Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/60kleZPqdy7U3TKImAtI20xiPqk.roa
File: 60kleZPqdy7U3TKImAtI20xiPqk.roa (raw, json)
Hash identifier: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=
Subject key identifier: EB:49:25:79:93:EA:77:2E:D4:DD:32:88:98:0B:48:DB:4C:62:3E:A9
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 01942747953A34FEC6D5DD6BBECF2A78133F
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/60kleZPqdy7U3TKImAtI20xiPqk.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208139
IP address blocks: 31.128.244.0/24 maxlen: 24
31.128.245.0/24 maxlen: 24
31.128.248.0/24 maxlen: 24
31.128.249.0/24 maxlen: 24
31.128.250.0/24 maxlen: 24
31.128.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:3a:34:fe:c6:d5:dd:6b:be:cf:2a:78:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb49257993ea772ed4dd3288980b48db4c623ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:42:ed:f1:f9:22:e2:08:fa:dd:f2:0c:b5:
41:cb:d5:47:9a:40:0a:e6:4b:20:68:2a:00:66:56:
d8:c2:1c:bd:48:44:89:25:51:6c:1d:3d:37:80:cc:
c2:4f:71:23:a6:ad:95:d3:02:a7:33:e6:3a:63:c9:
1c:75:24:42:4e:bf:ef:9e:d0:b0:c0:79:b3:fb:98:
e2:61:de:86:e9:0e:83:f5:23:e9:68:d5:87:13:45:
de:1e:d0:8c:aa:d8:be:c3:89:49:c1:8c:61:80:c4:
14:85:b8:70:9b:44:04:64:ce:e1:b1:47:df:95:74:
d1:d1:4e:8b:50:2a:f4:dd:03:36:2e:2f:93:6f:e3:
79:a8:9f:36:75:19:25:5b:5f:7f:34:50:a8:22:e6:
31:82:25:66:89:bf:98:fb:cc:4d:cf:78:99:1e:42:
d5:fc:87:68:7e:1c:f4:ef:61:0c:59:fb:de:d5:3e:
c7:1b:27:2d:31:f8:ad:51:57:12:14:af:7f:54:f5:
7d:69:32:27:da:01:48:24:c5:85:32:fc:87:6c:b5:
6b:ed:7a:e0:b3:c3:de:ed:c2:dc:7e:24:6f:10:e2:
18:3e:59:f0:91:83:b4:78:36:83:ac:e4:06:16:21:
d0:4f:43:9e:5d:b0:22:df:b9:b1:1c:79:f8:d8:14:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:25:79:93:EA:77:2E:D4:DD:32:88:98:0B:48:DB:4C:62:3E:A9
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/60kleZPqdy7U3TKImAtI20xiPqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.244.0/23
31.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
70:7b:e2:38:40:f9:1d:8e:e7:4a:cc:1a:d6:43:8d:d4:ca:33:
0f:13:52:77:18:1f:f7:3a:dc:4f:a4:9a:7e:c9:3e:a4:f9:b5:
39:76:85:77:69:0e:85:8e:3f:47:ad:d3:c6:cd:04:65:4d:27:
98:33:f5:93:13:2f:4e:77:d5:a1:a5:b6:9b:e1:87:34:be:49:
0d:d8:65:31:a5:25:7b:ea:82:f9:ce:31:d6:f8:82:ad:6f:e1:
86:b5:eb:b7:d2:90:06:e9:5a:2b:62:f2:7c:8d:67:74:56:42:
ae:e8:5d:d9:43:80:32:8a:b6:c3:ce:2d:f7:d7:88:10:ce:45:
06:83:98:9a:4d:58:d5:d5:fb:27:9e:c4:0b:09:c2:e0:47:a4:
53:19:eb:7f:63:1e:65:bc:62:23:13:cc:4f:8a:7c:2d:d3:cb:
63:3d:54:39:70:2a:4b:53:2c:db:6b:33:2a:ed:34:8b:9f:18:
5d:d1:02:75:80:33:63:14:1e:b5:ec:56:c0:94:ae:96:33:e1:
81:ab:e9:ff:4e:f7:a4:e1:15:9b:52:ee:9c:c0:fa:60:49:b0:
e6:65:d6:63:84:61:a8:b6:80:9d:16:1a:4e:bc:e3:12:ba:b3:
e2:50:4d:c8:f9:22:60:e7:7c:f5:af:d9:99:c6:70:8b:76:a2:
67:f9:71:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR5U6NP7G1d1rvs8qeBM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3
YmM2MTYwHhcNMjUwMTAyMTM0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjQ5MjU3OTkzZWE3NzJlZDRkZDMyODg5ODBiNDhkYjRjNjIzZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjntC7fH5IuII+t3yDLVBy9VHmkAK
5ksgaCoAZlbYwhy9SESJJVFsHT03gMzCT3Ejpq2V0wKnM+Y6Y8kcdSRCTr/vntCw
wHmz+5jiYd6G6Q6D9SPpaNWHE0XeHtCMqti+w4lJwYxhgMQUhbhwm0QEZM7hsUff
lXTR0U6LUCr03QM2Li+Tb+N5qJ82dRklW19/NFCoIuYxgiVmib+Y+8xNz3iZHkLV
/Idofhz072EMWfve1T7HGyctMfitUVcSFK9/VPV9aTIn2gFIJMWFMvyHbLVr7Xrg
s8Pe7cLcfiRvEOIYPlnwkYO0eDaDrOQGFiHQT0OeXbAi37mxHHn42BRb0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOtJJXmT6ncu1N0yiJgLSNtMYj6pMB8GA1UdIwQY
MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt
YmM3YTIwOGE1ZTJlLzEvNjBrbGVaUHFkeTdVM1RLSW1BdEkyMHhpUHFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl
LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH4D0AwQC
H4D4MA0GCSqGSIb3DQEBCwUAA4IBAQBwe+I4QPkdjudKzBrWQ43UyjMPE1J3GB/3
OtxPpJp+yT6k+bU5doV3aQ6Fjj9HrdPGzQRlTSeYM/WTEy9Od9Whpbab4Yc0vkkN
2GUxpSV76oL5zjHW+IKtb+GGteu30pAG6VorYvJ8jWd0VkKu6F3ZQ4AyirbDzi33
14gQzkUGg5iaTVjV1fsnnsQLCcLgR6RTGet/Yx5lvGIjE8xPinwt08tjPVQ5cCpL
UyzbazMq7TSLnxhd0QJ1gDNjFB617FbAlK6WM+GBq+n/Tvek4RWbUu6cwPpgSbDm
ZdZjhGGotoCdFhpOvOMSurPiUE3I+SJg53z1r9mZxnCLdqJn+XH+
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:18 2025 by rpki-client