Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMRhsMXcJsujNhEmONLvqud0eC4.roa
File: YMRhsMXcJsujNhEmONLvqud0eC4.roa (raw, json)
Hash identifier: 917GWBBlvglVlV5SyQIh9GERkD+nJnPBMizPYCiF1CQ=
Subject key identifier: 60:C4:61:B0:C5:DC:26:CB:A3:36:11:26:38:D2:EF:AA:E7:74:78:2E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019677004F5B4B18F67D1797620A56CADCB2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMRhsMXcJsujNhEmONLvqud0eC4.roa
Signing time: Sun 27 Apr 2025 11:27:11 +0000
ROA not before: Sun 27 Apr 2025 11:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149020
IP address blocks: 31.56.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:00:4f:5b:4b:18:f6:7d:17:97:62:0a:56:ca:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 27 11:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c461b0c5dc26cba336112638d2efaae774782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:86:2b:d3:ad:9d:50:9f:cf:d0:04:bd:c6:
f7:db:bf:16:8f:68:2e:8d:80:51:d3:2c:9b:0d:02:
78:b5:7d:1d:e6:64:3b:46:7d:17:6d:45:45:c3:1d:
6f:d1:17:e3:44:7c:5c:8b:03:13:c4:b3:05:5d:88:
68:53:25:fa:19:40:d1:c8:5b:98:4a:88:9f:ef:ff:
d4:f6:d6:b9:1c:4e:76:96:95:28:aa:7f:4c:64:68:
f6:48:59:36:72:61:31:10:1c:a4:40:a2:b7:a2:d7:
5b:bf:23:e5:e4:59:c4:e8:13:02:2a:9f:39:9b:43:
db:1d:d1:ef:39:4c:9f:cc:d2:d6:e6:cc:1e:d0:38:
ae:70:cb:1e:a8:91:7b:2d:85:64:68:53:1e:1b:e0:
eb:09:da:94:3f:fc:a5:95:f7:3c:c5:d5:f0:b2:90:
60:41:0b:c4:ca:df:e5:95:c2:37:f5:c9:ec:ce:df:
42:37:5d:8f:7a:b7:6b:f9:b7:ef:ab:b1:e4:27:48:
08:a6:6b:d7:eb:dd:3f:d3:d3:5b:74:0e:49:fd:1d:
aa:d7:86:12:80:47:d7:4f:b6:09:c1:f1:b7:8a:55:
17:cd:9a:65:23:e4:41:95:a5:4f:17:7a:aa:9b:9a:
72:99:7a:83:9b:3d:4f:f7:06:1a:99:33:d7:5d:19:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:61:B0:C5:DC:26:CB:A3:36:11:26:38:D2:EF:AA:E7:74:78:2E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YMRhsMXcJsujNhEmONLvqud0eC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3a:0c:fc:65:ba:d4:c2:3f:b3:62:d9:82:e0:76:1b:0d:7e:
1e:ff:8e:b3:0b:12:43:bb:93:73:08:95:a6:92:7b:4f:db:42:
2c:7d:96:dc:a7:f1:14:c8:0a:9c:dd:9c:c6:0a:3d:8f:f1:dd:
84:6e:32:5a:3d:37:c4:f3:be:fd:ec:b1:95:25:96:23:1b:24:
ff:13:5f:83:4f:f9:84:a6:15:df:71:a8:dc:53:f8:85:31:6c:
76:d9:60:54:de:6a:54:78:0b:86:b0:ec:f9:4d:26:a9:93:e7:
08:cc:9a:81:ea:1d:64:ab:b6:d2:66:74:e2:1a:bf:3b:4f:39:
f5:0e:98:d8:30:af:ea:f9:4e:2d:8d:bb:2b:77:48:42:71:85:
47:20:26:6b:83:50:57:13:7a:aa:c6:5c:db:84:8f:9d:ee:65:
71:40:71:c7:56:ff:a9:e8:ee:ef:2c:9e:78:c1:77:b7:25:bd:
32:10:9e:fc:57:94:c2:4b:49:25:00:da:2e:77:2b:de:1e:71:
f5:7e:63:b1:91:cf:d6:71:5c:1a:a6:8d:59:3d:13:20:a6:08:
c2:c5:d3:4e:c0:a2:31:41:48:c2:c0:d3:33:b6:44:83:a1:df:
0c:5b:ba:87:8e:fb:46:d8:e8:ce:35:1e:cb:8f:4c:af:9d:97:
81:2b:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:20:01 2025 by rpki-client