Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/jDpfwbf-MYo1z6WLxxoQR9fD_bw.roa
File: jDpfwbf-MYo1z6WLxxoQR9fD_bw.roa (raw, json)
Hash identifier: zExaE643LO98tK4NvHjnGSmdQinpnm87QOpAVLfdMLY=
Subject key identifier: 8C:3A:5F:C1:B7:FE:31:8A:35:CF:A5:8B:C7:1A:10:47:D7:C3:FD:BC
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0194206867CE508D0B6188CA0C53DAFDF2E7
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/jDpfwbf-MYo1z6WLxxoQR9fD_bw.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36218
IP address blocks: 192.250.237.0/24 maxlen: 24
192.250.238.0/24 maxlen: 24
199.103.56.0/23 maxlen: 23
199.103.59.0/24 maxlen: 24
199.103.60.0/22 maxlen: 22
208.69.56.0/22 maxlen: 22
208.88.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:67:ce:50:8d:0b:61:88:ca:0c:53:da:fd:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c3a5fc1b7fe318a35cfa58bc71a1047d7c3fdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:a0:67:be:74:09:ae:e7:2f:14:f5:4f:c8:
1c:22:af:48:5a:f2:83:36:97:d4:6d:c0:66:8f:ac:
8e:0f:fe:03:93:f4:67:86:9c:e6:51:aa:0e:f0:4c:
d5:11:30:60:41:be:65:49:eb:fa:2e:30:8a:5e:f5:
44:97:1b:5e:be:a5:e8:a1:92:2f:3c:f6:27:c4:24:
c6:7f:20:a8:06:93:f9:bf:dd:24:86:e8:e0:40:df:
4c:36:37:d1:bf:17:ce:e5:33:51:1b:77:86:86:c0:
ff:2a:ec:b8:c5:89:9f:18:5c:02:2a:d1:7d:09:c0:
07:f5:6c:07:7b:0b:7a:aa:29:1c:6c:2c:df:52:cb:
7e:f4:50:f3:a0:52:bb:82:45:07:2e:8f:8e:86:75:
51:ae:a1:3f:b9:3e:5a:d8:69:d7:7d:82:50:25:6a:
0c:27:c6:30:99:c4:50:fc:d8:9a:45:93:33:f9:9a:
4c:3a:53:5a:a7:20:9c:5d:33:59:9a:48:84:7c:96:
e7:03:83:1f:1a:d1:fa:5f:fd:fd:58:da:a3:b9:ac:
a5:fc:42:38:53:47:0f:a9:1f:4f:8f:f7:51:02:8e:
26:7c:3d:ec:9c:46:9a:c3:20:5a:47:3d:7d:f2:ee:
ac:33:ba:db:b9:8b:a7:f3:21:60:13:3c:49:a1:54:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:5F:C1:B7:FE:31:8A:35:CF:A5:8B:C7:1A:10:47:D7:C3:FD:BC
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/jDpfwbf-MYo1z6WLxxoQR9fD_bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.250.237.0-192.250.238.255
199.103.56.0/23
199.103.59.0-199.103.63.255
208.69.56.0/22
208.88.4.0/22
Signature Algorithm: sha256WithRSAEncryption
32:2a:e4:56:43:45:a5:9f:d2:46:17:ad:5e:0d:fb:1b:27:0c:
a3:23:7b:83:92:44:b2:66:92:4b:68:73:b8:67:b2:49:bc:38:
df:98:84:ba:66:54:5c:3c:e9:fd:a9:d1:a4:9f:6b:e9:45:25:
36:91:00:9b:74:54:03:45:a7:dc:da:20:0b:a9:54:5e:25:b4:
9b:92:b9:b6:d6:64:f2:82:95:98:87:d5:28:9e:12:9b:c3:3d:
52:f0:f2:0a:a0:33:b4:2b:db:75:a0:33:6b:b0:da:61:a2:a4:
82:a4:0c:da:32:54:7a:f0:75:8c:bf:c6:7a:1f:21:2d:5a:6d:
e8:d4:14:20:43:ba:32:c9:0a:72:3f:04:5c:e7:9e:88:45:d6:
95:cc:e2:65:b8:29:85:c7:14:40:e6:67:fc:f3:31:34:c4:94:
79:82:93:29:3a:48:c0:d3:14:18:d8:b8:aa:71:38:68:44:91:
03:90:23:8b:aa:89:98:a2:98:c3:82:ad:27:0b:81:2a:fc:b6:
c1:d7:b2:76:14:dc:bd:a1:d8:fb:b4:a8:41:4c:62:98:03:b7:
ca:43:86:0b:22:fd:56:c3:b4:46:97:e0:20:03:6d:97:e7:13:
8e:84:ae:9e:cc:b5:30:01:3a:e1:c5:83:39:e4:c8:7e:14:b0:
7c:33:b4:f9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQgaGfOUI0LYYjKDFPa/fLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzNhNWZjMWI3ZmUzMThhMzVjZmE1OGJjNzFhMTA0N2Q3YzNmZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEWgZ750Ca7nLxT1T8gcIq9IWvKD
NpfUbcBmj6yOD/4Dk/RnhpzmUaoO8EzVETBgQb5lSev6LjCKXvVElxtevqXooZIv
PPYnxCTGfyCoBpP5v90khujgQN9MNjfRvxfO5TNRG3eGhsD/Kuy4xYmfGFwCKtF9
CcAH9WwHewt6qikcbCzfUst+9FDzoFK7gkUHLo+OhnVRrqE/uT5a2GnXfYJQJWoM
J8YwmcRQ/NiaRZMz+ZpMOlNapyCcXTNZmkiEfJbnA4MfGtH6X/39WNqjuayl/EI4
U0cPqR9Pj/dRAo4mfD3snEaawyBaRz198u6sM7rbuYun8yFgEzxJoVQtlwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFIw6X8G3/jGKNc+li8caEEfXw/28MB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvakRwZndiZi1NWW8xejZXTHh4b1FSOWZEX2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBADA+u0D
BADA+u4DBAHHZzgwDAMEAMdnOwMEBsdnAAMEAtBFOAMEAtBYBDANBgkqhkiG9w0B
AQsFAAOCAQEAMirkVkNFpZ/SRhetXg37GycMoyN7g5JEsmaSS2hzuGeySbw435iE
umZUXDzp/anRpJ9r6UUlNpEAm3RUA0Wn3NogC6lUXiW0m5K5ttZk8oKVmIfVKJ4S
m8M9UvDyCqAztCvbdaAza7DaYaKkgqQM2jJUevB1jL/Geh8hLVpt6NQUIEO6MskK
cj8EXOeeiEXWlcziZbgphccUQOZn/PMxNMSUeYKTKTpIwNMUGNi4qnE4aESRA5Aj
i6qJmKKYw4KtJwuBKvy2wdeydhTcvaHY+7SoQUximAO3ykOGCyL9VsO0RpfgIANt
l+cTjoSunsy1MAE64cWDOeTIfhSwfDO0+Q==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:14 2025 by rpki-client