Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa
File: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (raw, json)
Hash identifier: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=
Subject key identifier: 2A:78:F2:61:53:94:DD:82:E2:80:FC:59:46:03:78:00:8A:07:52:F4
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019424B3D6498063440AC9C2A4CDC3C8B01D
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28878
IP address blocks: 31.223.160.0/20 maxlen: 20
37.17.208.0/20 maxlen: 20
78.108.128.0/20 maxlen: 20
80.246.192.0/20 maxlen: 20
80.246.194.0/24 maxlen: 24
80.255.240.0/20 maxlen: 20
81.21.136.0/21 maxlen: 21
81.30.32.0/20 maxlen: 20
85.10.160.0/19 maxlen: 24
141.255.176.0/22 maxlen: 24
171.33.128.0/21 maxlen: 21
176.74.224.0/19 maxlen: 19
185.15.248.0/22 maxlen: 22
217.21.240.0/20 maxlen: 20
217.149.128.0/20 maxlen: 20
2001:4cb8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d6:49:80:63:44:0a:c9:c2:a4:cd:c3:c8:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a78f2615394dd82e280fc59460378008a0752f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:25:57:10:61:22:12:d5:24:b1:a4:96:d1:
10:38:0e:68:55:8e:fe:c5:56:0b:f2:fe:71:7e:d9:
ac:4d:c8:f8:1f:f1:01:0e:1a:c4:30:e6:56:57:f2:
a9:ce:e2:d8:36:82:94:88:cd:78:63:82:82:df:fd:
7c:47:24:5c:22:ff:d1:e1:91:7d:15:38:8f:f8:e2:
9b:5b:36:b0:36:f3:e2:b0:06:7b:cc:ae:99:d7:12:
46:9f:51:43:03:95:cd:03:c0:11:0c:b5:d5:0e:2b:
a9:77:a8:94:d7:f1:1a:84:ff:78:78:52:dc:93:cf:
64:79:94:09:0b:53:8c:bc:91:0c:49:af:58:8f:8c:
45:1e:dc:ac:5a:e5:a1:5b:7e:4f:c4:e0:0a:4b:1d:
6c:59:fc:28:72:98:db:e4:29:25:e8:f1:94:3a:68:
39:c5:2a:13:30:c6:36:39:20:4a:68:61:bc:45:e2:
a5:9a:6c:16:2a:5d:dd:5b:f0:6e:78:64:8b:60:13:
c3:c1:3b:30:a5:a5:c8:6d:09:a5:48:cf:40:91:ba:
c7:1f:fb:4f:4d:f4:d0:25:e7:0d:f4:6b:80:81:35:
28:de:5a:f6:58:c3:c4:b1:53:83:9c:c2:6d:d9:70:
d9:23:e8:cd:c6:51:22:09:56:84:bc:73:47:a8:dd:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:F2:61:53:94:DD:82:E2:80:FC:59:46:03:78:00:8A:07:52:F4
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.160.0/20
37.17.208.0/20
78.108.128.0/20
80.246.192.0/20
80.255.240.0/20
81.21.136.0/21
81.30.32.0/20
85.10.160.0/19
141.255.176.0/22
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:4cb8::/29
Signature Algorithm: sha256WithRSAEncryption
54:7b:39:0a:9f:38:51:1c:80:a0:fa:32:b4:87:2c:3f:6c:cc:
3a:ff:94:af:01:20:fb:26:d3:6b:25:6c:0e:47:8b:29:c0:10:
2f:43:24:7b:28:2b:57:49:a7:f2:b3:bf:9b:7e:67:04:92:8f:
14:e3:5d:d7:30:6b:ab:b8:32:cd:c0:7b:c2:a4:74:3b:6c:02:
9d:24:19:fe:15:bb:9d:61:f0:3a:e8:8f:d6:6e:0a:32:5a:5d:
ae:67:5d:75:90:db:6b:56:fc:71:1f:bf:f4:b5:50:2d:cd:36:
0d:de:65:bb:73:82:40:79:ad:a0:00:1b:9f:69:8c:28:38:ac:
5e:d9:91:16:4d:09:c5:21:1a:93:b4:d6:70:9d:86:9f:ef:0c:
6f:1e:d4:a7:9d:8b:cd:4d:1f:9d:ce:eb:07:4d:4e:33:ba:ac:
e3:cd:a1:2a:bb:c9:81:55:13:bb:a9:44:91:91:89:30:be:b2:
b4:78:17:86:cb:fe:3e:c2:7b:db:6f:fa:ed:43:83:64:47:ce:
9a:7f:74:59:89:6a:64:9e:86:df:4a:0b:16:ab:49:d4:7c:5d:
a2:84:5d:03:b6:71:56:42:ab:5b:fe:b7:4d:c6:37:b2:4a:b9:
78:04:c5:25:d9:f1:f0:60:b0:c9:b0:f2:8a:5f:40:b6:2c:bb:
aa:7e:c6:75
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAZQks9ZJgGNECsnCpM3DyLAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjUwMTAyMDE0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTc4ZjI2MTUzOTRkZDgyZTI4MGZjNTk0NjAzNzgwMDhhMDc1MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VYlVxBhIhLVJLGkltEQOA5oVY7+
xVYL8v5xftmsTcj4H/EBDhrEMOZWV/KpzuLYNoKUiM14Y4KC3/18RyRcIv/R4ZF9
FTiP+OKbWzawNvPisAZ7zK6Z1xJGn1FDA5XNA8ARDLXVDiupd6iU1/EahP94eFLc
k89keZQJC1OMvJEMSa9Yj4xFHtysWuWhW35PxOAKSx1sWfwocpjb5Ckl6PGUOmg5
xSoTMMY2OSBKaGG8ReKlmmwWKl3dW/BueGSLYBPDwTswpaXIbQmlSM9AkbrHH/tP
TfTQJecN9GuAgTUo3lr2WMPEsVODnMJt2XDZI+jNxlEiCVaEvHNHqN03fQIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFCp48mFTlN2C4oD8WUYDeACKB1L0MB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvS25qeVlWT1UzWUxpZ1B4WlJnTjRBSW9IVXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQEH9+gAwQE
JRHQAwQETmyAAwQEUPbAAwQEUP/wAwQDURWIAwQEUR4gAwQFVQqgAwQCjf+wAwQD
qyGAAwQFsErgAwQCuQ/4AwQE2RXwAwQE2ZWAMA0EAgACMAcDBQMgAUy4MA0GCSqG
SIb3DQEBCwUAA4IBAQBUezkKnzhRHICg+jK0hyw/bMw6/5SvASD7JtNrJWwOR4sp
wBAvQyR7KCtXSafys7+bfmcEko8U413XMGuruDLNwHvCpHQ7bAKdJBn+FbudYfA6
6I/WbgoyWl2uZ111kNtrVvxxH7/0tVAtzTYN3mW7c4JAea2gABufaYwoOKxe2ZEW
TQnFIRqTtNZwnYaf7wxvHtSnnYvNTR+dzusHTU4zuqzjzaEqu8mBVRO7qUSRkYkw
vrK0eBeGy/4+wnvbb/rtQ4NkR86af3RZiWpknobfSgsWq0nUfF2ihF0DtnFWQqtb
/rdNxjeySrl4BMUl2fHwYLDJsPKKX0C2LLuqfsZ1
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:52 2025 by rpki-client