:79:2d:f1:5d:97:99:c4:6c:07:d0:1e:
7e:e3:64:ac:84:cf:dd:bd:1e:c8:ef:27:24:0d:97:
ac:70:c8:54:f6:c2:65:0d:f5:2c:cf:ea:a6:e9:2c:
26:cb:3a:70:ac:76:20:de:a0:64:e7:a7:12:68:e4:
da:b0:76:fa:90:29:3b:4f:f6:e1:8d:4f:27:6f:9d:
69:3e:a7:c0:4a:90:fb:90:78:5f:59:04:af:7f:08:
15:5d:d0:44:9e:64:22:1a:c8:78:ec:74:aa:05:13:
f4:0b:fd:b2:05:71:a0:ae:dd:30:6e:68:6c:7b:31:
22:c3:05:32:61:04:d0:83:fa:b2:2e:76:d5:39:68:
6a:7d:38:0d:35:3e:7a:16:b3:d3:7a:0c:4d:9b:8b:
ca:8f:a9:d7:37:18:9c:3e:fc:f0:07:5a:5f:6c:09:
2e:11:32:a2:f1:39:a7:0f:7f:66:02:6f:07:f3:f7:
80:e9:ff:e2:ad:29:a7:a7:8b:04:a3:1a:5a:d5:d4:
24:ec:60:a7:98:8f:69:7b:39:16:49:f2:56:ab:01:
cb:cb:3d:8f:58:f2:c1:fe:02:ff:bb:03:ed:25:b4:
ff:e2:a9:35:50:6e:f5:6f:5c:49:4e:2d:59:45:88:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:47:6F:0B:7A:F7:B9:6A:84:CC:9D:E6:91:1A:0E:93:0D:D3:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbZHbwt697lqhMyd5pEaDpMN04A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/22
31.57.38.0/23
31.57.46.0/23
Signature Algorithm: sha256WithRSAEncryption
96:1d:5d:f5:7d:50:7d:1d:66:86:6e:9c:2d:05:7d:49:c8:9a:
6e:f3:06:c9:fe:b2:39:7d:d6:74:51:64:fd:42:62:bd:e1:0b:
4c:20:2e:cf:dc:9e:0e:78:ea:26:7c:d7:97:bc:21:63:41:cd:
cd:0f:f2:5d:0d:37:ab:41:89:22:4b:51:c2:22:9c:7c:04:ec:
a9:26:51:b2:6c:95:34:05:38:bf:f0:28:07:52:5c:68:c2:bb:
ce:6f:5b:8f:75:5d:e8:61:25:da:39:d9:b8:e8:ff:1e:75:36:
87:f2:bf:a4:b1:5d:52:1e:46:79:15:dc:58:fe:b4:99:e9:e2:
aa:9e:65:52:24:4c:90:db:0a:83:ea:48:ad:6d:04:78:dc:3c:
61:b2:7e:16:60:58:4c:04:4e:08:ad:df:7d:b6:3d:76:5b:11:
78:ae:81:3e:bc:c1:ea:b9:2d:a9:af:ab:02:51:7b:b4:37:d0:
e0:c9:66:d6:d3:61:0d:22:73:81:81:5d:2b:a3:a1:df:a5:06:
d6:b3:5c:c9:28:ef:44:07:3b:49:55:3b:bf:28:b0:ec:27:cb:
d8:c4:9e:f0:14:44:0e:36:8d:5d:ef:6c:7f:88:4c:8f:d0:ad:
dc:8f:e7:6a:a8:4e:49:c3:18:84:60:68:f0:00:38:dd:f9:56:
e6:32:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:53:56 2025 by rpki-client