Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GsHeGz_EDfGi306B-m9E8wXZIck.roa
File: GsHeGz_EDfGi306B-m9E8wXZIck.roa (raw, json)
Hash identifier: ZgC6vUnuEuNdENnQdJuRuq90eIN5SQaMXBCJW6VkoDU=
Subject key identifier: 1A:C1:DE:1B:3F:C4:0D:F1:A2:DF:4E:81:FA:6F:44:F3:05:D9:21:C9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197A61064212CE0DEF7D9C4053D706095E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GsHeGz_EDfGi306B-m9E8wXZIck.roa
Signing time: Wed 25 Jun 2025 07:49:41 +0000
ROA not before: Wed 25 Jun 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:10:64:21:2c:e0:de:f7:d9:c4:05:3d:70:60:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 25 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac1de1b3fc40df1a2df4e81fa6f44f305d921c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:b1:80:d0:19:a5:2b:91:25:df:a0:f5:05:
e5:fa:88:7b:04:5e:3a:fe:f0:f9:e2:75:fe:c6:d5:
7a:0b:65:e0:b6:1f:b1:5f:44:e9:30:f8:92:e8:dc:
39:38:4e:7b:6c:69:8a:2b:c3:2d:d4:55:5b:e5:d3:
99:c1:c9:29:87:c4:ad:af:46:b4:e5:18:6b:a4:19:
73:03:c6:34:53:6b:63:7f:95:95:a5:75:da:8d:72:
4b:7c:d9:7e:fb:0d:55:20:19:04:a4:97:c9:40:9f:
51:60:2d:8d:30:d9:bc:0f:ab:dc:2f:8c:19:d7:c1:
0f:2f:3b:54:ac:4f:19:3b:65:13:dc:95:34:0b:97:
f8:79:59:8f:85:31:8f:39:25:b7:df:81:6e:dc:ea:
26:f0:83:6c:0e:09:40:4f:44:cd:10:46:9f:64:b5:
bf:5c:ae:ce:68:2e:6b:54:60:90:e3:b5:d6:89:80:
f9:36:f2:45:bf:cd:0e:2c:ea:4f:f3:3a:50:46:e9:
9c:0a:32:d8:27:9f:06:a0:a3:cf:6b:78:95:25:a2:
8a:c9:ae:f5:39:78:a3:e4:74:6a:55:27:5b:af:1c:
52:8c:71:e4:56:15:99:76:4a:e8:3d:90:60:82:01:
3d:9c:50:80:10:f7:32:28:1e:0c:5e:72:b1:a8:22:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:DE:1B:3F:C4:0D:F1:A2:DF:4E:81:FA:6F:44:F3:05:D9:21:C9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GsHeGz_EDfGi306B-m9E8wXZIck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
31.57.150.0/24
31.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:6d:95:16:0d:70:db:1b:59:81:81:35:a9:47:c7:00:69:1d:
43:a9:22:6c:26:ab:de:80:47:08:d8:fa:76:32:2a:94:38:0e:
22:f7:49:38:fc:36:df:51:e4:7e:54:2b:c5:56:cc:2e:e8:2f:
90:94:8e:7e:c9:cc:4e:6a:52:87:55:e8:12:87:e7:2f:76:07:
32:51:24:d3:b0:14:04:24:bd:40:56:c5:bb:9c:8a:46:73:fd:
99:10:ad:66:ab:4e:4a:0b:fe:30:b8:c7:18:a6:c1:df:45:44:
14:bb:74:8d:17:36:67:72:74:b7:13:dd:00:a3:c0:cb:8b:6f:
ad:bb:3b:94:ca:e9:d3:ad:c1:d5:3b:01:95:82:c2:3e:74:4f:
1d:20:db:55:1b:57:db:6b:f2:3f:62:cf:84:17:e9:73:1a:6d:
8d:5d:0f:0d:67:2a:89:9b:77:4e:35:68:20:34:5f:5d:5e:03:
92:80:0a:ad:33:4b:c5:66:8e:ba:e2:ea:42:12:71:84:69:7b:
f8:cc:a2:18:56:78:d1:13:8a:85:ef:0b:4c:c5:b6:5a:bf:ad:
50:6c:5d:4d:80:cb:77:f5:62:06:03:70:d9:57:dc:8e:8c:ac:
6a:da:9e:fe:ff:1a:8a:2c:5f:f1:18:59:6a:10:1b:d7:5c:1b:
8f:a5:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:36:34 2025 by rpki-client