Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa
File: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (raw, json)
Hash identifier: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=
Subject key identifier: E0:E7:2F:AF:98:1E:3E:CF:2B:41:75:31:84:F0:78:50:56:79:4D:C6
Certificate issuer: /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial: 01941FFA3088DBC0CBA79D903A9FB740D2C8
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56740
IP address blocks: 31.130.200.0/21 maxlen: 24
2001:67c:2268::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:88:db:c0:cb:a7:9d:90:3a:9f:b7:40:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0e72faf981e3ecf2b41753184f0785056794dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:a3:b1:61:fa:11:31:30:a1:a4:e7:0c:3b:
7a:40:a7:7d:76:f8:45:c3:ad:26:78:19:95:fe:95:
b1:17:6f:9c:e2:45:31:c8:fc:52:d3:86:8b:c6:9d:
17:7b:ed:cf:66:69:bd:45:38:8f:b7:2c:49:35:cf:
8e:4c:9d:97:c7:c9:cb:09:4f:71:34:91:af:b2:91:
26:9b:3d:26:d6:d9:06:e7:83:d0:d6:98:f6:a9:79:
5e:81:75:d0:f1:53:2b:a0:64:db:a1:60:95:56:0d:
e9:f8:ef:6d:aa:ec:05:d1:32:08:87:b1:4c:94:be:
4a:70:01:65:bb:11:ce:d4:d8:8c:41:81:ac:a5:ba:
20:52:8a:ec:0e:22:2e:85:06:91:40:75:27:55:c4:
3d:19:53:01:39:fe:28:7b:0c:7e:fc:ce:9e:c1:71:
e9:00:83:ae:b7:9a:d3:5b:89:99:3d:ae:d4:0e:78:
6d:f1:24:57:f2:5f:ca:37:58:7b:27:7f:33:0a:14:
67:de:10:91:39:6b:42:b8:3c:c7:2b:97:b7:0e:a2:
9b:b9:b9:88:0c:1d:2a:09:ba:0a:08:c3:9f:88:75:
8f:37:f2:fd:98:74:71:44:92:19:a3:4f:c5:55:3a:
68:0c:4e:0d:16:a8:8e:8a:0d:93:d5:62:06:84:6f:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E7:2F:AF:98:1E:3E:CF:2B:41:75:31:84:F0:78:50:56:79:4D:C6
X509v3 Authority Key Identifier:
keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.200.0/21
IPv6:
2001:67c:2268::/48
Signature Algorithm: sha256WithRSAEncryption
65:3a:32:54:4f:78:6d:c7:1e:ff:3d:f9:48:ba:7a:40:9b:75:
ca:c9:11:b5:04:af:db:1e:02:6c:82:22:75:a6:44:2c:e0:cf:
0f:95:5b:4b:90:a8:f9:7f:6e:bd:6a:4a:e7:61:1a:92:37:3e:
e9:58:83:28:5f:e2:d3:9f:9e:80:03:bf:6f:da:c3:dc:32:66:
5c:a4:2d:5e:96:5b:89:92:1b:36:e6:67:ea:8e:30:39:ff:08:
5c:74:f0:72:b4:bd:01:5e:95:1f:4b:8d:81:4e:36:c5:e7:e0:
fc:dc:a5:3f:74:83:8b:54:14:80:49:38:0a:b1:82:96:29:e1:
c3:08:fd:54:d9:ec:08:0e:f3:5e:31:3c:c0:6e:e1:60:cf:22:
cf:3e:dc:39:01:fa:f4:7b:04:9a:ad:92:1a:86:e7:4d:d8:97:
17:c7:53:34:2e:11:03:fb:1b:08:7f:63:f1:e1:0a:a4:5b:b3:
8c:31:d9:59:71:77:0c:23:86:7d:0a:84:46:24:98:01:f4:67:
e0:96:38:6a:41:c3:ca:11:d5:1f:9d:ea:5e:85:d1:3d:ac:46:
d6:df:11:29:a2:28:18:15:8f:ee:ec:a8:10:18:bf:a3:db:13:
50:53:8a:4b:61:69:b8:2c:95:d9:1a:b9:c8:d4:ba:3f:e7:af:
5a:dd:03:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+jCI28DLp52QOp+3QNLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4
YTdjNjQwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGU3MmZhZjk4MWUzZWNmMmI0MTc1MzE4NGYwNzg1MDU2Nzk0ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfSjsWH6ETEwoaTnDDt6QKd9dvhF
w60meBmV/pWxF2+c4kUxyPxS04aLxp0Xe+3PZmm9RTiPtyxJNc+OTJ2Xx8nLCU9x
NJGvspEmmz0m1tkG54PQ1pj2qXlegXXQ8VMroGTboWCVVg3p+O9tquwF0TIIh7FM
lL5KcAFluxHO1NiMQYGspbogUorsDiIuhQaRQHUnVcQ9GVMBOf4oewx+/M6ewXHp
AIOut5rTW4mZPa7UDnht8SRX8l/KN1h7J38zChRn3hCROWtCuDzHK5e3DqKbubmI
DB0qCboKCMOfiHWPN/L9mHRxRJIZo0/FVTpoDE4NFqiOig2T1WIGhG/s/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFODnL6+YHj7PK0F1MYTweFBWeU3GMB8GA1UdIwQY
MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt
ZDk1YWI5OWZiMGM1LzEvNE9jdnI1Z2VQczhyUVhVeGhQQjRVRlo1VGNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1
LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDH4LIMA8E
AgACMAkDBwAgAQZ8ImgwDQYJKoZIhvcNAQELBQADggEBAGU6MlRPeG3HHv89+Ui6
ekCbdcrJEbUEr9seAmyCInWmRCzgzw+VW0uQqPl/br1qSudhGpI3PulYgyhf4tOf
noADv2/aw9wyZlykLV6WW4mSGzbmZ+qOMDn/CFx08HK0vQFelR9LjYFONsXn4Pzc
pT90g4tUFIBJOAqxgpYp4cMI/VTZ7AgO814xPMBu4WDPIs8+3DkB+vR7BJqtkhqG
503YlxfHUzQuEQP7Gwh/Y/HhCqRbs4wx2Vlxdwwjhn0KhEYkmAH0Z+CWOGpBw8oR
1R+d6l6F0T2sRtbfESmiKBgVj+7sqBAYv6PbE1BTikthabgsldkaucjUuj/nr1rd
Ays=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:56 2025 by rpki-client