Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v-KMG0pSntYlgI5qFCq5fGh-_Sk.roa
File: v-KMG0pSntYlgI5qFCq5fGh-_Sk.roa (raw, json)
Hash identifier: LzempjJ0kn4JQz+6FpbwiZW+QAuJROh1E0OGiNI/w14=
Subject key identifier: BF:E2:8C:1B:4A:52:9E:D6:25:80:8E:6A:14:2A:B9:7C:68:7E:FD:29
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194404EE2F11AEBCD08244971EB8DBCEFC6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v-KMG0pSntYlgI5qFCq5fGh-_Sk.roa
Signing time: Tue 07 Jan 2025 10:28:19 +0000
ROA not before: Tue 07 Jan 2025 10:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:4e:e2:f1:1a:eb:cd:08:24:49:71:eb:8d:bc:ef:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 7 10:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe28c1b4a529ed625808e6a142ab97c687efd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:78:d5:00:e2:d6:7d:e3:bb:8c:45:ea:d7:
47:7c:97:a4:9a:4d:09:e2:c5:56:50:1f:be:79:92:
41:e4:a6:42:7a:a0:b4:89:28:e7:98:41:cc:57:8a:
89:9b:4b:b1:77:cd:49:b4:9b:f1:d4:98:77:d8:ee:
16:b2:ec:25:57:87:42:ed:30:14:60:74:a7:38:40:
b2:a6:af:3b:8b:2c:58:3c:b0:08:9d:2a:29:8b:27:
31:a0:88:5a:51:4e:5f:0c:3c:d0:9d:07:0e:b0:02:
ea:4b:4c:e6:1c:c1:76:f9:ce:cb:fb:d1:ff:10:79:
97:3c:ec:ac:ad:0c:c0:d2:e7:48:02:5c:3f:32:3e:
9e:0c:60:d9:4a:b0:1e:28:5e:1a:08:ed:03:a5:54:
d5:34:d3:71:e0:f4:53:f0:74:6d:a0:09:dc:94:91:
70:3b:88:ef:41:6b:bf:cb:08:55:68:55:81:a6:0e:
ac:c3:ff:4e:92:71:e8:4f:36:80:3a:00:31:0a:7f:
5f:8e:1c:c1:1d:6a:ec:e6:bd:9e:96:79:1f:84:d9:
f8:5d:7b:e9:30:17:d8:6f:05:5b:97:f8:70:44:76:
02:14:8d:db:b5:e1:bc:90:cf:2f:6c:88:bd:51:32:
4c:3c:ee:84:06:d5:74:0e:6f:5f:78:db:7b:c6:05:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:8C:1B:4A:52:9E:D6:25:80:8E:6A:14:2A:B9:7C:68:7E:FD:29
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v-KMG0pSntYlgI5qFCq5fGh-_Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.245.0/24
5.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9b:fb:25:f8:1d:20:1b:95:b1:91:e0:ec:75:4e:12:76:c4:
67:f1:c4:d0:3b:77:a1:5d:4b:71:ea:46:8c:f7:d5:d2:09:92:
9f:d6:f8:d1:48:df:dc:22:71:e6:11:64:bf:b5:5d:ba:e1:53:
ec:df:9c:c2:49:ed:6a:5e:6b:e7:ee:f7:13:33:2d:94:48:2a:
27:3a:f9:24:00:05:84:a2:82:47:6e:ac:21:e4:31:60:83:d8:
23:2c:04:7c:45:1b:45:fb:13:1c:3d:b1:4b:c6:a5:0d:16:d8:
d6:65:f9:5d:97:cc:59:cd:11:16:e9:60:d1:2b:d5:d8:a6:24:
9b:cb:ae:ca:cc:9d:4a:72:4d:db:fc:0d:4a:44:25:35:99:a4:
66:54:81:c8:b3:dd:cf:a4:1e:7d:d3:78:de:5f:b2:4e:00:d7:
df:e2:a1:99:c1:9c:e8:43:b5:a4:a0:d6:7f:2f:9b:07:92:c0:
ba:28:2e:4c:49:8b:db:ac:7f:5c:a9:62:83:f7:c3:a6:d2:d3:
96:91:da:86:4a:df:59:ab:98:ea:65:f5:00:b2:59:3b:63:77:
40:c1:e6:47:48:b3:ac:7e:72:25:f5:10:57:69:78:52:9d:b4:
2d:c4:ab:6b:12:a6:1c:c4:61:63:95:72:ec:a8:09:13:4a:2b:
00:ce:0f:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRATuLxGuvNCCRJceuNvO/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTA3MTAyODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmUyOGMxYjRhNTI5ZWQ2MjU4MDhlNmExNDJhYjk3YzY4N2VmZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3l41QDi1n3ju4xF6tdHfJekmk0J
4sVWUB++eZJB5KZCeqC0iSjnmEHMV4qJm0uxd81JtJvx1Jh32O4WsuwlV4dC7TAU
YHSnOECypq87iyxYPLAInSopiycxoIhaUU5fDDzQnQcOsALqS0zmHMF2+c7L+9H/
EHmXPOysrQzA0udIAlw/Mj6eDGDZSrAeKF4aCO0DpVTVNNNx4PRT8HRtoAnclJFw
O4jvQWu/ywhVaFWBpg6sw/9OknHoTzaAOgAxCn9fjhzBHWrs5r2elnkfhNn4XXvp
MBfYbwVbl/hwRHYCFI3bteG8kM8vbIi9UTJMPO6EBtV0Dm9feNt7xgWTtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL/ijBtKUp7WJYCOahQquXxofv0pMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdi1LTUcwcFNudFlsZ0k1cUZDcTVmR2gtX1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/1AwQA
BecfMA0GCSqGSIb3DQEBCwUAA4IBAQAqm/sl+B0gG5WxkeDsdU4SdsRn8cTQO3eh
XUtx6kaM99XSCZKf1vjRSN/cInHmEWS/tV264VPs35zCSe1qXmvn7vcTMy2USCon
OvkkAAWEooJHbqwh5DFgg9gjLAR8RRtF+xMcPbFLxqUNFtjWZfldl8xZzREW6WDR
K9XYpiSby67KzJ1Kck3b/A1KRCU1maRmVIHIs93PpB5903jeX7JOANff4qGZwZzo
Q7WkoNZ/L5sHksC6KC5MSYvbrH9cqWKD98Om0tOWkdqGSt9Zq5jqZfUAslk7Y3dA
weZHSLOsfnIl9RBXaXhSnbQtxKtrEqYcxGFjlXLsqAkTSisAzg+t
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:15:49 2025 by rpki-client