Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/c0UDF77YneOEpDbpE_XbzKIY8Uk.roa
File: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (raw, json)
Hash identifier: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=
Subject key identifier: 73:45:03:17:BE:D8:9D:E3:84:A4:36:E9:13:F5:DB:CC:A2:18:F1:49
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 019427B581C6C15A9E8C2384B4A21F4720C9
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/c0UDF77YneOEpDbpE_XbzKIY8Uk.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42714
IP address blocks: 31.170.128.0/19 maxlen: 24
31.170.128.0/20 maxlen: 24
31.170.144.0/21 maxlen: 24
31.170.152.0/21 maxlen: 24
193.200.38.0/24 maxlen: 24
193.200.39.0/24 maxlen: 24
195.211.184.0/22 maxlen: 24
2a02:7640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:81:c6:c1:5a:9e:8c:23:84:b4:a2:1f:47:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73450317bed89de384a436e913f5dbcca218f149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:8e:c0:5e:75:31:d2:70:fa:27:a1:e1:cb:
61:8d:49:3c:e4:87:ca:85:c0:56:d8:49:0d:d8:93:
d6:76:f2:6d:39:88:18:be:1e:c4:51:38:97:35:cd:
1b:95:9f:79:ee:15:ce:24:99:81:9f:a2:1d:d0:04:
89:46:08:d6:3c:72:5e:82:fd:d0:95:52:db:12:03:
da:27:86:c2:08:83:a1:dc:3d:5f:2d:24:27:d0:1d:
4b:61:73:06:1a:a5:ec:a5:ee:6e:35:28:9a:b2:7b:
1e:e5:47:71:ae:a8:e0:98:ed:16:88:7a:ca:52:7c:
36:b5:a7:59:a2:ee:79:b0:b9:3f:8c:f2:18:ee:d3:
c0:6e:c6:c8:8b:94:7f:bc:50:ad:7e:6c:ba:6a:11:
39:98:41:f8:68:3c:c3:95:76:7a:b4:dc:9a:bc:6a:
02:8b:45:d1:d3:cf:5e:55:8e:c5:4c:87:78:b2:92:
1c:e9:20:44:64:7f:54:dd:81:0e:94:f2:c2:37:24:
cf:24:e2:cc:33:56:94:17:b8:fd:23:0c:f6:6a:6c:
3d:ee:77:26:0e:20:17:c3:2c:b9:e8:2a:00:c1:86:
fd:1d:97:25:7f:4f:2e:3b:11:4a:62:ad:aa:a4:b3:
64:5d:8b:06:e9:74:78:2a:a8:ab:3d:8a:ee:11:84:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:45:03:17:BE:D8:9D:E3:84:A4:36:E9:13:F5:DB:CC:A2:18:F1:49
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/c0UDF77YneOEpDbpE_XbzKIY8Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.128.0/19
193.200.38.0/23
195.211.184.0/22
IPv6:
2a02:7640::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2e:04:f6:e5:f5:67:7a:f7:c5:66:70:70:0b:89:ae:69:60:
4f:c4:24:b0:7b:24:2b:ba:5c:23:4c:dc:e0:af:af:98:8b:4f:
ca:92:b9:dd:96:e4:4e:8a:ac:f8:7f:d5:d6:a1:b1:9d:49:6f:
78:f3:81:67:57:72:f0:4f:f3:52:7e:6b:39:cd:5d:e0:37:51:
99:d6:ff:f1:3d:d1:0f:d8:e9:60:f9:a2:b6:b0:09:33:aa:9d:
84:5d:05:92:a3:97:3b:c7:02:64:65:83:5c:1f:20:1c:b0:27:
b1:fe:17:e9:2b:24:d7:6a:24:28:c0:a7:69:80:83:c1:01:5a:
e1:9c:2a:ee:9b:42:f7:99:13:1b:c4:5c:99:a4:ae:d1:7b:51:
61:3c:9c:ba:1a:1a:67:ac:fd:0f:57:ee:22:7e:ea:5a:92:ad:
4b:d7:87:df:ae:81:20:9f:95:a1:1e:fd:ea:3e:81:fd:bc:43:
90:ce:2d:d6:eb:a6:ba:cb:ea:a3:0e:38:ad:ff:78:dd:40:7e:
90:2e:dc:04:5d:be:13:63:49:b7:4a:ea:a2:cc:d7:a2:e4:34:
81:43:b5:52:cc:aa:77:76:16:31:8b:6b:97:fb:fe:48:f8:61:
9a:ea:00:11:a4:90:d4:f4:f3:03:da:a0:21:95:fa:23:0c:f2:
c3:18:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:58:10 2025 by rpki-client