Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/WL2g552SMTFxlVreLBfVq6mZ70g.roa
File: WL2g552SMTFxlVreLBfVq6mZ70g.roa (raw, json)
Hash identifier: fT4vchM9u9UmPGHFe3vcWQVFsOy6XCvUN9jsOGCnnzk=
Subject key identifier: 58:BD:A0:E7:9D:92:31:31:71:95:5A:DE:2C:17:D5:AB:A9:99:EF:48
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A38C1803717D46685796D3D811D61
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/WL2g552SMTFxlVreLBfVq6mZ70g.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25144
IP address blocks: 31.223.128.0/19 maxlen: 19
31.223.128.0/21 maxlen: 21
31.223.136.0/21 maxlen: 21
31.223.144.0/21 maxlen: 21
31.223.152.0/21 maxlen: 21
45.131.116.0/22 maxlen: 22
45.131.118.0/23 maxlen: 23
46.239.0.0/18 maxlen: 18
62.101.144.0/20 maxlen: 20
81.93.64.0/19 maxlen: 19
81.93.66.0/24 maxlen: 24
81.93.67.0/24 maxlen: 24
81.93.69.0/24 maxlen: 24
81.93.73.0/24 maxlen: 24
81.93.84.0/24 maxlen: 24
81.93.86.0/24 maxlen: 24
81.93.91.0/24 maxlen: 24
81.93.92.0/24 maxlen: 24
89.111.192.0/18 maxlen: 18
89.111.192.0/19 maxlen: 19
89.111.192.0/24 maxlen: 24
89.111.200.0/24 maxlen: 24
89.111.224.0/19 maxlen: 19
89.111.225.0/24 maxlen: 24
89.111.226.0/24 maxlen: 24
89.111.227.0/24 maxlen: 24
89.111.231.0/24 maxlen: 24
89.111.235.0/24 maxlen: 24
89.111.236.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
89.111.244.0/22 maxlen: 22
89.111.246.0/24 maxlen: 24
89.111.248.0/22 maxlen: 22
94.250.0.0/18 maxlen: 18
94.250.18.0/24 maxlen: 24
94.250.64.0/18 maxlen: 18
109.165.128.0/17 maxlen: 17
185.35.156.0/22 maxlen: 22
185.125.120.0/22 maxlen: 22
217.24.128.0/20 maxlen: 20
2a00:cb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:c1:80:37:17:d4:66:85:79:6d:3d:81:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58bda0e79d92313171955ade2c17d5aba999ef48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:55:31:dc:80:76:f0:d6:e0:81:f3:12:0c:
36:56:b9:cd:66:57:37:24:3d:be:98:5c:fd:c8:a6:
61:3d:9d:7e:61:28:57:d6:85:86:c8:ca:9f:39:02:
53:25:63:39:d0:d3:a1:bc:63:2f:3e:31:f4:3f:97:
c5:d3:2e:8e:92:e0:7b:77:aa:0e:77:c8:f0:0e:e6:
39:0f:96:26:76:39:04:4c:a6:bc:32:42:22:0d:50:
11:cf:56:02:6d:47:4e:2a:0e:86:b5:5b:96:de:88:
bb:c0:2e:7d:1b:86:08:a7:16:22:f5:a4:8b:3b:0a:
a3:28:71:0f:b5:01:70:01:36:83:af:e9:df:35:c9:
1a:e0:9b:2a:61:27:c5:1a:fb:68:ef:b7:b5:32:06:
f7:64:f8:1b:46:38:78:75:51:04:91:0a:2a:12:cc:
41:b9:98:ce:64:e1:96:f8:49:50:6e:27:3f:6a:e4:
34:05:06:53:6a:2a:27:5f:f9:8e:2c:d8:9d:8f:c7:
40:5b:7d:74:01:40:37:ad:b1:00:17:5c:6e:06:a8:
15:ba:76:5a:b1:9d:df:da:92:fd:44:7b:ac:71:23:
81:63:a6:13:d8:69:b6:fc:80:d3:42:bf:6b:0a:ad:
8f:0b:0b:7c:33:2b:c7:8f:dd:c2:2f:e2:4a:13:39:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:A0:E7:9D:92:31:31:71:95:5A:DE:2C:17:D5:AB:A9:99:EF:48
