Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J_IdJb5q6ANw4xoJv9LhgemHUlM.roa
File: J_IdJb5q6ANw4xoJv9LhgemHUlM.roa (raw, json)
Hash identifier: 56M+6zWX6eCV5F/SMNqL119CWR6I9VEtFaSC7rgFdFk=
Subject key identifier: 27:F2:1D:25:BE:6A:E8:03:70:E3:1A:09:BF:D2:E1:81:E9:87:52:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019778E143BCAA21A0E2515D05F6654C5769
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J_IdJb5q6ANw4xoJv9LhgemHUlM.roa
Signing time: Mon 16 Jun 2025 13:15:18 +0000
ROA not before: Mon 16 Jun 2025 13:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212666
IP address blocks: 31.56.213.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:e1:43:bc:aa:21:a0:e2:51:5d:05:f6:65:4c:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 13:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27f21d25be6ae80370e31a09bfd2e181e9875253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:ba:1a:ee:f3:13:e8:02:3d:de:8c:a9:48:
2d:06:5d:9e:96:9a:d9:54:55:9a:95:34:a8:82:c6:
3a:d2:38:d2:e7:f7:64:b6:18:ba:a6:2e:cf:ce:0b:
26:9f:1b:5a:1b:04:be:08:e7:2c:ad:0d:0c:7f:f3:
ba:81:f2:72:88:33:1b:39:66:c0:46:08:01:7e:89:
57:07:63:ae:55:28:38:ca:09:86:91:48:8c:91:e6:
e0:cb:7a:3e:2c:e2:66:c2:58:99:3a:df:e3:98:7c:
20:12:4e:e1:d1:ac:af:6a:7a:e4:0a:1b:41:c7:78:
bb:97:c0:ad:f3:4d:08:24:6e:da:8b:a0:d9:c5:47:
94:47:73:46:76:7d:d0:ee:c0:8c:8a:d4:fe:a8:3f:
5a:41:03:44:60:b5:cd:c9:e9:74:2a:ea:e7:bf:09:
68:59:63:ef:da:8e:4d:ca:93:25:ae:24:75:e1:e0:
56:22:5e:d9:25:96:7c:8c:bb:e6:e8:7b:cc:64:2b:
1a:44:dd:5e:7b:dd:da:ae:91:8a:53:41:a0:7d:02:
77:32:f1:7c:91:ea:cf:78:86:ec:c8:f5:50:48:86:
b6:ce:66:a0:73:77:ca:49:98:5c:fc:fc:5e:2b:10:
44:ac:3a:9f:9f:aa:ae:08:07:29:33:a9:60:13:a3:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:1D:25:BE:6A:E8:03:70:E3:1A:09:BF:D2:E1:81:E9:87:52:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J_IdJb5q6ANw4xoJv9LhgemHUlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0-31.56.214.255
217.60.242.0/24
Signature Algorithm: sha256WithRSAEncryption
91:15:97:fb:7b:a0:00:e9:ba:33:d1:93:78:dc:4c:30:75:1b:
45:90:c3:d9:66:6e:9f:8c:f5:c3:49:5e:1f:cb:42:06:fd:3c:
89:68:7c:a9:ee:39:1a:00:bb:cc:0d:c9:f1:6d:79:98:7e:60:
21:4f:22:83:f8:5e:10:75:d4:dc:9e:c0:63:8c:13:16:9c:09:
6b:ac:ad:ad:09:08:ac:4c:8c:52:a1:05:5b:96:ea:d6:1f:9e:
b3:8a:10:23:c7:24:ce:ef:70:e0:cd:6b:69:39:a6:1d:79:0c:
70:81:3d:08:3f:a9:65:02:4c:e7:84:18:44:f3:a2:ce:bd:75:
7a:ab:3f:aa:77:c7:22:23:58:cc:c5:95:9d:1a:d4:18:0e:9d:
c7:bc:66:a1:91:ee:69:76:72:47:f1:e2:72:b2:21:65:24:34:
99:8a:02:ae:4a:14:50:e9:e8:91:30:6c:a9:ea:16:5d:c3:70:
1a:5f:db:cd:4a:2b:81:b2:a8:db:03:79:a3:60:cc:25:cd:9f:
a8:2a:54:d1:0f:12:36:f2:b0:10:77:bc:04:70:b7:4e:a5:86:
fc:21:92:8f:13:ad:e4:9d:d1:e5:47:f9:ae:6e:e4:8d:66:96:
62:a2:9a:96:02:13:9d:1d:b0:e5:de:3c:72:52:93:7d:36:d7:
35:09:5c:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:02:46 2025 by rpki-client