Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/B-j6lkFyqvjbC_PQncwIGbX8TJo.roa
File: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (raw, json)
Hash identifier: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=
Subject key identifier: 07:E8:FA:96:41:72:AA:F8:DB:0B:F3:D0:9D:CC:08:19:B5:FC:4C:9A
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019422FC170F09A9BFA4E76E005A6989895F
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/B-j6lkFyqvjbC_PQncwIGbX8TJo.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 31.131.188.0/23 maxlen: 23
91.232.248.0/24 maxlen: 24
195.69.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:17:0f:09:a9:bf:a4:e7:6e:00:5a:69:89:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e8fa964172aaf8db0bf3d09dcc0819b5fc4c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:15:18:6e:3d:8e:e4:ec:04:60:b7:79:14:
d9:ea:ac:0f:f8:75:41:45:68:70:7a:f5:fd:bb:aa:
8a:a4:75:a8:b4:c2:8d:b8:b8:49:00:4c:60:84:cb:
46:13:54:f0:a5:f2:31:90:36:b9:4e:df:5a:8c:08:
e4:dd:42:dc:46:ee:8a:44:03:9d:8a:5f:ca:aa:7a:
d4:dd:d4:87:76:97:eb:26:e0:05:74:d2:74:55:fa:
73:88:bd:8a:d8:4a:b5:6a:b7:c6:14:3b:51:30:89:
3a:af:99:58:a2:25:fa:02:23:d6:4b:ec:0d:ed:00:
10:9b:72:67:0d:14:9e:24:fb:36:b0:7a:cd:6e:f1:
b3:f3:45:01:cc:e5:42:62:f3:99:d5:4c:31:5f:90:
5d:c7:27:ae:10:3f:3c:22:02:d0:12:a6:d7:11:22:
74:43:92:44:40:ca:a7:53:4b:0e:d1:de:e4:42:03:
73:65:5d:84:76:0e:4c:8f:08:0c:73:b1:f7:28:48:
58:14:98:bf:db:c9:cd:94:43:cb:4a:01:69:aa:60:
6d:94:74:53:96:b3:cc:88:36:2b:fb:59:19:a0:5d:
9c:d4:85:3c:a3:5f:39:6b:73:eb:eb:0f:07:56:f7:
0b:43:96:1e:a2:9d:17:04:4f:9f:55:02:81:30:98:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:FA:96:41:72:AA:F8:DB:0B:F3:D0:9D:CC:08:19:B5:FC:4C:9A
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/B-j6lkFyqvjbC_PQncwIGbX8TJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.188.0/23
91.232.248.0/24
195.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bc:6f:8f:43:96:f6:c9:02:79:48:5c:20:9e:a3:f0:bc:18:
d1:8c:d7:44:57:2c:2d:db:9c:af:7b:30:64:72:02:70:33:96:
31:94:25:dd:b9:9f:1c:d8:2d:ca:60:33:c7:04:fe:66:a4:55:
8b:ba:35:f8:53:07:de:a0:fe:3d:94:27:05:5f:f6:6a:85:ee:
de:e3:63:78:24:15:66:62:eb:a9:12:ba:d7:ab:75:25:3e:15:
77:7f:4e:2e:40:01:81:84:de:27:69:b8:6a:3b:0b:1c:53:8d:
24:f5:8b:dc:0d:3b:2f:f3:1f:83:92:bb:4a:95:ba:24:70:d0:
d6:f0:ce:54:da:db:42:11:05:3c:97:e2:d2:fa:e1:82:07:0b:
1d:ed:5a:b5:84:19:0c:eb:a8:0e:c4:05:19:4e:ff:fb:df:d0:
8a:be:62:2a:f4:d1:5a:42:27:28:6d:fa:68:b9:87:f4:8c:2f:
a9:15:86:85:d4:f7:55:25:f9:f4:08:6d:ef:b1:ec:a4:08:da:
c9:fe:35:b3:3f:93:e1:90:1d:ab:65:d5:aa:65:1d:df:18:8e:
2a:0b:a0:6a:f8:e5:a5:be:39:65:8e:65:3c:48:9b:87:ac:e5:
c0:ee:14:c3:f3:73:42:13:bb:60:e7:45:22:40:01:48:6a:15:
ba:c7:ce:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi/BcPCam/pOduAFppiYlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2
ZTM1NzgwHhcNMjUwMTAxMTc0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2U4ZmE5NjQxNzJhYWY4ZGIwYmYzZDA5ZGNjMDgxOWI1ZmM0YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypYVGG49juTsBGC3eRTZ6qwP+HVB
RWhwevX9u6qKpHWotMKNuLhJAExghMtGE1TwpfIxkDa5Tt9ajAjk3ULcRu6KRAOd
il/KqnrU3dSHdpfrJuAFdNJ0VfpziL2K2Eq1arfGFDtRMIk6r5lYoiX6AiPWS+wN
7QAQm3JnDRSeJPs2sHrNbvGz80UBzOVCYvOZ1UwxX5BdxyeuED88IgLQEqbXESJ0
Q5JEQMqnU0sO0d7kQgNzZV2Edg5MjwgMc7H3KEhYFJi/28nNlEPLSgFpqmBtlHRT
lrPMiDYr+1kZoF2c1IU8o185a3Pr6w8HVvcLQ5Yeop0XBE+fVQKBMJgfYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAfo+pZBcqr42wvz0J3MCBm1/EyaMB8GA1UdIwQY
MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt
ODUxZWE2NWNiOThiLzEvQi1qNmxrRnlxdmpiQ19QUW5jd0lHYlg4VEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi
LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH4O8AwQA
W+j4AwQAw0XgMA0GCSqGSIb3DQEBCwUAA4IBAQAevG+PQ5b2yQJ5SFwgnqPwvBjR
jNdEVywt25yvezBkcgJwM5YxlCXduZ8c2C3KYDPHBP5mpFWLujX4UwfeoP49lCcF
X/Zqhe7e42N4JBVmYuupErrXq3UlPhV3f04uQAGBhN4nabhqOwscU40k9YvcDTsv
8x+DkrtKlbokcNDW8M5U2ttCEQU8l+LS+uGCBwsd7Vq1hBkM66gOxAUZTv/739CK
vmIq9NFaQicobfpouYf0jC+pFYaF1PdVJfn0CG3vseykCNrJ/jWzP5PhkB2rZdWq
ZR3fGI4qC6Bq+OWlvjlljmU8SJuHrOXA7hTD83NCE7tg50UiQAFIahW6x84d
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:46 2025 by rpki-client