Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/SzYOYUN-KuXl8k4DruRddYkArZc.roa
File: SzYOYUN-KuXl8k4DruRddYkArZc.roa (raw, json)
Hash identifier: HQJkpy4IB7spWxDMSa68jNPAsdSN0XWCGH9xxKSw+20=
Subject key identifier: 4B:36:0E:61:43:7E:2A:E5:E5:F2:4E:03:AE:E4:5D:75:89:00:AD:97
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019426D9F6D9F032B5762766288B6BBFF252
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/SzYOYUN-KuXl8k4DruRddYkArZc.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4455
IP address blocks: 31.217.128.0/19 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.129.0/24 maxlen: 24
31.217.130.0/24 maxlen: 24
46.18.168.0/21 maxlen: 24
83.243.16.0/21 maxlen: 24
89.30.0.0/17 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
185.55.16.0/22 maxlen: 24
185.143.244.0/22 maxlen: 22
194.126.217.0/24 maxlen: 24
2a01:8200::/32 maxlen: 64
2a02:27f0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f6:d9:f0:32:b5:76:27:66:28:8b:6b:bf:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b360e61437e2ae5e5f24e03aee45d758900ad97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:c5:83:56:ff:6f:49:35:6d:a3:13:cd:8e:
93:67:3a:58:b5:f1:5d:df:67:38:5c:1d:32:89:2f:
e5:df:31:b8:5a:dc:6b:8c:9e:19:41:f4:e8:c0:b7:
a7:14:63:0a:3d:19:d3:07:b3:a5:51:07:b2:0c:03:
2b:d2:c4:10:3c:a2:6d:93:95:0c:9c:06:65:4d:9c:
ad:ae:c4:2f:9f:52:18:72:46:83:17:e3:b8:9e:15:
f0:b7:ee:7e:2d:f3:fd:9b:47:b2:57:a1:b2:0d:0f:
36:23:d4:ee:77:93:3e:5f:b9:b8:9d:32:88:41:91:
b2:34:c5:45:bc:2f:56:d8:c2:7c:13:3c:d4:b9:a9:
f3:92:13:33:ba:75:27:15:90:4b:63:cd:70:c0:24:
2b:fc:20:50:81:4f:c8:40:cd:7f:c4:7b:c4:d6:77:
12:35:1a:27:f3:cf:94:8f:b2:46:35:08:e6:df:65:
6a:d9:6a:71:d9:07:d2:c7:72:db:af:b1:29:3b:e9:
04:01:f1:35:b2:4b:7e:14:54:65:45:cf:b3:ec:55:
2f:26:be:b4:09:f0:15:f9:b4:17:27:0a:1b:d7:61:
2e:8d:9b:47:76:c6:ff:ec:29:8e:6f:8e:8b:6e:92:
f6:c5:86:3f:bc:27:50:4c:7f:23:94:d0:27:ef:a3:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:0E:61:43:7E:2A:E5:E5:F2:4E:03:AE:E4:5D:75:89:00:AD:97
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/SzYOYUN-KuXl8k4DruRddYkArZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
185.143.244.0/22
194.126.217.0/24
IPv6:
2a01:8200::/32
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d9:13:aa:b4:e9:e1:a5:74:3c:70:9f:25:41:b0:4c:8a:47:
02:d4:6a:83:06:af:ba:c3:1d:d0:94:a3:cd:b1:a1:c1:d4:97:
66:fd:2f:ab:6f:3c:2a:6d:22:8c:06:7c:ab:41:9a:45:9d:74:
9c:c9:9c:18:1a:c8:75:d4:f8:ee:e5:84:7b:81:2b:c0:30:74:
0e:de:97:dd:14:2a:cf:b1:42:c2:79:45:48:04:35:ae:3b:0f:
c6:18:d0:78:b7:14:60:8b:23:91:86:2e:eb:96:f9:fc:00:1a:
60:9e:6e:93:e8:50:51:19:fe:79:f9:56:c1:b7:09:31:c2:b7:
e1:e2:b7:f1:42:db:80:e9:af:57:d5:c9:61:30:8e:d4:8f:50:
fd:4b:6d:a6:ff:29:df:40:d5:f8:2b:64:b0:49:a0:c7:0c:82:
f9:e0:b6:8d:00:58:ae:5b:95:ea:59:aa:2c:7a:33:55:42:6c:
cf:ea:d9:f8:f5:5d:ba:b0:86:cc:7a:56:ea:87:ae:5a:18:c2:
59:fc:50:35:78:d2:46:af:f6:5c:55:03:07:28:45:18:69:62:
41:cc:35:7b:d7:92:b0:10:05:b1:74:28:59:06:7e:3f:eb:e4:
2e:4a:f7:e5:d9:48:c5:00:c2:04:48:58:3d:65:72:e9:bd:32:
03:55:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:36 2025 by rpki-client