Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhROOOCqGv-Z0vaIr-dqDbUARiM.roa
File: qhROOOCqGv-Z0vaIr-dqDbUARiM.roa (raw, json)
Hash identifier: 1Dau3vFPvz0XYXfbPpsznu678Q3w9mkfUY2dcUkZJ80=
Subject key identifier: AA:14:4E:38:E0:AA:1A:FF:99:D2:F6:88:AF:E7:6A:0D:B5:00:46:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196820E35E84A9FFE728197BD6548097045
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhROOOCqGv-Z0vaIr-dqDbUARiM.roa
Signing time: Tue 29 Apr 2025 14:58:11 +0000
ROA not before: Tue 29 Apr 2025 14:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.238.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.122.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:0e:35:e8:4a:9f:fe:72:81:97:bd:65:48:09:70:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 14:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa144e38e0aa1aff99d2f688afe76a0db5004623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:39:4f:2a:f6:6e:bf:56:9c:0c:13:ea:51:
d5:96:7b:57:43:82:1a:63:67:d5:01:32:1f:06:65:
85:43:fc:2c:d0:57:ed:a5:45:32:51:99:70:aa:fb:
8c:04:61:11:49:16:ac:58:75:af:e7:c3:d5:78:c6:
4e:44:e5:b4:d5:9d:be:56:5c:2f:a9:99:4b:e4:11:
3f:a2:81:d9:61:1b:cc:a8:31:08:44:af:b3:26:36:
a3:75:3c:69:a6:e3:1e:53:9b:db:05:b7:9a:b9:a7:
21:94:87:8a:33:cf:68:15:90:50:b7:a8:1f:6a:b7:
87:fd:75:ec:d4:0d:e3:b3:ce:6a:9b:7a:e9:bf:73:
2e:12:9a:49:29:09:f1:2d:f1:43:4a:ab:b4:50:6e:
ff:be:1e:86:5a:89:79:a3:85:c8:b7:fc:24:05:d3:
65:2c:84:a7:4d:4f:92:84:8e:82:87:c3:e7:af:50:
59:c2:3d:ad:55:02:62:73:eb:0f:4c:02:6b:a4:06:
ba:4c:53:f8:cd:b4:0b:b1:5b:80:a5:24:f4:ff:49:
da:c8:47:c2:6a:42:2c:0d:57:d5:ee:f5:4b:62:60:
6f:64:6a:f0:7f:f9:c9:16:95:46:8c:b0:97:73:95:
5f:3b:34:3a:c8:fc:ef:98:9f:b7:97:87:59:02:7d:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:4E:38:E0:AA:1A:FF:99:D2:F6:88:AF:E7:6A:0D:B5:00:46:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qhROOOCqGv-Z0vaIr-dqDbUARiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.56.238.0/23
31.57.110.0/24
31.57.113.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.162.0/24
31.58.164.0/24
31.58.166.0/24
31.59.88.0/24
31.59.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:13:7c:93:bf:14:0c:cc:f2:8d:0b:d7:42:71:86:4b:c4:20:
d0:75:a5:45:7a:44:68:74:20:f5:85:04:29:bd:f5:68:ac:57:
c0:da:f8:8a:47:ff:a1:cf:64:7a:7f:32:6d:d9:d3:28:ca:8a:
59:b5:8e:78:70:d2:b6:30:ef:cb:74:39:79:d6:b1:9d:7c:be:
01:a8:2b:8d:f1:0d:91:9d:e5:33:d5:78:ff:ae:cb:9c:73:36:
21:b6:c5:ae:b3:86:38:de:df:ba:4f:58:09:2c:f9:fc:29:b4:
ee:e4:77:c6:90:cd:85:78:a0:56:ec:b1:bd:f9:9c:ec:1f:66:
77:4f:82:4a:da:87:d1:05:3a:1f:cf:bc:21:5b:c7:b3:39:62:
15:a2:3f:63:be:59:ba:3f:24:57:a3:b4:27:c4:f9:69:d8:51:
ca:73:29:50:ee:61:e5:c6:b7:8f:ab:58:9c:5a:f9:fe:bd:6e:
6f:9f:00:78:b0:62:ed:13:4b:18:17:77:2d:d5:51:47:3e:e4:
bb:74:f2:98:a0:6f:27:7c:7f:95:15:7e:f5:ea:0e:65:40:90:
8a:dd:82:c0:d2:53:ab:6d:a7:e6:12:c0:bc:23:72:dd:9d:1f:
94:18:7e:db:44:b0:38:5d:1d:a5:79:59:3c:13:6d:53:42:ed:
38:d9:15:55
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZaCDjXoSp/+coGXvWVICXBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDI5MTQ1ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTE0NGUzOGUwYWExYWZmOTlkMmY2ODhhZmU3NmEwZGI1MDA0NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwY5Tyr2br9WnAwT6lHVlntXQ4Ia
Y2fVATIfBmWFQ/ws0FftpUUyUZlwqvuMBGERSRasWHWv58PVeMZOROW01Z2+Vlwv
qZlL5BE/ooHZYRvMqDEIRK+zJjajdTxppuMeU5vbBbeauachlIeKM89oFZBQt6gf
areH/XXs1A3js85qm3rpv3MuEppJKQnxLfFDSqu0UG7/vh6GWol5o4XIt/wkBdNl
LISnTU+ShI6Ch8Pnr1BZwj2tVQJic+sPTAJrpAa6TFP4zbQLsVuApST0/0nayEfC
akIsDVfV7vVLYmBvZGrwf/nJFpVGjLCXc5VfOzQ6yPzvmJ+3l4dZAn0QjwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFKoUTjjgqhr/mdL2iK/nag21AEYjMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcWhST09PQ3FHdi1aMHZhSXItZHFEYlVBUmlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAHzhJAwQA
HzhVAwQBHzjuAwQAHzluAwQAHzlxAwQAHzmZAwQAHznsAwQAHzorAwQAHzqAAwQA
HzqiAwQAHzqkAwQAHzqmAwQAHztYAwQBHzt6MA0GCSqGSIb3DQEBCwUAA4IBAQA7
E3yTvxQMzPKNC9dCcYZLxCDQdaVFekRodCD1hQQpvfVorFfA2viKR/+hz2R6fzJt
2dMoyopZtY54cNK2MO/LdDl51rGdfL4BqCuN8Q2RneUz1Xj/rsucczYhtsWus4Y4
3t+6T1gJLPn8KbTu5HfGkM2FeKBW7LG9+ZzsH2Z3T4JK2ofRBTofz7whW8ezOWIV
oj9jvlm6PyRXo7QnxPlp2FHKcylQ7mHlxrePq1icWvn+vW5vnwB4sGLtE0sYF3ct
1VFHPuS7dPKYoG8nfH+VFX716g5lQJCK3YLA0lOrbafmEsC8I3LdnR+UGH7bRLA4
XR2leVk8E21TQu042RVV
-----END CERTIFICATE-----
Generated at Sat May 10 21:03:47 2025 by rpki-client