Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/KKb3movEaRK5uooL7CLlRng9BxI.roa
File: KKb3movEaRK5uooL7CLlRng9BxI.roa (raw, json)
Hash identifier: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=
Subject key identifier: 28:A6:F7:9A:8B:C4:69:12:B9:BA:8A:0B:EC:22:E5:46:78:3D:07:12
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 0194258F6FBB5BAA980AB8EC929BE70CECE5
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/KKb3movEaRK5uooL7CLlRng9BxI.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57154
IP address blocks: 5.10.8.0/21 maxlen: 24
31.47.80.0/21 maxlen: 24
88.133.248.0/21 maxlen: 24
185.36.44.0/22 maxlen: 24
185.80.168.0/22 maxlen: 24
213.152.96.0/19 maxlen: 24
2a03:80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6f:bb:5b:aa:98:0a:b8:ec:92:9b:e7:0c:ec:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28a6f79a8bc46912b9ba8a0bec22e546783d0712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:9f:e0:33:a2:34:7d:df:65:41:48:79:f6:
93:45:86:0b:13:b3:ea:c2:6b:99:d9:e2:5b:92:48:
2d:e7:0e:ca:0c:5d:b9:f1:96:20:e5:a0:d9:c4:35:
9d:52:20:d3:e0:0f:03:43:f1:91:ee:6e:35:40:5a:
3c:75:3c:e5:73:a0:b9:95:7e:8f:f1:ec:8b:30:c6:
1e:45:f1:ea:0c:8b:4a:a4:3e:f7:1d:7f:31:70:b2:
e8:b3:b9:0b:3b:2e:8e:4c:42:b4:1f:c0:17:6d:28:
57:9a:18:c5:61:d5:3f:62:92:79:5e:f6:77:df:f2:
51:57:8f:72:fe:21:ba:f3:1f:ba:95:59:00:f8:5b:
60:38:25:4a:94:45:a2:8f:be:4d:d2:c3:93:5f:d7:
01:6b:8f:0a:9a:f5:9c:23:75:df:25:38:e8:a5:2c:
19:71:6a:27:a9:d8:9f:f1:0b:2a:87:19:80:c9:5d:
3e:50:e0:90:db:e2:2a:8a:11:aa:ec:32:b8:49:06:
50:61:b8:3a:2a:8e:69:da:d8:9b:04:e5:05:fc:da:
db:cf:6f:84:02:1d:0c:50:41:40:c0:ed:30:1b:ab:
b9:9d:f3:e3:6a:6f:8c:85:00:04:c1:16:f9:09:5f:
20:e2:d5:15:7b:fa:e5:f9:c8:10:07:a7:ba:72:3e:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:F7:9A:8B:C4:69:12:B9:BA:8A:0B:EC:22:E5:46:78:3D:07:12
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/KKb3movEaRK5uooL7CLlRng9BxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.8.0/21
31.47.80.0/21
88.133.248.0/21
185.36.44.0/22
185.80.168.0/22
213.152.96.0/19
IPv6:
2a03:80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:59:36:f2:f7:36:a9:08:21:16:67:78:0f:bb:7b:9f:27:ff:
17:b5:a6:3b:c2:89:f4:41:3e:ed:21:65:96:8f:a5:69:3f:37:
90:dd:2b:eb:90:05:f0:1b:8a:2b:e6:39:8f:d8:83:cc:62:21:
0d:4c:72:cd:c2:a0:72:b2:bd:84:eb:f0:72:5c:45:62:a3:12:
b1:50:e1:a2:03:ea:10:d5:52:ce:ee:f6:67:45:44:29:05:4d:
9d:13:a6:3d:e1:f7:60:6e:6e:9b:70:bd:b2:5d:d3:36:ea:ed:
1c:da:17:f5:84:93:0a:ec:e6:f2:9f:ce:24:19:8b:65:71:9e:
70:6e:d2:a2:57:f0:f0:2b:af:d0:9b:e5:11:cb:9b:43:44:49:
70:b1:13:3c:5c:4b:bf:d7:43:05:69:0d:33:bd:43:b7:25:48:
a5:93:f6:2a:ed:13:8d:29:17:e4:9f:f8:20:7b:90:1a:14:96:
34:f6:cb:b5:fb:34:e6:c2:b4:96:53:b6:cf:74:80:60:94:61:
3e:3f:55:d8:48:e1:be:3b:a6:74:0b:7b:9f:51:4c:19:c9:10:
4a:07:f4:89:40:7b:cd:b4:9c:db:6d:03:34:60:96:62:de:5e:
38:02:bb:86:7b:a7:06:d5:9d:ff:4c:57:d5:11:ff:89:e7:5c:
8a:19:12:0b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQlj2+7W6qYCrjskpvnDOzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz
MmUxNDMwHhcNMjUwMTAyMDU0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGE2Zjc5YThiYzQ2OTEyYjliYThhMGJlYzIyZTU0Njc4M2QwNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Eif4DOiNH3fZUFIefaTRYYLE7Pq
wmuZ2eJbkkgt5w7KDF258ZYg5aDZxDWdUiDT4A8DQ/GR7m41QFo8dTzlc6C5lX6P
8eyLMMYeRfHqDItKpD73HX8xcLLos7kLOy6OTEK0H8AXbShXmhjFYdU/YpJ5XvZ3
3/JRV49y/iG68x+6lVkA+FtgOCVKlEWij75N0sOTX9cBa48KmvWcI3XfJTjopSwZ
cWonqdif8QsqhxmAyV0+UOCQ2+IqihGq7DK4SQZQYbg6Ko5p2tibBOUF/Nrbz2+E
Ah0MUEFAwO0wG6u5nfPjam+MhQAEwRb5CV8g4tUVe/rl+cgQB6e6cj45nwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFCim95qLxGkSubqKC+wi5UZ4PQcSMB8GA1UdIwQY
MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt
ZjUyMDE2NThmYTE0LzEvS0tiM21vdkVhUks1dW9vTDdDTGxSbmc5QnhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0
LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBQoIAwQD
Hy9QAwQDWIX4AwQCuSQsAwQCuVCoAwQF1ZhgMA0EAgACMAcDBQAqAwCAMA0GCSqG
SIb3DQEBCwUAA4IBAQCjWTby9zapCCEWZ3gPu3ufJ/8XtaY7won0QT7tIWWWj6Vp
PzeQ3SvrkAXwG4or5jmP2IPMYiENTHLNwqBysr2E6/ByXEVioxKxUOGiA+oQ1VLO
7vZnRUQpBU2dE6Y94fdgbm6bcL2yXdM26u0c2hf1hJMK7Obyn84kGYtlcZ5wbtKi
V/DwK6/Qm+URy5tDRElwsRM8XEu/10MFaQ0zvUO3JUilk/Yq7RONKRfkn/gge5Aa
FJY09su1+zTmwrSWU7bPdIBglGE+P1XYSOG+O6Z0C3ufUUwZyRBKB/SJQHvNtJzb
bQM0YJZi3l44AruGe6cG1Z3/TFfVEf+J51yKGRIL
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:38:04 2025 by rpki-client