Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kxyWOBFXSt-3zO-AhMR-aAEvICE.roa
File: kxyWOBFXSt-3zO-AhMR-aAEvICE.roa (raw, json)
Hash identifier: BJ9CoZ6lS+YtB1ISTorhmQZ2Z80hHtmbVd+Pg8Wn9Ds=
Subject key identifier: 93:1C:96:38:11:57:4A:DF:B7:CC:EF:80:84:C4:7E:68:01:2F:20:21
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01975A395C102D64A275FE5167FF08D5B1B4
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kxyWOBFXSt-3zO-AhMR-aAEvICE.roa
Signing time: Tue 10 Jun 2025 14:23:17 +0000
ROA not before: Tue 10 Jun 2025 14:23:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.42.122.0/24 maxlen: 24
109.122.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:39:5c:10:2d:64:a2:75:fe:51:67:ff:08:d5:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 10 14:23:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931c963811574adfb7ccef8084c47e68012f2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:28:ed:b4:80:fa:ca:1f:1c:7d:a2:98:a1:
f9:ba:ae:b3:de:c1:f1:a9:fb:5d:a9:4b:f4:8a:1b:
f7:3f:20:78:d5:ad:75:9b:1b:c2:1d:03:59:26:d6:
87:24:23:80:fd:cd:ba:87:3c:cd:9c:76:09:4b:5e:
a2:a6:da:90:89:83:cc:d9:67:57:65:f0:06:c2:70:
97:51:ac:e4:ea:67:a4:88:4f:14:b2:79:e3:9b:a0:
e9:26:17:51:6d:c5:6b:fd:90:d8:53:1b:5a:7f:06:
dc:65:b5:26:c6:d7:06:ae:a6:31:99:98:88:5f:96:
5e:3b:cc:3e:4b:ba:05:35:9c:85:94:44:30:ea:46:
03:1c:6a:96:09:5e:f1:95:6d:b0:f1:a7:63:f4:8f:
0c:1a:3d:5f:cd:35:ff:d6:a9:04:98:e1:56:08:14:
c3:2a:7e:b1:2f:71:21:0b:07:c7:2d:b6:e4:93:88:
8b:ea:ef:df:29:81:cc:50:b7:5c:9f:44:cc:dd:2c:
00:80:70:72:76:04:77:a5:e8:b6:7e:fc:26:c1:75:
13:cb:12:22:23:cb:50:93:d6:89:46:73:d4:b6:4b:
19:be:59:0e:46:01:1e:70:b2:46:6d:23:18:ae:9c:
bc:16:e0:75:f3:14:fe:86:4f:51:ef:f4:21:5b:cd:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:96:38:11:57:4A:DF:B7:CC:EF:80:84:C4:7E:68:01:2F:20:21
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kxyWOBFXSt-3zO-AhMR-aAEvICE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.122.0/24
109.122.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4d:5a:4a:51:88:8e:98:9e:62:b9:18:37:f0:77:89:96:aa:
81:be:41:ce:38:ea:2c:be:a3:ac:75:eb:79:e2:7a:d2:e7:32:
b5:2d:58:fa:48:ca:a2:82:6c:46:6b:45:6a:c3:de:f3:6c:9b:
b1:b4:b6:b5:fd:b8:ce:ca:16:76:fd:08:78:c9:6c:22:f3:5a:
3c:21:a1:4e:86:77:b2:94:ef:de:ae:56:ea:38:7f:5e:2b:80:
a6:c7:b0:be:8f:c8:b1:3e:8b:b2:65:8a:d2:b8:87:01:08:20:
aa:0c:78:71:18:b7:c1:74:2a:1c:94:7a:df:83:7a:6e:a4:ff:
d9:6a:23:c6:fd:87:c1:1c:5c:f9:e2:34:f4:d2:ad:e9:c3:0a:
98:75:b4:ea:9f:bf:ff:1a:5b:ef:08:ac:41:85:9d:f9:3d:f2:
e4:81:0c:e5:5d:6c:36:bf:17:08:0a:11:ed:ee:c2:5b:c8:8f:
17:88:bf:5c:7c:dc:40:41:31:a5:b4:f4:e6:b5:ee:74:c4:ef:
b0:bd:2a:4b:dd:69:25:a0:54:1f:9b:ed:a0:75:e8:68:86:f7:
9f:ca:23:5e:d5:3d:0a:62:49:8b:0d:80:17:88:a8:5b:dd:6e:
da:09:4c:9d:cc:59:bf:87:fb:f3:7b:ad:8b:9a:79:30:e3:55:
33:1b:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:20:31 2025 by rpki-client