Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SIML-kn5Ex7VjMqJPpy2pYxOdRU.roa
File: SIML-kn5Ex7VjMqJPpy2pYxOdRU.roa (raw, json)
Hash identifier: 3xfDPK0DoAdMk8arzhtjpAz4hezTzcMYPPJbUAhmaYY=
Subject key identifier: 48:83:0B:FA:49:F9:13:1E:D5:8C:CA:89:3E:9C:B6:A5:8C:4E:75:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196B56842162093F894C83BF305F6B9B58A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SIML-kn5Ex7VjMqJPpy2pYxOdRU.roa
Signing time: Fri 09 May 2025 14:17:10 +0000
ROA not before: Fri 09 May 2025 14:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214828
IP address blocks: 31.57.10.0/24 maxlen: 24
31.59.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:68:42:16:20:93:f8:94:c8:3b:f3:05:f6:b9:b5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 14:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48830bfa49f9131ed58cca893e9cb6a58c4e7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:30:ed:79:18:ca:77:cb:4a:24:de:a0:84:
7c:1d:ea:a1:d2:78:88:7e:9e:86:43:bc:c7:35:5b:
55:de:a7:51:57:96:23:4e:a1:a6:95:8b:2c:7d:ee:
50:6d:91:81:09:7a:36:a3:8d:74:6b:87:65:f5:3f:
e7:af:f2:37:52:31:5b:68:f4:ec:60:27:5b:64:70:
fc:2d:3e:da:cb:1a:49:1f:1e:8d:e5:e5:91:29:87:
4a:eb:c9:40:bc:74:ef:52:10:d5:d4:3c:d7:00:1b:
f5:17:6c:03:fe:a6:71:7f:6d:b9:39:ac:8a:39:e5:
16:02:f6:58:0d:e1:22:e1:a8:25:29:bb:b3:91:72:
e1:77:74:83:2c:cb:66:1f:2d:a2:78:a3:ad:fe:2e:
6e:7a:c6:cc:d0:79:24:eb:b3:b5:76:b0:da:15:52:
d4:38:20:c2:cd:c3:3b:a0:c9:27:10:9e:3a:ad:5a:
ce:1b:88:65:22:98:65:4d:1d:00:47:5c:9d:a5:fe:
62:14:2d:f6:24:7f:8b:7e:31:5e:63:31:6a:2e:ec:
f1:30:90:5c:0c:6e:43:eb:6f:d5:85:fa:52:b7:91:
36:8c:c9:a3:f7:a8:08:2c:39:b9:08:97:e4:1c:2b:
95:14:76:49:fb:2b:e8:6a:bb:4e:e1:14:b1:32:3d:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:0B:FA:49:F9:13:1E:D5:8C:CA:89:3E:9C:B6:A5:8C:4E:75:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SIML-kn5Ex7VjMqJPpy2pYxOdRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.10.0/24
31.59.128.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:82:f6:47:df:e9:7b:aa:e7:30:d0:6e:14:10:8c:27:77:35:
6e:c2:3f:bf:11:4b:cb:fc:d9:85:d5:c6:a4:6c:13:66:eb:1f:
b1:ff:28:65:05:40:1c:bc:ce:94:91:99:8a:29:2b:dd:fb:44:
92:d1:bf:8e:48:32:b2:a3:ed:3f:72:4a:cd:b3:30:11:28:44:
7b:2e:2c:dd:3b:00:39:7c:5c:0f:1f:9a:45:a0:ae:d9:2f:7b:
7e:4b:c8:85:8b:65:0f:04:ca:6e:0e:55:46:06:43:b4:9d:8e:
41:27:42:44:df:00:0a:5f:9c:95:92:fd:cc:8d:80:a3:54:63:
be:dd:f1:ac:8e:10:2b:a2:a0:38:f7:1d:20:a6:df:28:46:67:
0a:d2:22:41:ff:37:90:b8:15:1e:e0:df:ec:88:5c:27:79:cd:
1d:41:8e:84:d5:2f:a7:4f:72:f5:a7:66:3f:9e:b4:fe:63:da:
6e:55:76:7a:2a:8b:2e:0e:58:07:36:a1:00:53:4d:0a:c9:fb:
d4:bd:01:d2:e3:10:d4:fd:cd:c1:f4:c9:40:8f:02:9f:c9:bd:
ad:5e:62:9b:60:26:66:b0:b7:88:29:db:c3:40:77:67:eb:1b:
76:a7:39:e7:0b:0f:21:64:66:f7:62:cb:c5:8b:c0:ac:0a:5e:
60:3e:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:14:56 2025 by rpki-client