Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/JkR72JNkfOOkf4Hdto9Hn61nIOM.roa
File: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (raw, json)
Hash identifier: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=
Subject key identifier: 26:44:7B:D8:93:64:7C:E3:A4:7F:81:DD:B6:8F:47:9F:AD:67:20:E3
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019420D6363EBEE56A902F9E230DD6FACC6D
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/JkR72JNkfOOkf4Hdto9Hn61nIOM.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204567
IP address blocks: 185.175.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:3e:be:e5:6a:90:2f:9e:23:0d:d6:fa:cc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26447bd893647ce3a47f81ddb68f479fad6720e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:32:c2:da:fe:c1:54:bf:59:5b:46:1a:0a:
f9:9b:67:a8:6f:ed:3b:0e:44:b1:b4:67:15:87:b2:
32:ab:94:1d:56:a5:99:72:04:d6:5b:6c:96:de:1f:
41:4e:59:05:fd:1d:03:84:4c:97:ad:8f:dd:bd:cc:
bb:a3:3f:48:b8:bb:28:4a:7b:f3:c2:63:3a:5b:85:
97:72:88:eb:c7:de:2f:6f:7f:56:ec:16:e4:97:3a:
07:3d:14:76:73:d1:7b:e7:27:9f:74:15:3e:0c:df:
38:28:aa:4a:d3:e3:c5:ed:21:01:f3:c2:f5:ed:e2:
60:5f:e1:f1:65:1b:ca:00:ff:bb:a0:67:24:94:0c:
f0:c0:b2:fa:d5:8a:03:05:00:34:a1:5f:e6:b8:a7:
c8:64:42:d7:fb:69:52:86:3c:57:7c:5d:ae:db:70:
c9:21:e9:b6:d7:0e:cf:4e:80:e8:c7:fc:02:6d:44:
53:00:17:a1:5c:ed:a1:aa:ea:b1:bd:62:d1:a0:0c:
f5:e8:1c:cb:f2:25:14:90:6d:a0:d4:13:50:ff:f0:
35:e7:3d:27:e9:a8:3a:52:28:24:e5:c8:b5:8b:eb:
eb:06:09:9c:6a:6e:30:2c:10:ca:6e:47:af:83:ba:
43:90:ab:5a:9c:56:9f:de:ae:97:01:2b:06:63:8e:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:7B:D8:93:64:7C:E3:A4:7F:81:DD:B6:8F:47:9F:AD:67:20:E3
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/JkR72JNkfOOkf4Hdto9Hn61nIOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:42:64:09:9d:ea:63:59:7c:9a:3c:8e:17:67:50:91:10:4d:
f2:32:e4:4a:d5:fc:67:75:28:f7:f6:17:77:9b:eb:3c:a6:58:
fe:34:9c:a6:a9:9d:86:27:1b:8f:f8:e5:fd:10:da:b9:c2:36:
de:1a:b8:88:4a:04:ea:ed:b2:3b:5f:cb:b8:b9:e8:2e:eb:c5:
d5:46:93:b7:7b:13:c8:20:1d:15:37:3b:2c:d4:09:03:9d:72:
79:bf:72:c8:77:94:35:f6:74:8b:6a:85:53:d4:b2:28:80:56:
fa:a6:fd:20:e5:65:86:f9:53:41:c7:f2:23:09:91:c3:24:51:
34:d3:90:ad:f8:21:ac:4e:b1:df:e2:25:e4:19:cb:58:a4:b5:
19:9f:5e:65:ef:a3:c0:31:7e:6f:fb:48:93:86:26:f8:d9:61:
6c:33:3f:d9:f2:8f:78:ff:ac:bc:c8:6e:63:ef:0f:2c:ea:30:
cd:42:51:35:07:8a:58:a7:58:5a:bd:94:c4:fc:3f:dc:a5:b0:
1a:63:cc:00:d2:03:96:06:66:38:9f:76:4c:05:21:39:80:14:
ef:fe:79:f8:d8:60:47:f4:9c:4e:c6:bb:f1:84:78:f1:15:e0:
3a:aa:19:9f:2f:11:2b:5a:43:d7:e6:94:70:bc:85:37:7d:94:
e8:f3:be:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jY+vuVqkC+eIw3W+sxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz
NDg3ODAwHhcNMjUwMTAxMDc0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ0N2JkODkzNjQ3Y2UzYTQ3ZjgxZGRiNjhmNDc5ZmFkNjcyMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzMywtr+wVS/WVtGGgr5m2eob+07
DkSxtGcVh7Iyq5QdVqWZcgTWW2yW3h9BTlkF/R0DhEyXrY/dvcy7oz9IuLsoSnvz
wmM6W4WXcojrx94vb39W7BbklzoHPRR2c9F75yefdBU+DN84KKpK0+PF7SEB88L1
7eJgX+HxZRvKAP+7oGcklAzwwLL61YoDBQA0oV/muKfIZELX+2lShjxXfF2u23DJ
Iem21w7PToDox/wCbURTABehXO2hquqxvWLRoAz16BzL8iUUkG2g1BNQ//A15z0n
6ag6Uigk5ci1i+vrBgmcam4wLBDKbkevg7pDkKtanFaf3q6XASsGY47vBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZEe9iTZHzjpH+B3baPR5+tZyDjMB8GA1UdIwQY
MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt
MmFkOTY4YjM2MmRlLzEvSmtSNzJKTmtmT09rZjRIZHRvOUhuNjFuSU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl
LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua/cMA0G
CSqGSIb3DQEBCwUAA4IBAQAcQmQJnepjWXyaPI4XZ1CREE3yMuRK1fxndSj39hd3
m+s8plj+NJymqZ2GJxuP+OX9ENq5wjbeGriISgTq7bI7X8u4uegu68XVRpO3exPI
IB0VNzss1AkDnXJ5v3LId5Q19nSLaoVT1LIogFb6pv0g5WWG+VNBx/IjCZHDJFE0
05Ct+CGsTrHf4iXkGctYpLUZn15l76PAMX5v+0iThib42WFsMz/Z8o94/6y8yG5j
7w8s6jDNQlE1B4pYp1havZTE/D/cpbAaY8wA0gOWBmY4n3ZMBSE5gBTv/nn42GBH
9JxOxrvxhHjxFeA6qhmfLxErWkPX5pRwvIU3fZTo877N
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:30 2025 by rpki-client