Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa
File: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (raw, json)
Hash identifier: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=
Subject key identifier: F8:AC:5B:1C:E7:7C:20:0C:6D:17:9D:CF:4B:19:D0:2B:54:F8:99:5B
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 01959F21D62582FA6D6DC806CE3BA3605664
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa
Signing time: Sun 16 Mar 2025 13:25:49 +0000
ROA not before: Sun 16 Mar 2025 13:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200043
IP address blocks: 31.3.168.0/22 maxlen: 24
31.3.172.0/22 maxlen: 24
31.3.176.0/20 maxlen: 24
62.220.64.0/20 maxlen: 20
62.220.80.0/21 maxlen: 24
62.220.88.0/21 maxlen: 24
109.238.124.0/23 maxlen: 24
109.238.126.0/23 maxlen: 24
185.63.168.0/23 maxlen: 24
185.98.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:21:d6:25:82:fa:6d:6d:c8:06:ce:3b:a3:60:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Mar 16 13:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ac5b1ce77c200c6d179dcf4b19d02b54f8995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:78:40:4e:95:09:66:c4:e5:10:c5:70:8b:
0a:d4:ea:ec:96:43:99:8a:3c:c6:32:3e:c6:ed:c7:
da:df:09:f1:87:85:26:28:90:b5:cd:55:8a:34:0f:
69:2c:24:e6:16:a8:f5:8d:6c:32:68:88:db:fc:ec:
1d:a7:b9:9a:4c:97:38:29:e0:57:a6:e3:ca:a7:07:
93:b5:e0:88:01:ab:57:89:06:5a:40:1b:51:49:95:
d7:da:ab:af:66:6c:84:15:01:74:60:47:b4:da:81:
d1:6b:60:d5:6a:68:5b:cb:78:4b:6c:38:e3:cd:a6:
ac:4d:c8:5b:0d:8e:6c:ac:0c:dc:cb:ff:62:e8:8c:
87:66:f9:a8:fd:a3:12:09:94:47:cf:3e:6e:51:ef:
e8:f5:10:14:34:67:56:f0:24:e4:c6:00:b1:6a:10:
0e:e9:80:d1:8c:c6:47:db:70:e5:96:f6:ac:e5:51:
5d:21:22:c3:95:24:50:4a:06:0c:c0:df:c0:7a:3f:
c6:23:1f:77:90:42:a1:00:22:7a:fa:62:19:2a:77:
dd:5f:1b:fd:48:a6:00:ab:51:e2:92:22:a6:28:f0:
59:35:80:b8:5d:f1:1c:d6:99:f1:4e:6f:35:ad:3e:
59:41:15:81:50:7a:fb:87:89:29:e8:76:b6:e7:b1:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:5B:1C:E7:7C:20:0C:6D:17:9D:CF:4B:19:D0:2B:54:F8:99:5B
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.168.0-31.3.191.255
62.220.64.0/19
109.238.124.0/22
185.63.168.0/23
185.98.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:3e:d7:bb:0d:0b:06:03:74:c4:61:48:d1:80:3c:1d:98:25:
10:69:fa:8e:01:b0:d6:0d:71:e7:23:3d:95:b3:ee:de:80:0a:
ea:21:68:93:c4:88:43:1a:04:8f:8c:54:fe:6e:83:69:aa:87:
3a:46:85:ef:df:48:aa:6e:21:ba:ca:62:90:0f:e4:5f:71:1a:
9f:24:56:d4:e2:96:40:86:94:1c:35:83:b8:75:27:3b:8f:d9:
12:a0:e4:03:1a:ee:28:e6:d1:66:fb:21:f0:dc:ca:b8:f9:70:
2c:02:7b:1f:e3:70:96:5a:3b:66:43:48:d4:e2:0b:31:23:b2:
65:82:69:7b:69:7e:4b:29:d3:72:d1:67:7d:88:30:2a:6a:77:
21:66:11:d6:e7:74:41:84:aa:0c:5a:47:80:0b:ac:12:ec:06:
d9:9b:f0:3e:56:75:36:f5:8c:da:57:c7:88:cb:a8:0f:ec:25:
88:64:24:0a:20:ca:e6:77:8d:41:d6:a6:2d:03:78:9a:ba:fc:
4e:a3:6d:98:32:1b:c4:76:80:88:a2:21:00:f0:dc:00:07:48:
57:ed:1f:8c:00:0d:ee:7d:a9:97:28:c3:11:11:9b:b9:79:bb:
da:ab:3b:2d:c2:ea:75:0c:4f:7c:53:6f:41:d6:31:ee:37:04:
ed:be:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:13 2025 by rpki-client