Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/EKyKkfExKOAAfgUa49KGNc0Qw50.roa
File: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (raw, json)
Hash identifier: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=
Subject key identifier: 10:AC:8A:91:F1:31:28:E0:00:7E:05:1A:E3:D2:86:35:CD:10:C3:9D
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019424454F41801FF71FB704AA6DFC056811
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/EKyKkfExKOAAfgUa49KGNc0Qw50.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213250
IP address blocks: 31.214.240.0/24 maxlen: 32
134.255.221.0/24 maxlen: 32
134.255.235.0/24 maxlen: 24
134.255.236.0/24 maxlen: 32
134.255.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:41:80:1f:f7:1f:b7:04:aa:6d:fc:05:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ac8a91f13128e0007e051ae3d28635cd10c39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:7b:06:1c:6e:65:1b:04:7c:5f:a6:91:45:
c9:7c:31:35:3e:7f:b6:58:15:54:11:91:5a:23:93:
b2:d4:19:9a:70:ec:36:ca:c5:bc:a7:4b:c9:9e:38:
c0:c1:74:3d:f1:32:af:a1:3e:ba:f5:b2:61:00:36:
cc:e4:5d:f6:29:96:53:93:0c:2e:0a:4f:f8:49:bd:
a2:39:0f:a5:aa:cc:ec:0e:d7:86:86:82:d8:3d:73:
2d:26:38:ea:79:d3:fd:52:56:2f:85:41:17:84:58:
ff:72:e5:4e:f9:af:68:7e:36:3f:c2:03:4f:4b:75:
83:82:5a:15:33:67:fc:ae:af:2b:1f:21:55:47:c7:
1f:f1:6d:40:7a:c9:ba:91:b7:ff:80:f7:66:7f:60:
a6:15:15:c2:89:51:81:cd:94:19:fe:87:cc:d1:da:
b5:89:be:16:6c:84:8f:35:05:49:c5:47:c7:97:81:
b1:59:d0:ae:9e:0a:95:50:53:d1:df:ac:ab:5e:6f:
d7:02:df:b9:f7:62:66:f2:97:a6:15:93:7f:a1:e5:
6f:ec:fd:45:e0:86:71:7c:61:2a:39:14:88:e8:2c:
14:80:1d:86:c6:fd:94:69:85:57:32:5a:f1:ee:8e:
f3:d1:4d:c5:ee:c7:ed:70:99:6e:19:01:7b:10:01:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:8A:91:F1:31:28:E0:00:7E:05:1A:E3:D2:86:35:CD:10:C3:9D
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/EKyKkfExKOAAfgUa49KGNc0Qw50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.240.0/24
134.255.221.0/24
134.255.235.0-134.255.236.255
134.255.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:61:a3:44:41:f2:3f:00:3e:2e:19:0f:91:6d:25:98:7c:8d:
ce:43:67:24:95:23:12:2b:6d:4f:4b:34:d5:f7:3b:8e:26:78:
fc:f0:9b:e5:e3:6f:c9:95:37:3d:cd:66:e8:e9:5b:e2:74:ef:
fc:b9:c7:30:aa:94:05:ab:f5:c7:79:e8:61:7b:fc:05:eb:5d:
4e:c2:e2:3b:74:2e:72:ea:0b:a0:43:8e:42:38:17:c3:8e:44:
33:98:2f:a4:f9:d8:50:f6:02:b1:ff:7f:c2:4a:0f:7f:4b:33:
93:a3:e3:02:54:3a:4c:da:c2:c9:8e:cc:01:68:5e:d4:c7:e5:
5b:da:69:50:f8:35:e7:df:c8:48:42:c5:19:03:a4:9e:53:f2:
1c:04:5e:1e:45:a7:9d:94:93:0b:9b:21:da:b4:01:22:0b:d4:
87:52:f7:37:cc:99:a6:79:5a:08:5c:1d:71:6b:e2:87:90:4c:
f9:8e:f8:25:bc:14:5c:52:4e:85:ca:69:2e:7f:25:3c:66:75:
7d:52:57:56:59:f4:7f:ce:5e:ba:ee:a2:1d:6c:a4:80:03:99:
3a:62:b3:9c:5e:26:1c:d3:e0:16:4f:5d:ca:2d:02:8b:8a:4b:
3c:ae:95:7c:23:b0:c6:db:c1:ca:b3:54:2c:a8:43:97:da:e8:
a0:c4:c4:1b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQkRU9BgB/3H7cEqm38BWgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx
NTNjYmEwHhcNMjUwMTAxMjM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFjOGE5MWYxMzEyOGUwMDA3ZTA1MWFlM2QyODYzNWNkMTBjMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n57BhxuZRsEfF+mkUXJfDE1Pn+2
WBVUEZFaI5Oy1BmacOw2ysW8p0vJnjjAwXQ98TKvoT669bJhADbM5F32KZZTkwwu
Ck/4Sb2iOQ+lqszsDteGhoLYPXMtJjjqedP9UlYvhUEXhFj/cuVO+a9ofjY/wgNP
S3WDgloVM2f8rq8rHyFVR8cf8W1Aesm6kbf/gPdmf2CmFRXCiVGBzZQZ/ofM0dq1
ib4WbISPNQVJxUfHl4GxWdCungqVUFPR36yrXm/XAt+592Jm8pemFZN/oeVv7P1F
4IZxfGEqORSI6CwUgB2Gxv2UaYVXMlrx7o7z0U3F7sftcJluGQF7EAGJfQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBCsipHxMSjgAH4FGuPShjXNEMOdMB8GA1UdIwQY
MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt
NjViZTU1MDMxNjVkLzEvRUt5S2tmRXhLT0FBZmdVYTQ5S0dOYzBRdzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk
LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAH9bwAwQA
hv/dMAwDBACG/+sDBACG/+wDBACG//4wDQYJKoZIhvcNAQELBQADggEBAH9ho0RB
8j8APi4ZD5FtJZh8jc5DZySVIxIrbU9LNNX3O44mePzwm+Xjb8mVNz3NZujpW+J0
7/y5xzCqlAWr9cd56GF7/AXrXU7C4jt0LnLqC6BDjkI4F8OORDOYL6T52FD2ArH/
f8JKD39LM5Oj4wJUOkzawsmOzAFoXtTH5VvaaVD4NeffyEhCxRkDpJ5T8hwEXh5F
p52UkwubIdq0ASIL1IdS9zfMmaZ5WghcHXFr4oeQTPmO+CW8FFxSToXKaS5/JTxm
dX1SV1ZZ9H/OXrruoh1spIADmTpis5xeJhzT4BZPXcotAouKSzyulXwjsMbbwcqz
VCyoQ5fa6KDExBs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:25:07 2025 by rpki-client