Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KpUFjIPvU7sDAK19HLij4SJLniQ.roa
File: KpUFjIPvU7sDAK19HLij4SJLniQ.roa (raw, json)
Hash identifier: EtNFJK9SeBdK3y4Fk/w7539yydiBnRYqxjujGc4Nb1s=
Subject key identifier: 2A:95:05:8C:83:EF:53:BB:03:00:AD:7D:1C:B8:A3:E1:22:4B:9E:24
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019615D30136B4BCE1429424E05DB5EA050A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KpUFjIPvU7sDAK19HLij4SJLniQ.roa
Signing time: Tue 08 Apr 2025 14:34:32 +0000
ROA not before: Tue 08 Apr 2025 14:34:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41378
IP address blocks: 31.25.88.0/23 maxlen: 24
37.123.192.0/21 maxlen: 24
82.115.30.0/23 maxlen: 24
185.148.12.0/22 maxlen: 24
185.212.60.0/22 maxlen: 24
185.217.108.0/22 maxlen: 24
185.217.108.0/23 maxlen: 24
185.217.110.0/23 maxlen: 24
185.218.4.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:d3:01:36:b4:bc:e1:42:94:24:e0:5d:b5:ea:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 8 14:34:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a95058c83ef53bb0300ad7d1cb8a3e1224b9e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cd:ea:b6:18:cc:7a:6f:73:38:a0:95:82:36:
7e:61:69:04:53:ca:9d:21:e9:e5:a7:41:1d:c2:0b:
fe:3b:9c:b5:42:d8:78:05:83:f5:f3:b6:a8:43:02:
47:4a:5f:a2:ea:77:12:eb:62:ae:8d:33:34:f9:3b:
6a:e7:84:09:ec:44:e0:2e:81:6f:02:1a:ac:65:32:
46:4d:5d:ab:01:61:40:00:bf:f4:78:04:79:30:00:
4e:50:f5:03:0d:94:ff:61:36:28:03:bf:1f:b1:5d:
b8:72:30:c4:c8:98:15:eb:5f:85:9e:6e:c2:c3:65:
99:28:c9:d0:1c:44:49:be:e7:a0:5b:99:bd:c3:8e:
21:f9:71:a1:ab:65:e0:b8:ee:4c:cd:95:b4:be:91:
30:fb:13:ab:da:cc:77:b3:fd:31:d7:eb:c8:2f:b7:
6a:68:0a:a6:b0:8b:cd:e1:bf:b2:75:fe:78:8e:47:
10:5e:92:47:ec:ad:a6:09:b0:e9:6b:e0:44:4e:63:
0f:3c:da:09:0b:e2:11:eb:83:97:26:f7:cf:b3:48:
ee:6e:88:4b:e8:87:f8:95:46:01:4a:26:17:c6:49:
d7:49:be:31:88:5a:b7:4e:c5:65:9a:67:78:ac:af:
70:be:55:09:a6:3f:16:d0:51:8f:12:07:06:1b:d4:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:05:8C:83:EF:53:BB:03:00:AD:7D:1C:B8:A3:E1:22:4B:9E:24
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KpUFjIPvU7sDAK19HLij4SJLniQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.217.108.0/22
185.218.4.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ae:7e:b0:25:d4:2e:9b:c5:11:17:f9:ce:08:66:da:c5:bb:
ed:a0:a9:5b:b2:a3:d3:c5:bb:8a:03:e2:9e:95:19:04:b8:10:
79:e1:c1:ce:bc:5b:2d:af:5f:48:ae:12:b0:79:a0:81:15:51:
47:38:1d:fe:7e:13:d2:22:68:9c:db:65:f6:f9:7b:6f:37:31:
cb:2b:0e:3d:84:02:b2:7d:5f:e9:7a:b4:d9:df:60:89:3b:e9:
f6:90:e8:f9:1b:12:02:96:86:df:99:b6:12:85:3e:1a:17:32:
ab:4f:a5:9a:64:4c:da:34:03:11:9a:52:27:3b:0a:16:b5:a2:
f1:e6:16:9d:d4:8d:d9:c1:f4:20:2c:d8:39:4b:6f:79:d5:01:
4d:a2:d9:5e:b3:11:66:f9:cb:f6:2c:97:b3:e0:6a:c7:a9:dc:
aa:8d:aa:a1:c2:36:4f:f7:86:c9:d6:c9:26:ab:da:06:dd:db:
92:8d:58:2a:c5:b3:b7:f5:5c:6d:1e:dd:0f:2a:f4:79:b3:5d:
ad:6d:c5:a6:cc:10:d9:90:a4:68:e5:cc:ba:30:98:fb:5b:c7:
52:ec:0a:ac:88:3b:ff:1e:6e:f2:03:48:16:20:b9:3f:87:00:
ae:0d:94:ef:9f:d6:19:3a:f1:29:11:33:d2:74:60:dd:aa:fe:
2c:84:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:16 2025 by rpki-client