Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa
File: zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa (raw, json)
Hash identifier: FqisInA8WAgK5pDKePE9gltA7tZisv2Ptzza8Sx9lYw=
Subject key identifier: CC:32:B8:B8:0C:39:98:F7:C0:1C:37:3F:F8:23:E5:A7:1F:A9:34:BB
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 019423D7257BBF38D2188A9BEAF78B58EA8A
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197720
IP address blocks: 31.186.2.0/24 maxlen: 24
31.186.3.0/24 maxlen: 24
31.186.4.0/24 maxlen: 24
31.186.5.0/24 maxlen: 24
31.186.6.0/24 maxlen: 24
31.186.7.0/24 maxlen: 24
31.186.8.0/24 maxlen: 24
31.186.9.0/24 maxlen: 24
31.186.10.0/24 maxlen: 24
31.186.11.0/24 maxlen: 24
31.186.12.0/24 maxlen: 24
31.186.13.0/24 maxlen: 24
31.186.14.0/24 maxlen: 24
31.186.15.0/24 maxlen: 24
31.186.16.0/24 maxlen: 24
31.186.17.0/24 maxlen: 24
31.186.18.0/24 maxlen: 24
31.186.19.0/24 maxlen: 24
31.186.20.0/24 maxlen: 24
31.186.21.0/24 maxlen: 24
31.186.23.0/24 maxlen: 24
31.186.28.0/24 maxlen: 24
31.186.29.0/24 maxlen: 24
31.186.30.0/24 maxlen: 24
31.186.31.0/24 maxlen: 24
2a0d:a000:0:a00::/56 maxlen: 56
2a0d:a000:0:b00::/56 maxlen: 56
2a0d:a000:0:c00::/56 maxlen: 56
2a0d:a000:0:d00::/56 maxlen: 56
2a0d:a000:0:e00::/56 maxlen: 56
2a0d:a000:0:f00::/56 maxlen: 56
2a0d:a000:0:1000::/56 maxlen: 56
2a0d:a000:0:1100::/56 maxlen: 56
2a0d:a000:0:1200::/56 maxlen: 56
2a0d:a000:0:1300::/56 maxlen: 56
2a0d:a000:0:1400::/56 maxlen: 56
2a0d:a000:0:1500::/56 maxlen: 56
2a0d:a000:0:1600::/56 maxlen: 56
2a0d:a000:0:1700::/56 maxlen: 56
2a0d:a000:0:1800::/56 maxlen: 56
2a0d:a000:0:1900::/56 maxlen: 56
2a0d:a000:0:1a00::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:25:7b:bf:38:d2:18:8a:9b:ea:f7:8b:58:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc32b8b80c3998f7c01c373ff823e5a71fa934bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:56:2c:61:ab:53:b3:c3:7c:2d:c8:c1:19:
7c:b1:90:a0:36:5b:06:6d:d3:a3:88:0d:bd:54:68:
4a:0d:89:d8:ef:7b:51:86:ee:45:7a:d6:fe:06:91:
a3:3d:aa:8b:a6:c9:c1:96:1c:b6:27:88:2c:c6:7e:
ef:a8:17:03:80:d0:0c:0a:49:2d:06:f4:3f:0b:f7:
7f:71:06:4b:c8:bf:b2:05:4d:c9:01:91:1f:1f:71:
a4:06:2d:64:a8:56:29:f4:7c:98:e0:b6:db:86:89:
15:cf:f4:04:0f:c6:8b:da:91:06:f9:8c:88:f3:5a:
e0:79:6f:ad:a9:2f:ea:67:ff:14:6f:58:9c:b0:08:
a5:68:bb:a9:72:53:28:5e:dd:b1:8e:bc:d4:9d:39:
92:4f:7d:49:b3:45:e5:f8:b1:a0:2d:81:3f:4d:d4:
b6:90:d1:63:ab:40:0f:2e:f7:99:83:9f:e2:db:ea:
6e:2e:c7:df:2f:5b:f2:54:35:48:46:1b:09:0f:6d:
b1:37:66:f3:c1:bb:4b:8f:f8:0f:02:ea:d8:f4:5f:
f7:ec:37:e1:b8:33:41:2d:ff:71:aa:04:cb:81:9c:
24:5e:e0:39:3c:bb:ce:b0:d1:50:b5:6d:a8:25:8f:
72:53:4e:fa:02:94:23:21:7b:da:b2:4a:75:fd:eb:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:B8:B8:0C:39:98:F7:C0:1C:37:3F:F8:23:E5:A7:1F:A9:34:BB
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.2.0-31.186.21.255
31.186.23.0/24
31.186.28.0/22
IPv6:
2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:7b:7d:7a:4e:60:47:20:40:de:f9:e5:1f:c0:7f:7b:04:d8:
d2:f0:3c:46:e7:c5:c9:91:19:f4:af:08:da:72:da:ab:53:b9:
ef:ff:e6:7a:74:b7:a8:ee:f0:34:a6:8b:06:4a:36:7b:0b:14:
cd:2d:68:ae:0a:f3:cf:9a:79:98:3f:de:51:67:55:73:b2:0f:
54:52:d9:ac:db:b5:b0:29:41:6d:4d:3b:8a:2f:0d:48:d2:49:
37:43:42:f8:b7:3c:9b:b0:f7:45:20:52:d8:88:94:ea:60:a3:
f9:4b:6c:70:95:0d:79:f0:c5:06:75:58:38:09:3d:45:3f:5c:
38:3c:54:cf:dd:d3:3a:41:a3:bd:01:ca:b8:ba:6d:0e:ab:6c:
27:fe:5d:89:f7:27:8f:24:5a:94:22:f3:42:4d:fb:33:4f:87:
60:9f:0d:9e:97:ce:4c:64:1f:e4:86:cf:a7:86:da:05:e7:7d:
be:5f:4a:24:de:b5:5e:52:b3:a7:92:ca:14:40:fe:a1:13:49:
64:87:31:9d:7b:b5:6d:1b:61:69:b5:ca:12:fa:49:7a:b5:72:
21:e4:c0:5b:50:88:6e:44:d1:8b:ea:37:99:6c:64:b8:29:5e:
83:ce:b4:71:5f:6c:49:93:be:e8:8a:27:51:2f:49:83:a3:23:
7d:4b:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:52 2025 by rpki-client