Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xztW1awaxXjta4TP46exwVoaveA.roa
File: xztW1awaxXjta4TP46exwVoaveA.roa (raw, json)
Hash identifier: tWVSEKJxaL/Ycct1lBWoXzhC0+MsBcFkMGkv5P1g7YA=
Subject key identifier: C7:3B:56:D5:AC:1A:C5:78:ED:6B:84:CF:E3:A7:B1:C1:5A:1A:BD:E0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C4921A4AA411599B208DF19FE763A048
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xztW1awaxXjta4TP46exwVoaveA.roa
Signing time: Mon 12 May 2025 12:57:11 +0000
ROA not before: Mon 12 May 2025 12:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.56.146.0/24 maxlen: 24
31.58.227.0/24 maxlen: 24
31.59.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:92:1a:4a:a4:11:59:9b:20:8d:f1:9f:e7:63:a0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 12:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c73b56d5ac1ac578ed6b84cfe3a7b1c15a1abde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:df:33:ba:4a:b8:f4:b3:15:1b:2e:53:12:
a5:26:c6:9c:d2:44:b8:0a:88:c7:07:31:d6:ff:05:
ab:29:99:fb:6e:84:31:90:19:a1:f1:6b:35:a2:c8:
2e:c7:13:10:26:f1:e8:c5:85:89:1e:fa:86:bb:df:
fd:54:c1:5f:93:38:7d:04:c1:7e:16:b2:f7:f7:e4:
88:5c:a3:dd:b0:f7:d7:2e:ab:fe:17:84:be:e6:44:
ab:26:56:56:a3:df:f6:23:c3:cb:91:24:cc:b1:fa:
83:20:da:68:98:0a:bb:22:09:1a:b9:c2:01:5b:84:
22:91:8f:16:09:cd:ac:16:b7:70:82:6b:2d:61:98:
3e:24:30:f3:87:92:1b:35:af:b7:6b:8a:3d:ed:f1:
37:ef:dc:01:73:ca:a5:3b:09:f3:87:11:09:3c:93:
be:ad:2d:51:bc:38:db:af:49:f6:27:e3:b2:07:60:
1e:7b:32:92:99:65:d3:62:b3:30:47:85:7b:11:b3:
1a:50:5a:71:35:c6:3d:26:8a:d8:2d:45:62:7a:09:
5f:06:63:5d:13:0c:e1:e0:91:12:3f:90:3d:b2:4a:
aa:08:ce:1f:a2:d8:07:cb:ae:e8:98:c9:0b:22:fb:
97:d9:c3:48:da:63:c8:24:42:2d:2b:f4:c0:fe:f3:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:56:D5:AC:1A:C5:78:ED:6B:84:CF:E3:A7:B1:C1:5A:1A:BD:E0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xztW1awaxXjta4TP46exwVoaveA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.146.0/24
31.58.227.0/24
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b3:e0:ad:ef:2a:e6:71:ff:39:91:a6:83:73:bf:23:c8:5b:
6c:cb:b5:93:d9:ac:ec:83:6b:5f:9a:f4:4f:21:4b:9d:a7:43:
fc:53:78:2e:10:29:2d:be:20:ea:fd:04:86:d1:08:3d:d3:1d:
4d:76:3e:c9:e4:60:42:08:92:20:15:ad:e7:37:03:3a:eb:fb:
a7:8c:98:1e:8c:a5:7e:dd:bb:d0:7e:7a:db:ee:b3:cb:dd:aa:
48:27:60:ea:b2:1e:fd:0e:51:f0:fc:3f:b1:48:7b:54:d9:a5:
1a:62:ba:f6:7e:cc:00:2c:81:aa:a1:a4:6b:8a:e3:e0:a2:b7:
fc:7a:f2:38:1f:f0:df:96:13:24:3a:1b:58:7c:45:80:7c:2b:
a5:b8:ed:e5:2c:fe:99:c7:36:f5:dd:54:b6:30:6e:ad:05:20:
61:f6:31:46:4f:54:25:79:8a:3b:70:72:ef:af:99:bd:72:d6:
b7:5f:1b:f7:b3:05:19:5e:d0:58:cb:cd:56:77:45:9d:0d:72:
f7:23:4e:17:7f:a7:e4:b5:4c:60:4d:b5:4b:e5:af:ed:30:fc:
04:76:49:be:a3:1c:01:b2:e4:cf:8a:55:34:ba:3e:59:b8:08:
78:21:61:ef:ca:c3:8b:be:f6:2b:18:90:eb:70:35:a0:62:68:
0a:d5:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:31:16 2025 by rpki-client