Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/K5S-GMhCBiMRei0pFIoZE2-sYhU.roa
File: K5S-GMhCBiMRei0pFIoZE2-sYhU.roa (raw, json)
Hash identifier: wzDT7UEzahDsDK4FOVIWJPfCpNKqkl6NNn/F0RgFFHk=
Subject key identifier: 2B:94:BE:18:C8:42:06:23:11:7A:2D:29:14:8A:19:13:6F:AC:62:15
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019686E891A1A0C292DDCEF7F4BFD388B66E
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/K5S-GMhCBiMRei0pFIoZE2-sYhU.roa
Signing time: Wed 30 Apr 2025 13:35:10 +0000
ROA not before: Wed 30 Apr 2025 13:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 194.31.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:e8:91:a1:a0:c2:92:dd:ce:f7:f4:bf:d3:88:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Apr 30 13:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b94be18c8420623117a2d29148a19136fac6215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:26:1c:ed:d2:87:12:e4:84:1c:39:91:ad:c0:
0f:78:24:3d:b4:33:90:93:cc:52:e3:4a:56:c5:69:
5c:a5:6d:dd:a2:d7:22:26:14:a1:72:f0:2e:36:5b:
ff:71:2d:d4:c3:8a:52:86:e2:a9:bc:15:86:b7:cf:
a5:3c:33:18:c0:26:ba:f5:cc:7d:53:a4:40:e3:9f:
94:6a:a6:f1:ab:0d:05:7f:6e:1c:01:5f:ac:03:97:
87:19:58:09:2f:b9:a8:e1:bc:5a:d4:dc:8e:58:39:
fa:af:d9:ac:74:84:f8:98:81:f6:a6:fb:b3:0c:87:
3f:a0:d2:ea:6f:f5:21:ca:f2:f3:f9:55:b7:45:6d:
87:8b:d8:6c:28:b4:d6:23:4b:d7:18:25:b3:91:d1:
e0:70:99:73:67:fe:7c:36:90:42:38:6a:ca:7f:4f:
53:ef:79:9f:bf:2e:8c:69:e7:cf:6e:63:e6:22:6e:
af:18:3f:62:49:bc:0d:a8:56:2e:1f:b6:3c:2b:3e:
d0:74:46:f5:f2:74:8b:6f:f4:8a:16:cc:c1:1f:35:
2d:83:73:96:ca:9d:34:9b:b6:33:eb:6e:31:a2:ca:
b6:91:ab:32:a5:da:4e:53:7c:ce:2a:d7:30:6b:24:
a6:5d:98:4c:fc:4b:0d:49:f4:1d:62:b6:3e:96:62:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:94:BE:18:C8:42:06:23:11:7A:2D:29:14:8A:19:13:6F:AC:62:15
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/K5S-GMhCBiMRei0pFIoZE2-sYhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3d:1a:43:6a:a0:3d:e5:56:d2:62:ef:8c:83:15:83:3a:2e:
c6:e8:f0:e9:19:41:2a:d6:4a:f5:09:ab:97:77:e7:de:1d:49:
f5:bd:d6:c2:2f:5a:5c:ab:ca:16:84:5f:49:81:f8:0c:82:9c:
cb:ce:85:cc:2e:d6:86:c0:c7:ee:ea:5e:1b:97:09:7d:e1:3a:
c2:48:96:48:e0:39:73:95:fc:02:2c:d7:e6:56:65:85:32:9e:
9c:cb:4c:d7:18:15:b1:9c:ec:06:64:91:4d:cc:2c:9a:33:bf:
cb:34:f3:22:ad:e4:0f:c6:70:ab:d3:1d:e1:e0:55:b0:46:3f:
ea:53:06:5b:42:0f:87:87:28:f7:7a:6a:bc:f4:df:79:4b:09:
1c:a6:dd:62:13:6e:de:60:c7:7e:19:54:bd:40:8e:09:64:60:
64:62:36:61:c0:9c:2e:c3:ea:56:57:98:8c:d6:cc:ca:8d:26:
4f:07:3e:b1:de:1f:06:fa:75:c9:62:e4:66:02:e8:fb:3a:7b:
e9:30:98:93:5a:5b:9a:66:65:ca:55:95:82:a4:80:61:2c:8a:
49:20:74:83:dd:68:cf:b2:6b:7f:83:21:0a:4d:ff:50:b7:4e:
de:f2:29:77:29:8a:fb:45:53:83:0b:96:94:c7:df:d1:00:d4:
27:8c:8d:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaG6JGhoMKS3c739L/TiLZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNDMwMTMzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk0YmUxOGM4NDIwNjIzMTE3YTJkMjkxNDhhMTkxMzZmYWM2MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iYc7dKHEuSEHDmRrcAPeCQ9tDOQ
k8xS40pWxWlcpW3dotciJhShcvAuNlv/cS3Uw4pShuKpvBWGt8+lPDMYwCa69cx9
U6RA45+Uaqbxqw0Ff24cAV+sA5eHGVgJL7mo4bxa1NyOWDn6r9msdIT4mIH2pvuz
DIc/oNLqb/UhyvLz+VW3RW2Hi9hsKLTWI0vXGCWzkdHgcJlzZ/58NpBCOGrKf09T
73mfvy6MaefPbmPmIm6vGD9iSbwNqFYuH7Y8Kz7QdEb18nSLb/SKFszBHzUtg3OW
yp00m7Yz624xosq2kasypdpOU3zOKtcwaySmXZhM/EsNSfQdYrY+lmJF+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCuUvhjIQgYjEXotKRSKGRNvrGIVMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvSzVTLUdNaENCaU1SZWkwcEZJb1pFMi1zWWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+nMA0G
CSqGSIb3DQEBCwUAA4IBAQC6PRpDaqA95VbSYu+MgxWDOi7G6PDpGUEq1kr1CauX
d+feHUn1vdbCL1pcq8oWhF9JgfgMgpzLzoXMLtaGwMfu6l4blwl94TrCSJZI4Dlz
lfwCLNfmVmWFMp6cy0zXGBWxnOwGZJFNzCyaM7/LNPMireQPxnCr0x3h4FWwRj/q
UwZbQg+Hhyj3emq89N95Swkcpt1iE27eYMd+GVS9QI4JZGBkYjZhwJwuw+pWV5iM
1szKjSZPBz6x3h8G+nXJYuRmAuj7OnvpMJiTWluaZmXKVZWCpIBhLIpJIHSD3WjP
smt/gyEKTf9Qt07e8il3KYr7RVODC5aUx9/RANQnjI14
-----END CERTIFICATE-----
Generated at Sat May 17 00:05:20 2025 by rpki-client