Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5kUWZc-7ECSCFGUMY_PQYKHE6ko.roa
File: 5kUWZc-7ECSCFGUMY_PQYKHE6ko.roa (raw, json)
Hash identifier: XmrDvfTQqY2jNmiAjUN7MPnmnghxhtJT0gW8ovsP0TU=
Subject key identifier: E6:45:16:65:CF:BB:10:24:82:14:65:0C:63:F3:D0:60:A1:C4:EA:4A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A3F0C7E580F21AB328055449CAA3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5kUWZc-7ECSCFGUMY_PQYKHE6ko.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45054
IP address blocks: 31.184.228.0/23 maxlen: 24
45.159.200.0/22 maxlen: 22
46.161.16.0/22 maxlen: 22
46.161.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a3:f0:c7:e5:80:f2:1a:b3:28:05:54:49:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6451665cfbb10248214650c63f3d060a1c4ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:53:8e:9b:99:75:5a:2e:5b:28:ca:52:f4:
e6:e1:f6:23:96:95:8f:b8:e7:5d:54:c5:45:37:c0:
9b:01:ee:35:22:4b:15:f9:77:f1:ee:a2:d4:a0:a7:
7e:fa:ce:ae:5b:e8:32:44:97:e5:f1:69:46:dd:68:
c0:3c:ae:e0:be:a3:9b:c8:67:b1:13:55:6a:89:a3:
cf:51:bc:52:e7:2e:96:c0:f5:47:6d:7f:a5:a7:4e:
ba:ff:67:41:2c:3a:9c:7c:38:02:b1:74:4f:5d:7e:
5e:dd:72:9e:89:d2:5b:4c:60:a9:d1:09:d4:a9:47:
ae:1b:16:c6:ba:6d:83:ce:05:ae:8f:cc:71:46:d1:
48:cc:ba:6f:ad:c7:b7:09:94:b4:ae:d6:5b:91:d8:
63:f5:c8:85:ed:d6:0e:17:62:0d:56:9c:7e:a9:19:
a3:2c:58:2d:ca:ec:ac:33:1f:16:3d:bf:e4:a5:9a:
2d:e5:f4:64:01:e2:49:4d:dc:88:7c:61:e1:97:a0:
db:fb:ee:7a:00:1b:75:5b:b1:da:ba:72:1f:72:67:
f7:5d:b4:91:52:6f:d2:27:64:d3:21:8b:ae:d9:86:
28:bb:70:b9:1e:38:d5:a8:af:d6:1f:8e:52:69:98:
c2:44:16:1c:27:ce:47:3d:5b:86:25:de:86:58:f6:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:16:65:CF:BB:10:24:82:14:65:0C:63:F3:D0:60:A1:C4:EA:4A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5kUWZc-7ECSCFGUMY_PQYKHE6ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.228.0/23
45.159.200.0/22
46.161.16.0/22
46.161.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:63:9a:3b:09:10:fe:c2:90:4a:93:74:b2:d1:67:34:8c:82:
e2:7e:22:d6:5d:2e:88:85:63:a7:71:7b:6f:57:70:4c:60:38:
00:75:bf:61:2f:2f:1c:00:1a:ef:51:26:e6:1f:86:39:c8:2b:
80:6f:0c:1c:d5:0f:4c:ef:a3:1d:a8:2c:5f:35:bd:27:0b:59:
7b:4d:27:6a:3c:61:4a:82:32:a8:ad:75:28:9c:b2:a0:46:3d:
a9:7f:01:f1:0c:4e:cd:36:78:19:e4:fd:7c:48:cb:23:19:2d:
5d:e0:0f:a8:df:af:52:59:10:67:17:89:4f:7b:16:10:3c:5a:
39:b5:ab:0a:26:7e:dc:fa:f5:d1:50:fb:b4:2f:83:1c:80:9b:
fa:2d:5d:d6:95:52:09:90:e9:cd:35:71:28:9f:8d:29:c9:ff:
a4:d0:11:05:0a:19:91:6e:36:47:24:4f:ea:10:9b:9e:21:a7:
7e:1f:32:a8:44:d9:4b:df:46:1e:bf:8e:b1:41:cf:20:1e:46:
9e:2e:12:8b:bf:c3:24:11:50:b6:4a:e9:f2:ba:c7:08:46:6e:
49:29:4c:4c:17:08:09:e9:f7:06:03:0c:07:37:4b:24:69:b5:
22:c1:1e:46:b2:b1:ce:84:89:77:7d:55:c5:2d:0d:98:45:1e:
31:4a:d0:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQntaPwx+WA8hqzKAVUScqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQ1MTY2NWNmYmIxMDI0ODIxNDY1MGM2M2YzZDA2MGExYzRlYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdxTjpuZdVouWyjKUvTm4fYjlpWP
uOddVMVFN8CbAe41IksV+Xfx7qLUoKd++s6uW+gyRJfl8WlG3WjAPK7gvqObyGex
E1VqiaPPUbxS5y6WwPVHbX+lp066/2dBLDqcfDgCsXRPXX5e3XKeidJbTGCp0QnU
qUeuGxbGum2DzgWuj8xxRtFIzLpvrce3CZS0rtZbkdhj9ciF7dYOF2INVpx+qRmj
LFgtyuysMx8WPb/kpZot5fRkAeJJTdyIfGHhl6Db++56ABt1W7HaunIfcmf3XbSR
Um/SJ2TTIYuu2YYou3C5HjjVqK/WH45SaZjCRBYcJ85HPVuGJd6GWPaAqwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOZFFmXPuxAkghRlDGPz0GChxOpKMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvNWtVV1pjLTdFQ1NDRkdVTVlfUFFZS0hFNmtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH7jkAwQC
LZ/IAwQCLqEQAwQBLqEqMA0GCSqGSIb3DQEBCwUAA4IBAQBtY5o7CRD+wpBKk3Sy
0Wc0jILifiLWXS6IhWOncXtvV3BMYDgAdb9hLy8cABrvUSbmH4Y5yCuAbwwc1Q9M
76MdqCxfNb0nC1l7TSdqPGFKgjKorXUonLKgRj2pfwHxDE7NNngZ5P18SMsjGS1d
4A+o369SWRBnF4lPexYQPFo5tasKJn7c+vXRUPu0L4McgJv6LV3WlVIJkOnNNXEo
n40pyf+k0BEFChmRbjZHJE/qEJueIad+HzKoRNlL30Yev46xQc8gHkaeLhKLv8Mk
EVC2SunyuscIRm5JKUxMFwgJ6fcGAwwHN0skabUiwR5GsrHOhIl3fVXFLQ2YRR4x
StCx
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:04 2025 by rpki-client