Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa
File: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (raw, json)
Hash identifier: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=
Subject key identifier: 91:87:35:82:D3:AB:D0:F4:C5:43:68:18:3D:3D:06:44:A2:4E:B4:DB
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01942521B9437E7B0888B1CCB86BF6BC8CB7
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60641
IP address blocks: 5.39.233.0/24 maxlen: 24
5.39.234.0/24 maxlen: 24
5.39.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:43:7e:7b:08:88:b1:cc:b8:6b:f6:bc:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91873582d3abd0f4c54368183d3d0644a24eb4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:ef:08:0d:77:b3:47:ff:2b:4a:3a:ea:a1:
dc:10:27:47:40:bf:67:91:e4:92:7e:88:c0:c7:01:
30:3d:fe:f0:28:51:69:25:80:f9:a8:ff:65:70:72:
d2:f6:ae:c6:c7:93:20:5f:84:5c:80:44:52:4a:5a:
ed:84:93:ca:24:01:bf:49:63:18:3c:3d:6b:cd:48:
28:4a:ba:6b:e9:ce:e8:8b:5c:0d:3a:85:fa:08:d5:
87:b7:4b:fc:b9:b3:e4:84:e4:30:aa:06:c2:c5:11:
69:cc:e1:bf:97:45:96:24:dd:bc:a0:1e:82:ec:1f:
28:fd:56:ea:14:1e:8b:0c:f2:55:9f:1a:ad:ce:a3:
12:a9:e9:17:41:47:f2:38:23:b5:2a:04:31:c0:01:
29:ca:09:bd:ca:2e:48:c1:be:d2:28:bc:3d:cb:0a:
ba:1d:d3:78:a4:ad:1f:89:69:61:90:1f:af:e1:80:
d2:ca:94:96:46:22:e2:84:78:30:4f:06:d9:58:4f:
c8:c5:bf:4c:ea:ea:da:28:02:aa:9c:89:cb:1d:c2:
86:79:cf:d2:b6:e6:96:99:3f:82:82:5b:83:72:fb:
3e:eb:c0:cd:88:bd:85:df:cb:61:b4:1a:85:f9:9e:
24:8d:aa:4d:97:a7:1e:a3:c0:62:17:59:a9:37:9a:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:35:82:D3:AB:D0:F4:C5:43:68:18:3D:3D:06:44:A2:4E:B4:DB
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.233.0-5.39.234.255
5.39.236.0/24
Signature Algorithm: sha256WithRSAEncryption
07:dd:c8:b4:80:f0:33:eb:a3:f1:e1:e7:e9:17:79:92:22:03:
d8:02:11:94:de:cf:2b:79:9e:e0:bf:b8:b6:3d:be:8c:d3:b0:
e2:fc:49:39:07:31:9b:1d:4a:75:c7:8b:9e:e8:dd:c4:e7:e6:
fd:23:c2:54:30:15:c7:90:6a:16:ce:d7:51:8f:6e:4b:76:b0:
c4:52:5f:4b:29:42:16:14:a9:05:31:8e:3c:2f:d0:4e:ad:e4:
f9:87:04:65:98:de:44:09:c6:59:18:f8:ea:74:47:26:75:78:
11:b6:76:d7:d2:bb:38:21:28:ea:c0:56:1e:a7:5c:e7:a8:e5:
d4:3c:cc:72:73:5d:24:d3:e1:af:4f:e1:30:36:20:ae:18:10:
e2:f7:98:d6:19:ed:3e:f1:f3:ea:03:bc:2c:c5:a1:2b:94:1b:
a2:19:19:d8:c8:f7:a2:cb:a4:cf:a4:c7:37:f3:00:19:22:ab:
23:ca:01:f7:d4:9b:b1:de:73:5a:f1:82:9d:ea:48:7c:65:78:
fd:20:ce:9d:80:94:57:13:be:67:f0:9e:b3:68:4d:bb:c0:79:
38:da:4a:12:b1:b0:2b:43:4c:2c:75:d9:ae:a7:4c:68:ac:ec:
58:fc:24:ca:5f:08:a4:73:46:e4:75:88:59:8f:fd:c3:d6:03:
23:e8:10:90
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQlIblDfnsIiLHMuGv2vIy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1
NGZiNjIwHhcNMjUwMTAyMDM0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTg3MzU4MmQzYWJkMGY0YzU0MzY4MTgzZDNkMDY0NGEyNGViNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty7vCA13s0f/K0o66qHcECdHQL9n
keSSfojAxwEwPf7wKFFpJYD5qP9lcHLS9q7Gx5MgX4RcgERSSlrthJPKJAG/SWMY
PD1rzUgoSrpr6c7oi1wNOoX6CNWHt0v8ubPkhOQwqgbCxRFpzOG/l0WWJN28oB6C
7B8o/VbqFB6LDPJVnxqtzqMSqekXQUfyOCO1KgQxwAEpygm9yi5Iwb7SKLw9ywq6
HdN4pK0fiWlhkB+v4YDSypSWRiLihHgwTwbZWE/Ixb9M6uraKAKqnInLHcKGec/S
tuaWmT+CgluDcvs+68DNiL2F38thtBqF+Z4kjapNl6ceo8BiF1mpN5qNTwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJGHNYLTq9D0xUNoGD09BkSiTrTbMB8GA1UdIwQY
MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt
NThmYWEyN2U1NTQ5LzEva1ljMWd0T3IwUFRGUTJnWVBUMEdSS0pPdE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5
LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFJ+kD
BAAFJ+oDBAAFJ+wwDQYJKoZIhvcNAQELBQADggEBAAfdyLSA8DPro/Hh5+kXeZIi
A9gCEZTezyt5nuC/uLY9vozTsOL8STkHMZsdSnXHi57o3cTn5v0jwlQwFceQahbO
11GPbkt2sMRSX0spQhYUqQUxjjwv0E6t5PmHBGWY3kQJxlkY+Op0RyZ1eBG2dtfS
uzghKOrAVh6nXOeo5dQ8zHJzXSTT4a9P4TA2IK4YEOL3mNYZ7T7x8+oDvCzFoSuU
G6IZGdjI96LLpM+kxzfzABkiqyPKAffUm7Hec1rxgp3qSHxleP0gzp2AlFcTvmfw
nrNoTbvAeTjaShKxsCtDTCx12a6nTGis7Fj8JMpfCKRzRuR1iFmP/cPWAyPoEJA=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:02 2025 by rpki-client