Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FdslMC8t0DtwwzR6OgL7JsBCT6o.roa
File: FdslMC8t0DtwwzR6OgL7JsBCT6o.roa (raw, json)
Hash identifier: HtHMMMtWe+EfaLZx19F22p9nYW0yEse8GbewVLbngUI=
Subject key identifier: 15:DB:25:30:2F:2D:D0:3B:70:C3:34:7A:3A:02:FB:26:C0:42:4F:AA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196A581D3D03C5E0D7868585E73E068A032
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FdslMC8t0DtwwzR6OgL7JsBCT6o.roa
Signing time: Tue 06 May 2025 12:11:11 +0000
ROA not before: Tue 06 May 2025 12:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 31.56.241.0/24 maxlen: 24
31.57.40.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:81:d3:d0:3c:5e:0d:78:68:58:5e:73:e0:68:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 6 12:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15db25302f2dd03b70c3347a3a02fb26c0424faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:b2:6a:41:d9:bb:76:d0:85:78:2e:69:8e:
e1:06:55:68:70:38:b9:5a:10:8d:1f:fd:ba:1d:6e:
ca:a2:65:8e:73:68:00:61:71:e6:fa:91:e0:b2:0a:
2d:70:bd:87:ea:06:21:36:59:58:9d:95:71:8d:d6:
9f:4f:e2:13:07:f0:51:c0:1c:3f:f7:ae:2a:8d:7e:
9c:98:03:4e:9d:45:d2:23:3c:fe:c5:02:49:bb:8b:
45:88:46:b1:31:11:33:49:c5:19:51:5c:e9:f8:11:
bb:ce:97:58:38:79:dd:df:b0:c3:9f:72:49:86:e6:
95:eb:fb:93:c3:88:0b:a9:37:82:1c:25:09:44:b9:
08:e8:00:e4:3f:a0:40:3a:13:8d:49:7a:d5:b2:17:
12:a9:8d:7b:d2:28:9a:12:f9:c8:af:2a:5e:e5:cc:
c3:ae:15:eb:07:82:6b:bd:b2:15:74:52:e1:a0:21:
6e:b2:00:f2:82:99:d8:f1:7f:a6:6c:f4:ef:c1:a8:
7c:12:fb:9d:36:47:d9:84:0b:85:05:33:54:8f:77:
f2:4b:a6:7c:9b:19:7c:c0:77:8d:7a:b7:6b:e1:55:
5e:6f:6c:03:ad:98:8e:01:7f:f8:29:c6:f9:e3:65:
b7:ad:74:00:26:00:a0:03:6c:2c:0e:9c:98:f8:3b:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:25:30:2F:2D:D0:3B:70:C3:34:7A:3A:02:FB:26:C0:42:4F:AA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FdslMC8t0DtwwzR6OgL7JsBCT6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.241.0/24
31.57.40.0/24
31.57.115.0/24
31.57.244.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6b:df:0d:19:8f:11:6c:c5:f1:4c:e9:cb:01:bb:ed:4c:ae:
01:a0:79:0f:e7:da:f6:46:79:bd:50:a0:99:a5:d1:3d:3d:79:
fd:28:25:8f:d3:34:f0:da:26:29:4e:ab:1d:c0:4c:83:b2:f9:
27:e3:08:11:65:b8:c1:b5:96:d5:2f:72:81:56:35:18:fc:3f:
db:6f:30:c4:09:9a:4c:a8:3f:78:5b:69:d1:61:58:e0:04:88:
77:76:5f:c9:ab:9a:b3:77:3d:b9:b2:e9:d8:41:a0:26:29:4e:
eb:10:7e:cd:90:8c:a7:4d:30:fe:a7:cf:7f:c1:a3:ea:32:d6:
6a:c6:0f:aa:aa:7e:04:a5:08:81:f5:05:77:b9:bd:a1:91:4a:
50:37:6d:af:f7:37:6d:a5:4c:c7:7b:9a:e2:a4:92:5a:3a:a2:
a2:ba:61:0b:76:65:28:16:85:d8:19:f6:d4:aa:b8:12:ba:84:
8a:59:e0:66:2d:9c:b2:93:f3:28:56:a9:cb:83:46:75:d9:56:
29:9f:ce:33:cb:4e:35:bd:4b:04:b2:56:e1:9d:79:86:dc:42:
83:38:28:e1:2d:c4:21:6e:7d:85:f1:e3:48:fe:49:44:f7:fd:
12:9b:65:a4:4c:5f:77:a1:69:36:66:f7:cc:a6:96:d9:08:90:
4d:cc:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:03:32 2025 by rpki-client