Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/ySlLPEF0_k8P8U6yS6zwOctOeEs.roa
File: ySlLPEF0_k8P8U6yS6zwOctOeEs.roa (raw, json)
Hash identifier: r8YWQ1xdm6QLIVkwwxYzXaqNSyOxkQhbcdOP2vA+IBE=
Subject key identifier: C9:29:4B:3C:41:74:FE:4F:0F:F1:4E:B2:4B:AC:F0:39:CB:4E:78:4B
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 0196A4C278A25E2E5ABC3746976808B74273
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/ySlLPEF0_k8P8U6yS6zwOctOeEs.roa
Signing time: Tue 06 May 2025 08:42:10 +0000
ROA not before: Tue 06 May 2025 08:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44513
IP address blocks: 31.15.72.0/21 maxlen: 21
80.69.240.0/20 maxlen: 20
92.43.240.0/21 maxlen: 21
185.129.88.0/22 maxlen: 22
195.181.176.0/20 maxlen: 20
195.181.176.0/22 maxlen: 22
213.32.208.0/20 maxlen: 20
213.163.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:c2:78:a2:5e:2e:5a:bc:37:46:97:68:08:b7:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: May 6 08:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9294b3c4174fe4f0ff14eb24bacf039cb4e784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:f1:28:d4:b8:5a:cb:94:c5:d9:a7:d1:a3:
e4:71:de:46:f1:4e:5c:d5:75:ce:af:68:df:f3:13:
1e:43:e9:df:e5:e7:a6:d8:18:24:4d:4c:da:c2:55:
a9:a9:e0:98:e9:b3:67:28:ed:47:ae:5a:66:5b:93:
34:0f:f5:34:e2:43:fb:57:ab:da:5f:b6:73:96:1f:
2a:0d:73:32:f7:f1:fe:49:55:b4:49:fe:78:e6:d9:
6b:c9:ce:84:28:4b:ce:11:89:b3:4b:0a:34:00:12:
c2:65:8c:48:c4:e4:94:fb:64:29:5c:c1:9b:c4:a1:
f8:4d:58:d4:84:1f:0d:66:ed:bf:55:d6:25:e5:2f:
d5:e7:07:ea:85:5d:0c:92:2b:69:d7:d3:e3:0e:52:
76:cb:39:b0:6b:d9:c0:85:ec:43:e0:2a:b3:0f:d9:
ec:b5:60:82:10:58:19:b5:28:c8:cc:11:58:3d:f8:
09:c1:7f:b6:4a:ab:6c:df:be:95:84:af:92:92:e7:
83:c9:3c:03:ef:a0:19:5c:b7:3b:4e:1f:59:d4:be:
0d:30:e3:52:47:e8:7a:6d:56:42:65:14:db:27:3f:
93:88:b5:a8:a1:03:57:91:59:88:14:87:86:c2:14:
9d:0e:17:ce:2c:64:35:54:8e:ff:b5:d0:76:16:45:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:4B:3C:41:74:FE:4F:0F:F1:4E:B2:4B:AC:F0:39:CB:4E:78:4B
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/ySlLPEF0_k8P8U6yS6zwOctOeEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.72.0/21
80.69.240.0/20
92.43.240.0/21
185.129.88.0/22
195.181.176.0/20
213.32.208.0/20
213.163.208.0/20
Signature Algorithm: sha256WithRSAEncryption
13:cf:4f:24:80:1d:af:70:f0:ee:a2:b0:e0:49:7f:a0:99:9e:
88:4e:b7:70:79:b9:95:ee:fa:5e:2e:1e:e7:72:ad:07:11:87:
88:fd:62:d5:f5:cc:91:7b:33:47:98:fb:9b:15:51:9a:33:55:
60:23:84:cd:4b:3f:22:c1:c6:65:7a:5b:7d:30:bd:10:72:37:
c1:c0:49:c5:dd:62:07:f6:df:ee:06:e4:e9:06:fc:a2:09:d6:
d7:f6:e7:9b:d6:d1:6c:27:16:f0:c7:38:7e:f8:89:3d:5e:48:
c8:23:0f:f7:60:60:c8:88:69:f6:9e:ab:bd:60:d7:8a:ab:29:
1e:99:00:f1:fe:fe:ff:82:f1:29:fa:80:d6:01:a6:3f:63:1c:
16:ce:7c:38:d6:a7:68:fd:72:a2:9e:bf:1f:7e:2b:d1:47:2d:
a5:fe:35:f7:6b:ce:25:bf:ee:2e:67:2c:ac:fc:6e:af:e8:b7:
28:b9:d6:46:a5:07:d4:d0:db:b8:ec:ed:19:d7:70:01:07:7b:
26:7f:70:6e:1b:9d:14:9b:f4:e7:84:7b:7b:51:f3:1a:51:cf:
9d:be:a0:1e:7c:b9:c3:66:47:9c:3b:6a:ef:84:4b:6a:e7:94:
2a:d0:a9:72:5b:75:10:e5:43:47:f4:bd:3c:cd:6a:37:0c:f5:
08:5e:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:26:03 2025 by rpki-client