Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa
File: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (raw, json)
Hash identifier: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=
Subject key identifier: 2B:20:E2:5B:EC:8F:E0:FA:04:31:E3:B4:58:79:A6:D2:E4:29:5F:3A
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 019420D65073C4818AB1D42AD7A5BDDA71C0
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25460
IP address blocks: 5.61.120.0/21 maxlen: 21
45.154.208.0/22 maxlen: 22
185.118.28.0/22 maxlen: 22
2a01:5ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:50:73:c4:81:8a:b1:d4:2a:d7:a5:bd:da:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b20e25bec8fe0fa0431e3b45879a6d2e4295f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:63:25:5d:7a:a0:38:6a:fb:b5:9b:a7:0d:
08:b9:1c:48:78:49:08:9d:46:0f:5a:18:60:ac:b0:
fb:f5:4e:d6:f9:5c:22:48:2b:ec:b6:15:e5:96:fe:
ce:e2:2e:0b:d2:d7:e7:09:c3:df:e2:26:96:99:d0:
9c:0c:30:26:e0:01:54:da:a4:0f:dc:c3:df:f0:7b:
ea:5b:11:f6:7c:6d:43:fe:ba:e0:c0:ab:e0:60:37:
84:91:f9:21:d2:23:2b:61:b4:c4:e6:46:6a:bf:00:
55:c9:24:90:02:ac:5e:90:a2:48:3c:46:af:96:e2:
54:8d:e4:93:f9:99:33:12:11:bd:92:07:3a:98:a6:
30:6f:bc:26:ee:e1:de:ce:28:ad:44:47:f5:9f:10:
ca:6c:46:85:a7:ba:83:d6:d0:f6:78:a8:2f:41:8b:
91:fa:7b:76:0d:8a:a3:3f:15:9c:8f:ce:c1:44:c4:
a0:b3:16:03:82:ce:ac:a5:c8:33:0f:ea:c0:57:ab:
e1:43:91:bb:d5:52:3d:61:d5:f5:8e:35:67:15:cc:
bd:1b:f8:3f:41:e5:e6:b5:74:61:7d:a1:2f:a5:fe:
c9:53:08:eb:bf:1c:b0:e7:46:03:d8:36:ad:21:f3:
fd:74:33:10:dd:91:6e:52:01:cd:05:12:10:12:99:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:E2:5B:EC:8F:E0:FA:04:31:E3:B4:58:79:A6:D2:E4:29:5F:3A
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.118.28.0/22
IPv6:
2a01:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
83:25:35:97:8b:3c:3a:5c:ef:ea:aa:bd:93:9c:dc:60:6e:4d:
60:c4:d0:d3:27:e2:7b:19:b5:cf:9e:92:5c:c0:13:4d:08:cc:
70:4a:43:82:90:b5:c0:2a:a1:95:ba:40:34:9c:8f:b3:64:de:
0f:56:ef:8f:2e:52:7b:22:c0:43:9f:ba:c3:26:b2:7c:e1:77:
8c:da:37:4e:d3:4a:43:93:66:6a:9e:b9:bd:98:fd:62:5a:65:
52:25:7e:f3:1f:0a:e5:58:02:ff:e1:5d:34:1d:de:5f:39:4d:
aa:34:2c:17:26:82:c4:87:6e:a9:60:23:2b:cc:80:c9:55:c8:
36:d8:64:9f:ad:70:6f:bd:66:20:0d:4b:b6:6f:df:42:db:79:
af:47:75:88:ac:de:1a:50:5a:87:ef:41:20:50:7d:58:f9:2d:
3b:71:a8:f4:be:0c:65:f9:eb:7f:1d:1e:7b:e2:a6:84:8e:1f:
b5:cc:ce:d7:39:d2:cb:37:db:24:cf:73:18:29:9d:58:97:fa:
2b:4a:e5:6f:c2:33:ee:75:fc:79:45:ef:6a:03:5f:e1:7f:72:
5c:ec:74:25:97:b4:01:36:a0:08:41:c9:60:a9:86:03:eb:bf:
d4:f6:3b:65:d2:0d:e7:d7:e8:10:53:6b:25:ca:b5:fc:0c:17:
64:81:84:98
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQg1lBzxIGKsdQq16W92nHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk
YTIyNzQwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjIwZTI1YmVjOGZlMGZhMDQzMWUzYjQ1ODc5YTZkMmU0Mjk1ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmtjJV16oDhq+7Wbpw0IuRxIeEkI
nUYPWhhgrLD79U7W+VwiSCvsthXllv7O4i4L0tfnCcPf4iaWmdCcDDAm4AFU2qQP
3MPf8HvqWxH2fG1D/rrgwKvgYDeEkfkh0iMrYbTE5kZqvwBVySSQAqxekKJIPEav
luJUjeST+ZkzEhG9kgc6mKYwb7wm7uHeziitREf1nxDKbEaFp7qD1tD2eKgvQYuR
+nt2DYqjPxWcj87BRMSgsxYDgs6spcgzD+rAV6vhQ5G71VI9YdX1jjVnFcy9G/g/
QeXmtXRhfaEvpf7JUwjrvxyw50YD2DatIfP9dDMQ3ZFuUgHNBRIQEpk3OQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCsg4lvsj+D6BDHjtFh5ptLkKV86MB8GA1UdIwQY
MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct
ZWRmN2JiNjUzZjEzLzEvS3lEaVcteVA0UG9FTWVPMFdIbW0wdVFwWHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz
LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT14AwQC
LZrQAwQCuXYcMA0EAgACMAcDBQAqAVrAMA0GCSqGSIb3DQEBCwUAA4IBAQCDJTWX
izw6XO/qqr2TnNxgbk1gxNDTJ+J7GbXPnpJcwBNNCMxwSkOCkLXAKqGVukA0nI+z
ZN4PVu+PLlJ7IsBDn7rDJrJ84XeM2jdO00pDk2Zqnrm9mP1iWmVSJX7zHwrlWAL/
4V00Hd5fOU2qNCwXJoLEh26pYCMrzIDJVcg22GSfrXBvvWYgDUu2b99C23mvR3WI
rN4aUFqH70EgUH1Y+S07caj0vgxl+et/HR574qaEjh+1zM7XOdLLN9skz3MYKZ1Y
l/orSuVvwjPudfx5Re9qA1/hf3Jc7HQll7QBNqAIQclgqYYD67/U9jtl0g3n1+gQ
U2slyrX8DBdkgYSY
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:28 2025 by rpki-client