Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dOQeLFGN_puUSJ7jx7kzdEGEkCw.roa
File: dOQeLFGN_puUSJ7jx7kzdEGEkCw.roa (raw, json)
Hash identifier: 8VvhkwG9R4vQgJ7+nKExSH3juqmstb1f63lq2wzWHEM=
Subject key identifier: 74:E4:1E:2C:51:8D:FE:9B:94:48:9E:E3:C7:B9:33:74:41:84:90:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196869717051BCFAADF26AE11C898674F42
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dOQeLFGN_puUSJ7jx7kzdEGEkCw.roa
Signing time: Wed 30 Apr 2025 12:06:10 +0000
ROA not before: Wed 30 Apr 2025 12:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.135.0/24 maxlen: 24
31.57.168.0/23 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.216.0/23 maxlen: 24
31.57.250.0/23 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.40.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:97:17:05:1b:cf:aa:df:26:ae:11:c8:98:67:4f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 30 12:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e41e2c518dfe9b94489ee3c7b933744184902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:13:cd:f5:e3:89:20:94:6a:63:4f:7c:b6:
34:3a:a5:60:e8:b3:27:97:0f:62:5c:71:94:41:da:
80:d7:40:d9:ae:cb:04:e4:6d:9a:9e:a2:43:6e:f8:
d5:b4:2a:54:f1:54:9d:a6:3f:cf:4a:eb:82:fd:0a:
f1:bb:5b:d3:77:74:3a:be:ef:d1:97:20:c2:27:c9:
da:8d:45:1b:d8:44:fb:32:e3:4c:54:29:02:07:62:
6f:63:9b:26:c2:c1:a1:f0:dd:95:04:fa:f7:5d:af:
15:82:50:5e:7c:3b:6b:ba:e1:91:f4:b8:48:46:8a:
e6:ad:b6:a0:7d:dc:b0:fd:df:3d:fd:ad:28:b1:d9:
66:99:42:3e:49:61:c4:4c:05:30:70:50:06:ca:fe:
b2:8a:19:f2:e1:bd:04:dc:c8:c9:ae:8e:f5:5a:34:
7d:97:63:58:82:59:96:fe:27:5d:31:0d:d6:e8:c2:
2d:68:56:14:ef:18:2b:9d:1a:84:4a:0c:10:a9:cc:
a4:00:08:74:31:e5:7b:db:3f:38:92:6b:e0:c4:e7:
ad:6a:96:2d:09:be:83:83:1a:8a:11:55:08:3a:10:
1e:e1:a3:ff:54:d5:17:07:b2:eb:90:8f:1f:8a:61:
a0:bc:79:1b:26:79:88:4f:b5:63:6f:fa:55:56:cd:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:1E:2C:51:8D:FE:9B:94:48:9E:E3:C7:B9:33:74:41:84:90:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dOQeLFGN_puUSJ7jx7kzdEGEkCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.57.36.0/23
31.57.135.0/24
31.57.168.0/23
31.57.184.0/23
31.57.208.0/22
31.57.216.0/23
31.57.250.0/23
31.58.76.0/22
31.58.92.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0-31.58.236.255
31.58.240.0-31.58.244.255
31.58.251.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.140.0/22
31.59.148.0-31.59.165.255
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.16.0/21
217.60.28.0/22
217.60.40.0/22
217.60.64.0/18
217.60.187.0/24
217.60.196.0/23
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:06:f2:7b:ad:52:9a:a7:8d:38:c0:8d:08:c8:fc:57:47:85:
5c:6a:21:1f:48:c2:d5:21:de:c3:42:c9:24:72:c2:8f:ba:56:
b9:02:0f:ea:7f:48:06:43:15:91:8c:3f:64:12:13:52:ab:3b:
4f:f0:b2:04:3a:da:66:3c:a5:81:b3:a9:9b:db:cc:ca:16:bb:
e7:86:2d:ab:fc:4f:a6:24:59:6b:66:53:f7:73:48:a1:7c:88:
8d:40:d3:d3:13:fc:58:b1:50:56:ad:5a:d3:53:b6:50:c2:06:
79:d5:c5:1e:7b:67:cc:96:01:48:81:62:95:09:e0:6a:fe:b0:
31:88:23:58:ce:67:dc:29:eb:9e:a7:46:71:6a:e3:f3:ba:8b:
5d:eb:12:b7:bc:be:e5:ad:87:99:7e:10:4d:86:94:21:ac:b9:
3e:b3:6c:29:66:5f:bc:b3:ae:a1:95:57:5e:f1:9c:9e:94:d5:
7a:99:0e:cd:a5:cc:73:3c:cc:e9:d8:6b:ac:7c:30:6c:8d:bd:
0a:d6:f5:e6:ef:51:bf:0f:6d:8a:37:22:9d:74:50:94:ab:da:
b7:6b:b7:fb:7b:53:33:87:b4:d9:ea:ef:a6:ee:e2:0c:fe:6f:
78:99:d0:bf:fa:43:94:db:de:0c:f8:97:1e:0b:06:6d:9f:08:
fd:00:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:25 2025 by rpki-client