Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPI025ZxvAfZloOEY0uQI4rm6yg.roa
File: wPI025ZxvAfZloOEY0uQI4rm6yg.roa (raw, json)
Hash identifier: fUAupGQcflPa1TN/ASC4aAp9yZnzwxuPDzgRT2oUDtw=
Subject key identifier: C0:F2:34:DB:96:71:BC:07:D9:96:83:84:63:4B:90:23:8A:E6:EB:28
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220473281329F2A3B32FB13CAAB9BA1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPI025ZxvAfZloOEY0uQI4rm6yg.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209365
IP address blocks: 31.170.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:47:32:81:32:9f:2a:3b:32:fb:13:ca:ab:9b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f234db9671bc07d9968384634b90238ae6eb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:0b:08:9d:46:0f:8b:f8:e9:0c:d1:07:9f:
77:b7:9b:1a:5a:0c:cb:63:36:b7:50:9f:81:2c:c1:
64:ff:8d:78:33:17:aa:45:a5:bc:4e:a0:56:e3:fb:
34:49:e2:b5:8c:94:90:03:c8:59:70:17:ff:5b:ea:
09:b9:d4:cd:b0:06:d1:89:a3:5b:ea:61:4d:da:0a:
9d:6e:63:36:2d:e2:47:67:0c:4f:b8:4a:1b:e7:dc:
b6:9a:7a:72:31:32:31:a7:50:0c:fe:97:b5:05:56:
b8:c3:3f:4f:51:f2:06:64:72:a8:5e:f1:ee:b1:c0:
e7:5f:b5:ea:99:00:ec:de:b2:16:fe:39:6c:24:59:
f8:44:c3:1f:d4:67:4e:2a:25:d0:97:e4:90:dc:ac:
86:69:27:c7:be:2a:69:79:f1:05:63:7f:1c:54:9c:
11:6f:d7:10:fd:df:e1:c4:29:b7:d5:a7:4f:54:a1:
b0:db:ec:49:9d:25:a1:1d:3f:81:b4:9b:47:ea:61:
8a:b6:d8:5b:35:da:51:ea:8d:c5:01:8b:b9:0c:dd:
9c:30:77:71:55:4b:d9:8d:23:1b:1d:00:81:cf:dc:
8f:0e:47:3f:44:be:07:15:73:45:ed:90:1c:48:b8:
1e:d6:d4:fd:f1:a4:53:0e:58:c5:c8:9b:63:db:db:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:34:DB:96:71:BC:07:D9:96:83:84:63:4B:90:23:8A:E6:EB:28
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPI025ZxvAfZloOEY0uQI4rm6yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:bf:6f:ae:9e:35:e7:2e:7d:96:7d:d3:dd:09:c7:e4:1c:a7:
13:1f:1f:0d:82:f9:10:53:2f:e4:2e:90:39:05:9c:3a:99:32:
db:63:0f:90:da:b7:d5:86:92:ed:ee:66:b0:3d:9f:6e:32:6c:
6a:08:0d:56:ca:ed:e3:c2:53:f9:8a:60:56:fb:ca:e0:76:90:
80:ae:58:86:73:d1:c9:b1:2f:9b:9e:1b:33:dd:1b:a0:43:90:
57:16:b5:b6:2d:da:3c:fb:fd:a8:44:5b:4d:5c:3b:9e:fc:8a:
6f:71:19:44:75:52:59:b2:92:88:10:0c:10:ec:a0:6b:7d:89:
b7:b5:48:fb:83:7c:ed:ee:08:a7:16:bd:8a:07:a7:c2:60:e8:
ac:2e:07:5c:af:19:9b:fb:5a:e7:5d:03:8b:34:3a:10:60:1c:
94:a7:e6:cb:4f:9b:0f:e9:1d:9f:e9:8f:e6:7c:25:ef:fc:97:
80:ae:38:84:af:aa:62:85:b2:ff:53:a7:a4:92:4c:94:9f:58:
0d:62:76:5c:e2:9c:d9:ae:64:43:15:9f:77:a2:0f:80:a6:7c:
b6:fa:a4:6e:27:52:60:bb:a4:b8:51:f8:b6:95:21:1d:4d:74:
05:be:1a:b0:48:de:a0:2b:d3:83:be:ed:04:a6:ff:ee:ea:19:
0d:88:dd:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIEcygTKfKjsy+xPKq5uhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGYyMzRkYjk2NzFiYzA3ZDk5NjgzODQ2MzRiOTAyMzhhZTZlYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IkLCJ1GD4v46QzRB593t5saWgzL
Yza3UJ+BLMFk/414MxeqRaW8TqBW4/s0SeK1jJSQA8hZcBf/W+oJudTNsAbRiaNb
6mFN2gqdbmM2LeJHZwxPuEob59y2mnpyMTIxp1AM/pe1BVa4wz9PUfIGZHKoXvHu
scDnX7XqmQDs3rIW/jlsJFn4RMMf1GdOKiXQl+SQ3KyGaSfHvippefEFY38cVJwR
b9cQ/d/hxCm31adPVKGw2+xJnSWhHT+BtJtH6mGKtthbNdpR6o3FAYu5DN2cMHdx
VUvZjSMbHQCBz9yPDkc/RL4HFXNF7ZAcSLge1tT98aRTDljFyJtj29sZ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDyNNuWcbwH2ZaDhGNLkCOK5usoMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvd1BJMDI1Wnh2QWZabG9PRVkwdVFJNHJtNnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6pnMA0G
CSqGSIb3DQEBCwUAA4IBAQCtv2+unjXnLn2WfdPdCcfkHKcTHx8NgvkQUy/kLpA5
BZw6mTLbYw+Q2rfVhpLt7mawPZ9uMmxqCA1Wyu3jwlP5imBW+8rgdpCArliGc9HJ
sS+bnhsz3RugQ5BXFrW2Ldo8+/2oRFtNXDue/IpvcRlEdVJZspKIEAwQ7KBrfYm3
tUj7g3zt7ginFr2KB6fCYOisLgdcrxmb+1rnXQOLNDoQYByUp+bLT5sP6R2f6Y/m
fCXv/JeArjiEr6pihbL/U6ekkkyUn1gNYnZc4pzZrmRDFZ93og+Apny2+qRuJ1Jg
u6S4Ufi2lSEdTXQFvhqwSN6gK9ODvu0Epv/u6hkNiN1h
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:55 2025 by rpki-client