Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/vSbN94Ek0qh8lp5raW_jsP7StDw.roa
File: vSbN94Ek0qh8lp5raW_jsP7StDw.roa (raw, json)
Hash identifier: 1IiSvDv/oRATuWSTCJqnhBPY0+TbN0vkktYsEqhhKcg=
Subject key identifier: BD:26:CD:F7:81:24:D2:A8:7C:96:9E:6B:69:6F:E3:B0:FE:D2:B4:3C
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0197A14B0FE6E63A58AE08FE30F7789D18B8
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/vSbN94Ek0qh8lp5raW_jsP7StDw.roa
Signing time: Tue 24 Jun 2025 09:35:40 +0000
ROA not before: Tue 24 Jun 2025 09:35:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49063
IP address blocks: 31.172.64.0/24 maxlen: 24
31.172.66.0/24 maxlen: 24
31.172.67.0/24 maxlen: 24
31.172.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:4b:0f:e6:e6:3a:58:ae:08:fe:30:f7:78:9d:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jun 24 09:35:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd26cdf78124d2a87c969e6b696fe3b0fed2b43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:a4:0f:1c:66:1f:f7:73:c0:b2:05:e5:a4:
27:3f:4f:1b:e4:a3:dd:d0:cc:86:13:50:b8:26:78:
75:e5:cf:28:c9:a4:90:2d:81:bd:dc:21:8a:ea:74:
2e:48:46:26:b2:ec:5c:bf:30:f6:65:e1:db:f5:14:
9a:a6:f7:8a:4e:47:f3:dc:a9:cb:d1:2a:01:94:4c:
8f:c3:97:5e:19:18:c8:3c:4d:96:09:cd:b1:92:3e:
f5:f7:bd:15:0f:59:80:11:f6:0b:e4:3d:61:c3:2d:
4f:4d:36:76:03:8e:15:66:4f:6c:31:f1:5d:95:5b:
d1:f2:b6:26:f0:62:ca:1d:1b:b0:2a:4c:55:e5:9b:
85:ef:05:f8:a7:1a:31:52:6e:3e:bc:6c:d9:7a:9b:
f1:c2:3d:89:c0:d3:0e:98:64:02:28:57:d5:a8:89:
2d:d3:84:5b:0b:88:95:ee:09:89:95:e0:57:89:33:
fc:54:5e:98:ff:d9:6a:f8:1d:e7:70:50:8f:a0:70:
04:5f:fc:84:0a:fd:45:01:47:3b:17:a4:5d:bc:b4:
bd:94:10:22:c8:55:34:72:bc:c1:22:d5:3d:c9:b3:
f6:4e:08:c6:19:3c:20:8a:23:a4:8b:88:97:66:fc:
3c:10:42:a1:7e:1f:97:49:96:93:b9:ee:47:0b:8b:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:CD:F7:81:24:D2:A8:7C:96:9E:6B:69:6F:E3:B0:FE:D2:B4:3C
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/vSbN94Ek0qh8lp5raW_jsP7StDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.64.0/24
31.172.66.0/23
31.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5d:42:3e:d6:76:19:e5:72:f1:83:ea:fc:d2:81:2a:ef:96:
7d:ad:15:90:96:d9:4a:09:47:94:f1:4b:f2:78:28:2d:2a:7a:
93:c3:15:51:0b:ba:14:be:60:8d:8f:2e:61:49:bc:1b:15:f5:
25:62:b6:22:a5:22:85:14:ce:31:85:fc:a4:65:ed:13:35:af:
57:38:dc:36:65:d0:8d:21:5f:69:5c:f1:69:f7:60:6c:4d:50:
7e:cd:4e:a9:bb:d5:0e:1f:58:e5:35:20:d0:66:4c:d4:3c:bd:
39:03:c4:4d:30:aa:15:91:0a:b9:f7:3f:ae:08:3a:aa:d3:32:
54:09:89:ab:1c:90:16:bf:07:79:b4:8b:96:89:a4:49:b9:1d:
83:ed:2c:69:54:92:d1:ec:af:f0:98:88:6b:0c:12:81:73:f7:
c3:65:11:99:71:20:f3:a8:ae:3a:fa:4f:43:21:10:a3:bd:f6:
50:82:fd:8b:8b:b9:28:53:da:1d:02:ef:df:b7:f4:40:7b:6b:
77:0f:ba:2b:83:2a:4c:ef:0c:e1:05:cf:0e:4c:7e:61:40:cc:
90:24:cc:da:8c:f3:05:e2:a9:80:79:65:3c:90:b6:20:86:92:
fe:6b:0d:56:95:11:cb:78:c8:f6:eb:2a:bf:ff:62:0f:f5:ab:
55:95:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:39:24 2025 by rpki-client