Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/GlqGZ4h7q2Bw2mtSWjnN_GCeGkQ.roa
File: GlqGZ4h7q2Bw2mtSWjnN_GCeGkQ.roa (raw, json)
Hash identifier: ny3n1g7ZUY8w2/L540CfYjgp1zOZfhyWxyxlyTmLOvg=
Subject key identifier: 1A:5A:86:67:88:7B:AB:60:70:DA:6B:52:5A:39:CD:FC:60:9E:1A:44
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 01977E68ABA69FF8891ECBAC5B6D82C75574
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/GlqGZ4h7q2Bw2mtSWjnN_GCeGkQ.roa
Signing time: Tue 17 Jun 2025 15:01:18 +0000
ROA not before: Tue 17 Jun 2025 15:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207728
IP address blocks: 31.10.5.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
46.28.234.0/24 maxlen: 24
62.204.42.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
104.192.42.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
185.204.54.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
2a12:9cc0::/48 maxlen: 48
2a12:9cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:ab:a6:9f:f8:89:1e:cb:ac:5b:6d:82:c7:55:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jun 17 15:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5a8667887bab6070da6b525a39cdfc609e1a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4f:63:f3:26:e2:1d:f3:e7:f8:93:42:07:5e:
d8:74:8b:4c:37:cc:c0:0a:cd:af:fa:67:92:3d:ab:
3b:5d:1d:57:7b:e3:3d:7c:2e:cd:42:33:8f:4d:a3:
b0:23:70:39:88:dc:f6:27:97:46:1c:f2:ac:f6:09:
bf:8a:16:5e:59:c9:48:63:d9:29:dc:29:a8:82:42:
92:d3:84:2b:4b:00:6d:3f:60:b1:b6:a1:d3:cb:a4:
6b:97:ea:20:68:bd:76:62:fe:22:ed:bd:74:08:5b:
a5:33:50:15:fa:ba:e9:fb:4b:60:ab:14:99:0f:78:
07:ae:cf:c5:f1:7d:dd:3b:22:d8:9d:03:35:7d:b7:
73:f2:20:b0:1e:04:cf:52:b4:69:39:40:8f:23:5e:
d5:71:25:24:8a:01:1f:13:92:38:02:d0:8a:c3:2b:
db:96:f0:1b:02:08:77:c3:7d:6b:3d:85:af:41:38:
1b:69:df:ef:b7:3d:71:9a:12:a5:e7:d0:5c:26:a4:
f9:99:e5:0c:ff:e0:f0:d1:4c:c2:78:6e:4e:02:bf:
f0:ab:26:e7:68:02:d5:db:6d:c6:9a:98:fe:d9:f6:
3a:59:f1:ce:21:16:0d:82:f2:b8:df:b8:eb:bc:bd:
e2:f5:0f:f5:1e:74:a5:e4:5d:4f:c7:cd:13:3d:53:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:86:67:88:7B:AB:60:70:DA:6B:52:5A:39:CD:FC:60:9E:1A:44
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/GlqGZ4h7q2Bw2mtSWjnN_GCeGkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
62.204.42.0/24
87.236.177.0/24
93.88.74.0/23
104.192.42.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
185.204.54.0/24
194.146.127.0/24
IPv6:
2a12:9cc0::/47
Signature Algorithm: sha256WithRSAEncryption
ac:15:d0:e2:81:72:28:55:af:07:24:ae:2a:a2:52:1e:19:5e:
39:9f:08:3e:d8:03:c7:31:06:47:65:e0:ea:48:b3:65:86:08:
ff:a2:b1:e3:51:d3:20:90:f8:e5:20:86:4c:4b:7c:c0:d8:9f:
04:6d:2b:ff:f9:0e:84:65:e1:03:25:46:6d:2a:ec:c7:11:15:
c6:a7:29:22:a5:eb:1c:c4:0e:6f:0b:94:e7:0a:4f:1c:71:2a:
f9:b7:a6:1d:3a:34:e1:93:a9:77:17:e8:e8:95:6d:05:db:4c:
b4:6b:2e:4d:49:1e:4d:cf:24:d1:d9:53:5d:0b:2f:e2:9d:41:
16:a6:fd:3d:58:26:32:a8:29:72:43:d0:66:7e:20:1c:62:6d:
5f:5e:bd:04:0a:f7:9c:c3:ca:c9:d4:ee:9f:8b:94:4b:b8:0a:
2d:06:94:68:f5:78:8a:f2:62:79:83:29:a5:fc:92:37:8e:c3:
3e:ae:c8:5c:b5:0b:dc:f1:8c:8d:1e:3c:c2:4b:69:d3:ec:13:
48:53:d5:92:96:e2:2a:de:15:14:1c:c1:32:d3:c2:61:14:cf:
a8:d9:61:9c:ac:63:33:b1:33:5a:eb:eb:f1:a0:ef:50:f7:ce:
31:5b:6a:97:c0:8b:e5:2f:32:39:c5:d4:1c:8d:06:91:b5:5f:
7f:a6:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:50:11 2025 by rpki-client