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/WL2g552SMTFxlVreLBfVq6mZ70g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.128.0/19
45.131.116.0/22
46.239.0.0/18
62.101.144.0/20
81.93.64.0/19
89.111.192.0/18
94.250.0.0/17
109.165.128.0/17
185.35.156.0/22
185.125.120.0/22
217.24.128.0/20
IPv6:
2a00:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
56:3d:36:8a:6e:43:1a:49:57:b7:ad:85:13:2f:45:46:11:48:
d4:91:05:48:5a:92:00:ea:7f:69:bc:5b:4b:b3:df:6c:39:e2:
f7:5d:05:63:21:d7:ab:79:05:b9:2f:06:17:6c:c1:2f:43:f0:
ab:18:a3:94:e4:65:f3:a3:3a:d3:45:65:31:13:0c:39:af:c6:
df:6b:0c:a5:df:ea:6d:de:75:2d:92:ca:1e:30:86:e2:ad:8c:
01:a5:92:aa:01:0c:e4:ab:eb:fa:86:b8:78:d1:44:0e:e7:f0:
9b:b6:23:39:8f:f8:a7:0c:ea:ba:d8:59:c4:b7:27:6e:81:f7:
ea:01:25:82:5a:8f:f4:e0:02:cc:eb:b1:e4:e0:ee:3b:90:95:
51:2d:e6:38:e6:4f:cb:23:25:89:0c:78:02:69:0b:e3:e0:cd:
68:c7:fb:f1:3d:ee:7f:0d:4e:1f:71:a5:62:54:f0:fc:ea:ff:
a8:c4:b9:33:87:51:6d:28:82:2d:e8:e0:f6:51:53:9d:c9:ac:
93:99:b2:b0:e4:a1:29:a1:92:3f:21:8f:96:48:84:52:84:00:
cf:12:da:e6:a9:ba:2d:99:fe:7a:58:15:b3:5d:f8:18:e8:0d:
db:bb:8e:ff:94:73:04:44:7f:0e:7c:cc:80:e0:56:cf:88:c2:
d7:a0:64:e7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZQjajjBgDcX1GaFeW09gR1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1
ZGVlZTgwHhcNMjUwMTAxMTk0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJkYTBlNzlkOTIzMTMxNzE5NTVhZGUyYzE3ZDVhYmE5OTllZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/JVMdyAdvDW4IHzEgw2VrnNZlc3
JD2+mFz9yKZhPZ1+YShX1oWGyMqfOQJTJWM50NOhvGMvPjH0P5fF0y6OkuB7d6oO
d8jwDuY5D5YmdjkETKa8MkIiDVARz1YCbUdOKg6GtVuW3oi7wC59G4YIpxYi9aSL
OwqjKHEPtQFwATaDr+nfNcka4JsqYSfFGvto77e1Mgb3ZPgbRjh4dVEEkQoqEsxB
uZjOZOGW+ElQbic/auQ0BQZTaionX/mOLNidj8dAW310AUA3rbEAF1xuBqgVunZa
sZ3f2pL9RHuscSOBY6YT2Gm2/IDTQr9rCq2PCwt8MyvHj93CL+JKEzmVtwIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFFi9oOedkjExcZVa3iwX1aupme9IMB8GA1UdIwQY
MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt
ZDliNTMzZjdmYmMzLzEvV0wyZzU1MlNNVEZ4bFZyZUxCZlZxNm1aNzBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz
LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFH9+AAwQC
LYN0AwQGLu8AAwQEPmWQAwQFUV1AAwQGWW/AAwQHXvoAAwQHbaWAAwQCuSOcAwQC
uX14AwQE2RiAMA0EAgACMAcDBQAqAMsAMA0GCSqGSIb3DQEBCwUAA4IBAQBWPTaK
bkMaSVe3rYUTL0VGEUjUkQVIWpIA6n9pvFtLs99sOeL3XQVjIdereQW5LwYXbMEv
Q/CrGKOU5GXzozrTRWUxEww5r8bfawyl3+pt3nUtksoeMIbirYwBpZKqAQzkq+v6
hrh40UQO5/CbtiM5j/inDOq62FnEtydugffqASWCWo/04ALM67Hk4O47kJVRLeY4
5k/LIyWJDHgCaQvj4M1ox/vxPe5/DU4fcaViVPD86v+oxLkzh1FtKIIt6OD2UVOd
yayTmbKw5KEpoZI/IY+WSIRShADPEtrmqbotmf56WBWzXfgY6A3bu47/lHMERH8O
fMyA4FbPiMLXoGTn
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:51 2025 by rpki-client