Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lspjN8lkuEfUJZOBZsF4PS8SIK0.roa
File: lspjN8lkuEfUJZOBZsF4PS8SIK0.roa (raw, json)
Hash identifier: xDumkpwOVqWT6CJr6okpUUh6mSI2svx13PZmMFEqp7M=
Subject key identifier: 96:CA:63:37:C9:64:B8:47:D4:25:93:81:66:C1:78:3D:2F:12:20:AD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019685F7C9B6E5BCDA6A9F2F19904BFD6D8C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lspjN8lkuEfUJZOBZsF4PS8SIK0.roa
Signing time: Wed 30 Apr 2025 09:12:10 +0000
ROA not before: Wed 30 Apr 2025 09:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56594
IP address blocks: 31.58.137.0/24 maxlen: 24
31.59.114.0/24 maxlen: 24
31.59.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:f7:c9:b6:e5:bc:da:6a:9f:2f:19:90:4b:fd:6d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 30 09:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96ca6337c964b847d425938166c1783d2f1220ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:32:50:34:dd:44:62:b5:6d:9a:90:15:7f:
9d:7b:08:c1:b5:0e:63:66:6d:8e:ae:43:e7:22:4b:
5d:38:df:39:42:83:28:07:c2:23:9e:17:3e:00:4a:
4a:0f:c0:c0:8b:69:cc:ec:2b:e6:d7:f7:8c:56:eb:
c2:11:78:77:27:f5:13:3d:04:61:79:ef:6d:19:36:
fe:1a:e0:ee:ec:28:70:d4:79:67:b0:18:3e:f3:fb:
ee:8c:df:7b:1a:bf:13:fb:c1:15:25:a4:4c:2a:6e:
ab:c6:bf:f6:ac:a9:c5:25:e3:c0:d8:db:5f:f5:0f:
5b:b6:3c:22:c3:50:5a:cb:ef:f5:ac:c2:2c:fa:83:
73:36:05:7b:66:3d:48:36:90:f6:ec:45:e1:9e:ce:
c3:34:20:92:15:30:dc:8d:43:b7:e9:19:32:a6:b6:
ea:bd:01:dd:d5:a8:a1:f4:49:40:23:69:17:49:4b:
a5:f5:9d:c3:31:30:17:9e:cc:a5:31:b3:b9:29:19:
1b:f7:e9:55:81:c1:d4:c8:f4:95:dc:14:a0:9f:2b:
13:b2:94:85:3f:77:74:c5:e5:dd:5b:e5:5c:2b:5b:
b2:05:bb:e5:c1:10:44:47:02:90:2c:de:6b:94:0a:
c5:72:0a:c4:35:d1:1f:db:2d:6c:b3:7c:14:86:7e:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:63:37:C9:64:B8:47:D4:25:93:81:66:C1:78:3D:2F:12:20:AD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lspjN8lkuEfUJZOBZsF4PS8SIK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.137.0/24
31.59.114.0/24
31.59.185.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:07:cb:f5:5b:0c:ae:6b:67:f8:85:82:b5:0e:69:3f:69:45:
dc:7f:3a:c7:78:51:32:8c:81:47:47:dd:52:c8:93:97:46:77:
f2:3c:18:f0:f4:89:be:fc:cc:0f:54:1d:7b:83:24:c7:18:f3:
54:d9:d9:1b:85:4f:99:6e:5a:41:3f:11:a4:43:78:d0:30:09:
0a:7a:0d:5b:91:42:20:9f:7e:25:0a:e0:e0:11:24:7e:31:e0:
46:0b:62:76:cc:0b:76:d0:75:61:12:f9:a2:f0:27:2f:12:f9:
27:1d:3f:e9:88:a5:d8:c5:09:ac:c5:98:3d:24:db:8a:db:60:
51:4f:e4:54:4f:b0:b5:ea:3c:e6:bd:95:b1:a0:a6:a4:7b:62:
ea:f2:28:4d:78:f9:d1:1d:ae:0b:60:27:3b:9e:18:1f:7c:a1:
a0:c8:53:31:87:b8:e6:9e:4d:2b:22:67:5c:af:a7:32:bb:e0:
cc:fa:f0:89:6f:8c:3d:b7:a8:dc:1d:9e:bf:f5:5e:8e:24:49:
8b:5d:d5:80:08:fc:b6:b8:88:df:a5:a7:1d:a5:74:5b:2f:5f:
c2:1a:96:4a:ba:ed:f0:f0:f4:ff:a0:65:9c:5f:14:3d:c5:4e:
3d:51:d9:34:05:95:ec:1d:cd:3e:74:d2:25:a6:31:85:f5:4a:
c6:b1:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:25:23 2025 by rpki-client