Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/KyLINVTTqdvXuj7Fj90bgruawzY.roa
File: KyLINVTTqdvXuj7Fj90bgruawzY.roa (raw, json)
Hash identifier: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=
Subject key identifier: 2B:22:C8:35:54:D3:A9:DB:D7:BA:3E:C5:8F:DD:1B:82:BB:9A:C3:36
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 01942521BE3478201F51B10C8DE55DD1664D
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/KyLINVTTqdvXuj7Fj90bgruawzY.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 130.136.0.0/16 maxlen: 16
137.204.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:be:34:78:20:1f:51:b1:0c:8d:e5:5d:d1:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b22c83554d3a9dbd7ba3ec58fdd1b82bb9ac336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:91:ca:f5:7c:7b:74:d8:f2:f1:74:45:48:
f2:f0:2e:f3:b3:09:aa:6d:de:43:c8:e8:09:37:e0:
14:58:04:67:c3:23:d1:22:c8:37:48:d0:3d:20:4a:
d6:65:e8:e5:4e:ed:8d:56:c4:ee:34:72:4f:4d:a7:
cc:98:e0:77:6c:a9:31:df:54:14:e9:ae:1a:80:ee:
81:f2:70:e7:1b:f1:28:0e:8e:a0:f0:01:11:e1:bf:
b6:09:23:9d:e5:8e:f5:93:d7:02:c7:d2:f1:e7:2c:
87:72:c5:f6:3c:97:24:b6:07:6c:52:de:86:5d:26:
56:44:17:d7:ae:59:5c:25:d3:fd:83:d8:46:7b:18:
7d:63:20:82:48:47:07:a4:af:21:88:aa:b1:de:aa:
48:21:73:9c:86:17:8f:ed:f3:df:46:4d:72:88:14:
bd:c0:1a:63:94:4a:72:e4:31:42:62:ab:4f:0b:c8:
68:e8:fb:86:f5:57:2f:23:d4:87:7a:32:fb:f1:92:
06:6b:86:42:17:fe:98:34:47:26:7d:f2:c1:f7:e5:
a8:a3:6a:7c:ec:4d:39:04:82:cf:2e:9f:28:10:9a:
3f:79:b2:b5:1b:66:f6:d3:00:49:48:80:b0:5d:92:
a7:f3:d7:e9:1d:7b:49:6d:4a:e8:5b:03:bc:89:dd:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:C8:35:54:D3:A9:DB:D7:BA:3E:C5:8F:DD:1B:82:BB:9A:C3:36
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/KyLINVTTqdvXuj7Fj90bgruawzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.136.0.0/16
137.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:38:2d:21:9e:73:63:0e:99:64:a7:e5:a9:8f:34:e7:05:5b:
ed:3f:31:e2:bb:7b:51:c5:93:f0:8f:ee:13:cf:e8:0e:5d:5a:
9a:f4:95:5b:39:aa:27:7d:c0:79:95:5c:8c:d7:06:bf:e1:f5:
da:ad:36:9d:69:b4:75:37:a5:94:58:ed:0b:42:e4:3d:c6:56:
3a:ef:0c:2f:e5:60:b6:c8:1e:b5:11:82:4e:14:3a:48:dd:98:
f5:5c:b1:bd:dc:3e:0b:24:e6:fe:ad:f7:d4:72:ad:cb:0f:99:
0c:85:20:f9:cd:7b:6e:2b:16:68:de:68:63:56:24:1f:1d:d6:
aa:e3:26:69:7c:23:73:13:c1:a5:0c:83:8a:6c:66:e6:04:cf:
c2:92:54:7d:62:a5:5f:44:e3:3a:0f:6c:ac:9a:fa:98:aa:c8:
70:16:cf:04:13:a0:14:00:21:80:fc:8c:78:c4:99:76:d3:13:
c0:06:0d:80:ae:5f:45:dd:73:15:f9:63:66:d9:ec:b9:f8:38:
eb:4f:88:02:1b:2f:ec:38:d7:9e:c2:a6:1d:76:5a:62:27:38:
c3:86:ec:3c:b2:ea:3c:98:0a:b9:75:a1:df:1b:46:e2:2b:c5:
0e:85:31:65:dc:72:14:23:eb:e4:4e:de:8b:90:03:73:cb:3c:
81:9b:5c:85
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQlIb40eCAfUbEMjeVd0WZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmI2ZTI5MzhhMjI1MWRjNDM4NGRhZjY1ZWZhNTIwZGMx
YTU4ODIwHhcNMjUwMTAyMDM0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjIyYzgzNTU0ZDNhOWRiZDdiYTNlYzU4ZmRkMWI4MmJiOWFjMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb2RyvV8e3TY8vF0RUjy8C7zswmq
bd5DyOgJN+AUWARnwyPRIsg3SNA9IErWZejlTu2NVsTuNHJPTafMmOB3bKkx31QU
6a4agO6B8nDnG/EoDo6g8AER4b+2CSOd5Y71k9cCx9Lx5yyHcsX2PJcktgdsUt6G
XSZWRBfXrllcJdP9g9hGexh9YyCCSEcHpK8hiKqx3qpIIXOchheP7fPfRk1yiBS9
wBpjlEpy5DFCYqtPC8ho6PuG9VcvI9SHejL78ZIGa4ZCF/6YNEcmffLB9+Woo2p8
7E05BILPLp8oEJo/ebK1G2b20wBJSICwXZKn89fpHXtJbUroWwO8id10AwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFCsiyDVU06nb17o+xY/dG4K7msM2MB8GA1UdIwQY
MBaAFFi7bik4oiUdxDhNr2XvpSDcGliCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWIt
NWUzN2Q1NTg3YmU1LzEvS3lMSU5WVFRxZHZYdWo3Rmo5MGJncnVhd3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWItNWUzN2Q1NTg3YmU1
LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgogDAwCJ
zDANBgkqhkiG9w0BAQsFAAOCAQEALzgtIZ5zYw6ZZKflqY805wVb7T8x4rt7UcWT
8I/uE8/oDl1amvSVWzmqJ33AeZVcjNcGv+H12q02nWm0dTellFjtC0LkPcZWOu8M
L+VgtsgetRGCThQ6SN2Y9Vyxvdw+CyTm/q331HKtyw+ZDIUg+c17bisWaN5oY1Yk
Hx3WquMmaXwjcxPBpQyDimxm5gTPwpJUfWKlX0TjOg9srJr6mKrIcBbPBBOgFAAh
gPyMeMSZdtMTwAYNgK5fRd1zFfljZtnsufg460+IAhsv7DjXnsKmHXZaYic4w4bs
PLLqPJgKuXWh3xtG4ivFDoUxZdxyFCPr5E7ei5ADc8s8gZtchQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:37 2025 by rpki-client