Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/KysPyy3rGx_m7A5cK-CTgrfvkkY.roa
File: KysPyy3rGx_m7A5cK-CTgrfvkkY.roa (raw, json)
Hash identifier: Ux+CfAdmdalkF7u5OrFPbE5dAnhmV1Nwopl6cnUfpKY=
Subject key identifier: 2B:2B:0F:CB:2D:EB:1B:1F:E6:EC:0E:5C:2B:E0:93:82:B7:EF:92:46
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D1949C6CF9892A09CD0B9F21D2A87
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/KysPyy3rGx_m7A5cK-CTgrfvkkY.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.80.0/24 maxlen: 24
31.169.83.0/24 maxlen: 24
31.169.86.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:19:49:c6:cf:98:92:a0:9c:d0:b9:f2:1d:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2b0fcb2deb1b1fe6ec0e5c2be09382b7ef9246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:67:e6:92:74:c1:59:33:43:bb:17:af:33:
1a:84:95:95:86:25:59:9d:83:7c:0a:4f:1d:14:21:
ac:05:5e:a4:1f:7b:ab:e4:9b:c2:a7:04:80:53:fc:
9f:87:fa:ec:7c:0e:ba:7e:b8:da:10:79:4e:35:d0:
5a:53:0e:95:22:88:95:b7:fe:ca:f9:04:12:ed:97:
f4:4f:2b:44:57:6f:23:bb:bb:97:03:b0:99:a9:03:
2e:18:90:7d:b5:3f:80:1b:a6:11:c7:1b:a7:bf:14:
5f:7e:f3:23:72:4c:a9:9f:21:12:a3:b9:0b:80:78:
09:83:61:bf:d0:b9:1d:12:b6:b2:4c:8b:43:e2:45:
93:dd:77:fd:a3:b6:0a:cf:c4:4c:55:f1:12:0a:7d:
3e:14:07:a1:ec:e0:4f:1c:3d:8a:c3:e4:73:cc:f8:
8c:e1:3a:c7:60:79:38:80:49:68:c6:9f:79:3b:26:
c3:71:16:bd:d2:03:68:cd:86:06:69:6b:03:98:9c:
ad:c5:e3:27:c7:3a:f6:02:92:4f:d6:35:07:2e:b9:
1b:54:db:9f:46:44:a9:92:ad:ca:6e:ba:6d:6c:bc:
84:91:49:e2:aa:23:ef:5b:d2:af:a3:fc:52:39:f1:
27:c9:ad:e5:5d:7f:5a:87:68:38:80:09:40:0d:34:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:0F:CB:2D:EB:1B:1F:E6:EC:0E:5C:2B:E0:93:82:B7:EF:92:46
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/KysPyy3rGx_m7A5cK-CTgrfvkkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.80.0/24
31.169.83.0/24
31.169.86.0/24
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:04:9d:c8:14:ed:1f:a2:62:ed:13:fe:f8:47:e1:d0:85:89:
f0:ed:3a:7c:4d:93:cd:44:6f:2f:54:ee:c5:b1:a9:bf:cf:70:
64:6e:68:6f:d1:b6:69:3c:b3:79:95:5e:68:f1:f1:de:d1:7c:
a6:54:46:99:93:7a:cb:03:1c:96:92:d7:8f:40:62:47:9c:f4:
6c:52:96:a0:bc:75:30:2b:dd:93:f3:ac:98:6c:ed:79:46:dc:
2e:9e:a2:87:fe:47:81:ba:94:97:08:f5:ce:76:09:37:7b:7f:
66:ba:b4:02:e3:e9:9a:5d:75:2b:da:bf:9d:53:af:95:f9:84:
83:2b:04:90:0d:5d:19:bb:2c:7d:bd:90:17:c0:37:40:1b:cf:
ee:1f:9b:8b:b3:05:18:23:f5:3f:3d:f4:a6:c8:8e:8c:ce:73:
b8:90:5a:c8:d8:2c:15:43:e6:de:6e:f0:95:6f:14:2d:4e:77:
7b:ef:14:00:4c:79:a7:2e:fd:81:46:b2:ad:7a:71:e8:c3:d4:
5f:c5:db:53:e7:ad:34:10:d3:39:0d:de:a6:c5:56:56:d0:6d:
35:b6:50:6d:f0:e7:e5:b9:d8:08:cb:20:37:dc:82:14:ca:d4:
c7:a9:a3:06:94:fe:5c:2f:bd:76:f7:04:c3:7b:50:47:53:db:
e5:39:8a:8a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQijRlJxs+YkqCc0LnyHSqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjUwMTAxMTU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJiMGZjYjJkZWIxYjFmZTZlYzBlNWMyYmUwOTM4MmI3ZWY5MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr99n5pJ0wVkzQ7sXrzMahJWVhiVZ
nYN8Ck8dFCGsBV6kH3ur5JvCpwSAU/yfh/rsfA66frjaEHlONdBaUw6VIoiVt/7K
+QQS7Zf0TytEV28ju7uXA7CZqQMuGJB9tT+AG6YRxxunvxRffvMjckypnyESo7kL
gHgJg2G/0LkdErayTItD4kWT3Xf9o7YKz8RMVfESCn0+FAeh7OBPHD2Kw+RzzPiM
4TrHYHk4gEloxp95OybDcRa90gNozYYGaWsDmJytxeMnxzr2ApJP1jUHLrkbVNuf
RkSpkq3KbrptbLyEkUniqiPvW9Kvo/xSOfEnya3lXX9ah2g4gAlADTQiLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCsrD8st6xsf5uwOXCvgk4K375JGMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvS3lzUHl5M3JHeF9tN0E1Y0stQ1RncmZ2a2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH6lQAwQA
H6lTAwQAH6lWAwQAH6laMA0GCSqGSIb3DQEBCwUAA4IBAQBrBJ3IFO0fomLtE/74
R+HQhYnw7Tp8TZPNRG8vVO7Fsam/z3Bkbmhv0bZpPLN5lV5o8fHe0XymVEaZk3rL
AxyWktePQGJHnPRsUpagvHUwK92T86yYbO15RtwunqKH/keBupSXCPXOdgk3e39m
urQC4+maXXUr2r+dU6+V+YSDKwSQDV0Zuyx9vZAXwDdAG8/uH5uLswUYI/U/PfSm
yI6MznO4kFrI2CwVQ+bebvCVbxQtTnd77xQATHmnLv2BRrKtenHow9RfxdtT5600
ENM5Dd6mxVZW0G01tlBt8OfludgIyyA33IIUytTHqaMGlP5cL7129wTDe1BHU9vl
OYqK
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:14:53 2025 by rpki-client