Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/YXk4VQ9w2ydeFfWUpTPAL38DI14.roa
File: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (raw, json)
Hash identifier: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=
Subject key identifier: 61:79:38:55:0F:70:DB:27:5E:15:F5:94:A5:33:C0:2F:7F:03:23:5E
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 0194228DFDD487FA115694708284903DFE03
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/YXk4VQ9w2ydeFfWUpTPAL38DI14.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12700
IP address blocks: 31.131.32.0/21 maxlen: 21
31.131.32.0/24 maxlen: 24
31.131.33.0/24 maxlen: 24
31.131.34.0/24 maxlen: 24
31.131.35.0/24 maxlen: 24
31.131.36.0/24 maxlen: 24
31.131.37.0/24 maxlen: 24
31.131.38.0/24 maxlen: 24
31.131.39.0/24 maxlen: 24
91.202.240.0/22 maxlen: 22
91.202.240.0/24 maxlen: 24
91.202.241.0/24 maxlen: 24
91.202.242.0/24 maxlen: 24
91.202.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fd:d4:87:fa:11:56:94:70:82:84:90:3d:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=617938550f70db275e15f594a533c02f7f03235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:35:3c:49:e3:18:79:d6:26:de:b0:1f:bc:
07:3e:6c:17:cc:b4:ae:92:9f:b5:02:57:94:5c:ad:
5e:ca:df:73:70:7e:6e:84:1b:f8:d7:4e:cd:2b:cc:
49:06:72:f0:5e:98:f2:a6:04:fb:05:bf:67:02:80:
6f:eb:6e:a2:c5:dc:5b:34:c1:17:97:68:c0:39:27:
5e:c2:05:8d:a9:aa:c3:fd:c0:dc:f6:7a:ec:90:d4:
05:9f:60:c8:b9:d5:f1:21:6b:39:4e:f1:27:c3:85:
f2:ca:b1:0c:91:0e:3a:08:9c:f5:d1:26:59:c0:e6:
f9:9d:75:09:f5:38:96:1e:3b:a0:b7:56:f9:83:61:
98:78:25:5a:2e:2b:55:89:6b:cf:e6:f0:4c:57:0b:
7b:ab:5b:31:22:55:4f:bf:4a:f4:41:f8:01:4b:7b:
f2:b7:ef:90:07:8d:09:14:9e:92:65:bb:4e:6f:fc:
4c:62:85:5d:2e:58:ec:c6:c5:b7:66:70:6e:d4:eb:
18:84:87:e3:36:09:43:5a:ce:d1:b3:0b:01:f2:1d:
22:ae:0f:5d:19:fa:eb:bf:39:54:8a:96:30:69:34:
18:4d:d8:30:c8:fa:b0:f1:41:40:60:d9:76:cb:d5:
7f:93:ed:dc:ae:71:df:d0:28:31:86:c2:dd:1c:1b:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:79:38:55:0F:70:DB:27:5E:15:F5:94:A5:33:C0:2F:7F:03:23:5E
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/YXk4VQ9w2ydeFfWUpTPAL38DI14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.32.0/21
91.202.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:00:1c:ea:de:09:10:35:2a:5a:cf:b3:ec:49:ba:e2:84:bd:
18:8e:96:1a:b2:33:5b:aa:19:8e:58:77:49:ba:74:b7:db:3e:
be:ed:89:cd:8b:e0:f3:4c:54:b7:0e:c8:a4:22:71:3b:09:90:
21:6d:cd:cd:33:14:9d:63:24:d1:ec:62:04:51:47:2a:fe:a0:
2b:58:60:ec:cd:5e:15:8f:4a:9a:de:1e:fc:d0:02:fc:cf:3a:
94:a8:30:50:8d:8f:7f:82:1e:8e:d6:5c:dc:83:62:7b:ad:f8:
89:b8:0f:ec:c5:31:81:db:19:7e:5e:b6:dd:ae:18:b3:6b:86:
0a:10:ff:1a:9b:52:a3:28:b6:50:e6:7c:d3:01:43:89:4d:29:
28:c4:61:5a:45:a2:c6:58:b3:98:17:93:92:51:4b:2d:3e:bd:
c9:65:00:c7:1e:f0:a9:93:f0:1e:29:49:99:99:1a:7b:56:b1:
5d:34:fc:8f:05:b2:da:58:ba:6c:9d:77:f2:5d:7e:3d:1f:25:
ec:00:38:25:67:a0:83:5e:32:31:96:dc:40:f7:cc:a7:2f:62:
37:81:4d:c7:fc:96:8d:37:56:5d:61:fb:c2:6b:05:b3:f5:f9:
56:b3:dc:a0:b1:b8:67:06:39:7c:80:eb:41:e6:1e:0a:c3:46:
9f:eb:cb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:48:41 2025 by rpki-client