Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/KpE2iahav8cAforHiyJhcZBcDeQ.roa
File: KpE2iahav8cAforHiyJhcZBcDeQ.roa (raw, json)
Hash identifier: bm2F2rOtPCGG/UzA4svmEtDgCm0rSPmxuVbVp4tIlNA=
Subject key identifier: 2A:91:36:89:A8:5A:BF:C7:00:7E:8A:C7:8B:22:61:71:90:5C:0D:E4
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4CB1F05D44AC6C65D0E01C05D23C
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/KpE2iahav8cAforHiyJhcZBcDeQ.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50518
IP address blocks: 83.231.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:b1:f0:5d:44:ac:6c:65:d0:e0:1c:05:d2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a913689a85abfc7007e8ac78b226171905c0de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:16:c6:77:d1:9d:63:7a:79:ac:4d:e9:1c:
d8:6d:a7:af:5b:b9:4c:a5:3a:56:b4:c3:5a:38:f4:
4a:17:d7:ce:9c:8f:a0:4d:8c:c4:75:02:5b:b9:b6:
de:af:4d:fa:40:93:3f:da:7b:dd:39:be:99:dc:53:
5b:5a:3f:0f:fd:8d:2a:ec:d3:e3:f9:a8:a2:45:a7:
b8:87:b9:8a:c4:03:aa:f4:30:3c:7b:69:08:2d:f4:
73:46:7c:ca:36:6c:81:64:a2:e3:31:84:56:ea:d8:
1c:46:c6:bc:66:e7:f0:4b:64:db:59:5c:ea:58:a7:
63:8a:92:c4:c0:d6:ba:5a:66:bc:70:af:be:18:98:
83:75:f3:55:86:18:bf:fa:c6:06:23:6b:bd:15:1f:
2b:ae:ac:d1:e2:ff:e1:70:5f:d6:51:c6:a8:66:a6:
15:3a:d3:e5:4f:cc:4b:41:58:5a:24:d0:2e:3a:ee:
6a:9f:eb:3c:f3:24:77:7e:c1:a3:ec:5b:ff:b2:d2:
f4:45:42:e9:b1:ef:a0:f1:8f:52:70:09:5d:49:2e:
6d:c8:7e:34:00:9e:02:19:e7:90:88:f7:76:59:2d:
37:c4:06:a8:f9:4f:ac:bc:33:4e:da:05:e0:a9:30:
9c:d3:2f:2f:1f:23:99:06:34:f2:04:b7:2c:6a:35:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:36:89:A8:5A:BF:C7:00:7E:8A:C7:8B:22:61:71:90:5C:0D:E4
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/KpE2iahav8cAforHiyJhcZBcDeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.152.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d5:26:2d:fd:f9:af:9a:9a:1b:c5:e2:76:2d:e7:52:72:0f:
bf:d1:b8:80:1d:61:6c:11:99:3b:1a:b1:c8:5d:76:d4:be:d4:
17:ec:4e:d5:8f:45:15:db:a2:c3:35:ea:6d:99:50:ae:6b:a8:
60:e8:ac:b8:01:00:dd:09:ee:2e:b3:9d:e9:7e:1b:3e:66:a4:
0d:3d:de:b1:bb:07:4a:13:1b:1d:1d:24:c4:dd:ae:fa:3e:24:
f8:c0:51:fb:87:4c:fd:4a:ee:87:ab:1a:af:eb:05:01:b9:84:
9e:a1:5e:e4:d8:9b:35:ba:6c:77:96:f7:3d:2c:5d:8c:df:6e:
ed:b6:b8:65:6f:d5:91:f0:1b:ed:c0:c5:4e:9f:6c:db:ae:15:
5c:3c:8b:b4:49:7e:16:f5:63:fd:c8:eb:19:5a:c6:61:f0:5b:
b8:84:89:c4:02:8d:3d:ab:2a:88:11:54:a1:60:40:e0:d1:a5:
e1:26:b4:e1:31:00:2c:9b:d9:90:f8:63:51:5b:c3:48:04:0f:
93:6a:db:8f:ad:86:b0:23:b8:f4:58:d3:dc:95:48:27:e4:63:
ba:e1:00:6e:21:dc:c5:87:b0:c1:c8:89:b8:d3:3c:fd:6f:9b:
64:e7:4e:33:6c:1e:d2:dc:2a:72:9c:74:c9:56:4d:1d:eb:a0:
f5:67:85:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj0yx8F1ErGxl0OAcBdI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjUwMTAyMDU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTkxMzY4OWE4NWFiZmM3MDA3ZThhYzc4YjIyNjE3MTkwNWMwZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0WxnfRnWN6eaxN6RzYbaevW7lM
pTpWtMNaOPRKF9fOnI+gTYzEdQJbubber036QJM/2nvdOb6Z3FNbWj8P/Y0q7NPj
+aiiRae4h7mKxAOq9DA8e2kILfRzRnzKNmyBZKLjMYRW6tgcRsa8ZufwS2TbWVzq
WKdjipLEwNa6Wma8cK++GJiDdfNVhhi/+sYGI2u9FR8rrqzR4v/hcF/WUcaoZqYV
OtPlT8xLQVhaJNAuOu5qn+s88yR3fsGj7Fv/stL0RULpse+g8Y9ScAldSS5tyH40
AJ4CGeeQiPd2WS03xAao+U+svDNO2gXgqTCc0y8vHyOZBjTyBLcsajVLuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqRNomoWr/HAH6Kx4siYXGQXA3kMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvS3BFMmlhaGF2OGNBZm9ySGl5SmhjWkJjRGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+eYMA0G
CSqGSIb3DQEBCwUAA4IBAQAx1SYt/fmvmpobxeJ2LedScg+/0biAHWFsEZk7GrHI
XXbUvtQX7E7Vj0UV26LDNeptmVCua6hg6Ky4AQDdCe4us53pfhs+ZqQNPd6xuwdK
ExsdHSTE3a76PiT4wFH7h0z9Su6Hqxqv6wUBuYSeoV7k2Js1umx3lvc9LF2M327t
trhlb9WR8BvtwMVOn2zbrhVcPIu0SX4W9WP9yOsZWsZh8Fu4hInEAo09qyqIEVSh
YEDg0aXhJrThMQAsm9mQ+GNRW8NIBA+TatuPrYawI7j0WNPclUgn5GO64QBuIdzF
h7DByIm40zz9b5tk504zbB7S3CpynHTJVk0d66D1Z4V0
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:36 2025 by rpki-client