Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JS0wQhv-tww35v3h4CE8lZaVv4c.roa
File: JS0wQhv-tww35v3h4CE8lZaVv4c.roa (raw, json)
Hash identifier: x+fxBKFpYa98quNZxgXbIMPaf8d3MejlBGTiNsfIyO4=
Subject key identifier: 25:2D:30:42:1B:FE:B7:0C:37:E6:FD:E1:E0:21:3C:95:96:95:BF:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01963D2B52B07249643CCF65063332666285
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JS0wQhv-tww35v3h4CE8lZaVv4c.roa
Signing time: Wed 16 Apr 2025 05:56:11 +0000
ROA not before: Wed 16 Apr 2025 05:56:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 31.56.67.0/24 maxlen: 24
31.57.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2b:52:b0:72:49:64:3c:cf:65:06:33:32:66:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 16 05:56:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252d30421bfeb70c37e6fde1e0213c959695bf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:69:a8:71:78:da:29:ff:32:13:23:d3:8e:
f0:23:4b:e5:56:ff:2e:cc:fd:72:17:b3:99:56:ef:
ac:0c:2a:1c:4f:6e:e0:53:94:d8:c8:a0:6a:73:ee:
61:ad:e3:16:c6:e5:ef:2e:80:05:fb:69:ce:c0:17:
3a:63:71:20:84:59:d4:d0:47:5d:c4:22:ae:0d:08:
4a:7b:2c:75:a0:ec:08:22:8c:a8:b6:3d:26:b7:e7:
4f:df:77:40:a8:96:82:e8:be:c9:ab:25:f1:5f:69:
a4:32:39:a1:56:71:17:ca:8f:58:8d:d2:14:fa:b3:
e9:bf:d0:bb:93:15:18:88:cf:d9:1f:bd:08:0a:13:
0b:af:2a:df:fd:2d:50:d7:a8:1f:41:02:28:ac:1f:
d2:ad:6d:0c:51:2e:60:05:df:db:34:4b:b9:c8:f6:
79:6b:ec:6e:54:c3:b2:d7:d7:83:05:17:da:3d:ff:
02:a8:5b:fc:ae:2a:8e:ac:f0:51:ba:59:d8:22:15:
ef:b6:44:fb:5d:7b:48:1b:9a:61:f1:e0:97:14:ef:
fd:08:05:90:91:1b:d7:5d:86:ee:98:c0:27:85:a5:
e1:53:af:1e:76:d0:42:1c:c7:19:ab:9b:c8:98:87:
48:1e:ce:d0:12:7d:fa:af:e0:3d:1c:c2:6e:bc:9f:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:30:42:1B:FE:B7:0C:37:E6:FD:E1:E0:21:3C:95:96:95:BF:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JS0wQhv-tww35v3h4CE8lZaVv4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
31.57.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d8:a5:18:b8:a3:da:a6:4f:25:a7:f0:c8:f8:58:fb:96:ad:
0b:25:14:e1:62:1f:65:2c:7f:c6:1b:93:1f:d9:f1:d4:9b:dd:
89:02:97:e1:bb:2f:81:61:e9:21:d0:a0:55:d1:73:f9:90:a2:
92:a5:4f:c3:1d:97:e7:3a:6a:d7:e9:39:2b:ed:6a:04:da:90:
75:29:67:d3:e3:63:60:f0:7c:3a:6a:8a:64:a4:f6:f3:e2:0a:
45:60:16:95:d5:af:ce:f0:86:64:19:81:4e:25:08:7f:5c:ac:
d1:9c:75:73:39:b3:de:57:0e:cc:c5:fa:2b:1c:1f:d0:e0:8c:
cc:7d:72:a1:e5:9f:f9:ac:a9:77:42:99:b8:fb:07:08:ac:5f:
42:24:e8:fb:94:38:c5:c1:8b:12:28:be:be:2f:c6:e7:f2:3c:
cb:88:f0:50:95:8d:bf:d8:5c:f5:df:2f:ee:f5:57:f3:01:0b:
69:8c:15:f1:6e:e3:fb:87:31:ea:4b:38:72:81:14:c2:78:31:
6c:c8:aa:cc:7a:81:96:ee:c5:c1:41:5d:f9:77:13:c2:62:8d:
db:6d:c9:52:d4:e9:f1:90:3f:bb:60:2d:12:2f:00:59:39:ab:
ae:5a:e8:1d:4d:0c:2b:32:f4:df:e4:8b:02:30:fd:c9:f4:88:
84:7e:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:27 2025 by rpki-client