Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa
File: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (raw, json)
Hash identifier: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=
Subject key identifier: 04:45:94:51:BE:92:6F:96:00:11:10:3B:46:6F:9C:77:01:6C:98:5D
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194266C40BB639DA82CFC35B7E2021E4DA7
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 85.153.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:bb:63:9d:a8:2c:fc:35:b7:e2:02:1e:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04459451be926f960011103b466f9c77016c985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:af:6a:e0:36:97:89:4a:60:53:c1:51:f8:
75:5c:65:0d:fc:c5:9a:a6:a7:cc:5e:12:86:00:3f:
27:fa:7b:c0:ff:5a:90:7b:62:55:56:69:dd:73:2c:
4b:0c:c2:e7:09:5e:98:e9:49:f9:1d:dd:68:2e:1b:
64:04:82:7b:2c:59:02:ed:03:95:f3:db:6c:00:06:
34:fb:9c:77:c3:0f:e7:30:6f:8d:22:84:9f:23:08:
63:aa:47:87:d3:6e:76:8e:19:38:a2:1f:39:97:7c:
0f:51:fc:fc:b3:85:db:9f:47:cd:36:6c:df:24:70:
a0:48:6a:ed:9f:55:df:9c:f6:2f:af:e0:91:c8:17:
a9:36:18:38:ef:90:f6:57:d1:8c:f6:f4:f8:62:98:
0b:d7:b1:18:26:a6:95:c8:94:10:56:16:6c:db:aa:
d5:03:1d:0b:74:47:f0:1a:39:21:1e:67:0d:8b:28:
3a:01:8c:16:94:cb:fc:5a:23:31:e1:45:b9:6a:c9:
ce:c3:7f:88:6a:a6:7e:74:a0:6d:99:a7:9c:59:13:
69:a1:86:31:b2:bf:9e:d0:f8:3d:7b:58:81:9a:06:
02:19:ee:13:cd:40:f5:c5:e2:8f:d4:ad:67:91:eb:
84:d1:ab:e6:f9:0e:d8:bf:8f:c8:f1:b5:60:18:e3:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:94:51:BE:92:6F:96:00:11:10:3B:46:6F:9C:77:01:6C:98:5D
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ad:8c:cf:44:43:56:7b:3e:4d:d8:89:65:42:6e:f6:9a:fd:
db:20:f7:72:c3:a6:86:c9:bb:3b:df:df:b1:1f:e2:96:31:a8:
d3:0e:b2:5a:51:67:e4:3a:aa:36:69:22:a9:23:ab:7e:ff:f2:
dc:1e:73:54:ab:fa:0d:79:c1:04:ec:cc:8c:9d:63:37:12:9f:
74:93:27:31:98:80:7f:d6:14:15:15:6e:71:85:1b:a2:15:5a:
dd:00:bb:c0:91:03:c6:19:0b:f7:0d:17:fb:ca:88:0a:4c:4d:
a2:b6:df:97:13:62:f8:82:80:6b:5b:4d:2e:41:13:6c:0a:05:
63:69:e2:d7:35:50:ad:06:16:66:b3:2b:b0:3c:db:88:8d:8d:
42:c7:82:f4:a3:6e:b7:7c:e9:5c:36:c7:b1:93:ca:da:84:29:
ba:06:46:c9:b7:59:f3:eb:e1:cb:31:8e:90:70:c9:09:0b:ce:
07:5b:38:41:f9:b5:94:24:b9:88:cc:40:79:53:55:8f:ea:aa:
49:de:59:9e:62:6d:f0:ab:70:64:a1:46:f0:e3:d4:5f:52:8d:
9a:e5:31:32:8c:48:93:92:63:ec:4a:d1:30:d4:19:35:7f:7d:
1d:e8:b0:30:2f:ec:9f:97:02:b1:4a:fc:6f:8e:c0:92:37:af:
38:48:f0:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbEC7Y52oLPw1t+ICHk2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm
ZWI2MWIwHhcNMjUwMTAyMDk1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDQ1OTQ1MWJlOTI2Zjk2MDAxMTEwM2I0NjZmOWM3NzAxNmM5ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKvauA2l4lKYFPBUfh1XGUN/MWa
pqfMXhKGAD8n+nvA/1qQe2JVVmndcyxLDMLnCV6Y6Un5Hd1oLhtkBIJ7LFkC7QOV
89tsAAY0+5x3ww/nMG+NIoSfIwhjqkeH0252jhk4oh85l3wPUfz8s4Xbn0fNNmzf
JHCgSGrtn1XfnPYvr+CRyBepNhg475D2V9GM9vT4YpgL17EYJqaVyJQQVhZs26rV
Ax0LdEfwGjkhHmcNiyg6AYwWlMv8WiMx4UW5asnOw3+IaqZ+dKBtmaecWRNpoYYx
sr+e0Pg9e1iBmgYCGe4TzUD1xeKP1K1nkeuE0avm+Q7Yv4/I8bVgGOMk+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARFlFG+km+WABEQO0ZvnHcBbJhdMB8GA1UdIwQY
MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt
MWRjYzg2YzExZTc0LzEvQkVXVVViNlNiNVlBRVJBN1JtLWNkd0ZzbUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0
LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZkfMA0G
CSqGSIb3DQEBCwUAA4IBAQA6rYzPRENWez5N2IllQm72mv3bIPdyw6aGybs739+x
H+KWMajTDrJaUWfkOqo2aSKpI6t+//LcHnNUq/oNecEE7MyMnWM3Ep90kycxmIB/
1hQVFW5xhRuiFVrdALvAkQPGGQv3DRf7yogKTE2itt+XE2L4goBrW00uQRNsCgVj
aeLXNVCtBhZmsyuwPNuIjY1Cx4L0o263fOlcNsexk8rahCm6BkbJt1nz6+HLMY6Q
cMkJC84HWzhB+bWUJLmIzEB5U1WP6qpJ3lmeYm3wq3BkoUbw49RfUo2a5TEyjEiT
kmPsStEw1Bk1f30d6LAwL+yflwKxSvxvjsCSN684SPCG
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:57 2025 by rpki-client