Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/JoFV0lmrgBVp2NchrwUNBCxFqPk.roa
File: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (raw, json)
Hash identifier: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=
Subject key identifier: 26:81:55:D2:59:AB:80:15:69:D8:D7:21:AF:05:0D:04:2C:45:A8:F9
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 01961A0316F4346E340E9C54CEE01F19AFC7
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/JoFV0lmrgBVp2NchrwUNBCxFqPk.roa
Signing time: Wed 09 Apr 2025 10:05:32 +0000
ROA not before: Wed 09 Apr 2025 10:05:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 185.121.92.0/22 maxlen: 24
185.121.92.0/24 maxlen: 24
185.121.93.0/24 maxlen: 24
185.121.94.0/24 maxlen: 24
185.121.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:03:16:f4:34:6e:34:0e:9c:54:ce:e0:1f:19:af:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Apr 9 10:05:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268155d259ab801569d8d721af050d042c45a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:cb:c8:39:81:b3:74:8b:4e:9d:7c:9b:88:
d4:d3:c2:b9:14:ad:2a:6e:ff:bb:d3:a3:04:56:82:
6d:78:62:dd:70:92:c9:79:d2:36:b9:58:57:2d:44:
de:d8:13:f5:c2:23:5a:10:4f:30:75:e3:51:2a:a3:
cc:83:e2:2b:fe:39:a4:18:26:6a:a2:0b:46:64:1d:
28:3a:dd:b2:e2:75:c9:ce:92:d2:9b:5d:23:8f:68:
74:b2:03:ad:65:95:91:26:40:86:2c:59:43:60:b7:
a7:b1:92:f0:e0:93:ae:5d:df:d0:6a:9c:3b:80:8b:
1a:2f:7c:66:f3:79:05:49:fc:04:bb:ee:bf:82:0a:
e6:1f:f6:1e:e6:58:23:3e:43:34:e4:5f:20:cb:d7:
7d:36:ea:c9:1c:c3:1a:1a:b6:2f:3f:60:56:b3:7b:
54:57:92:bf:c7:a1:26:f8:72:46:06:18:4e:e1:b4:
90:ac:ad:6b:8b:14:60:01:53:04:e3:a0:4d:b0:25:
fe:4c:5d:9a:b2:82:7b:00:e3:e6:3e:05:34:aa:cf:
4a:ac:31:e1:80:55:9d:7e:b5:dd:a8:1e:03:42:ed:
d5:26:2f:ea:65:e1:7f:1d:a1:a2:01:9b:be:50:9c:
fc:7c:20:c1:7d:66:2e:39:9c:d7:70:78:0c:ac:d3:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:55:D2:59:AB:80:15:69:D8:D7:21:AF:05:0D:04:2C:45:A8:F9
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/JoFV0lmrgBVp2NchrwUNBCxFqPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.92.0/22
Signature Algorithm: sha256WithRSAEncryption
20:cd:8b:2c:7f:3b:2a:8a:09:ab:10:5e:c4:8d:31:b1:c5:82:
c4:66:a6:4d:17:71:05:9c:08:f8:f4:64:af:24:51:81:64:5f:
94:46:bc:cb:de:a9:20:69:80:5b:14:00:9c:83:10:86:bd:34:
33:e2:ba:b5:70:72:87:5c:8c:30:f0:6a:8e:07:bd:69:16:7e:
68:34:61:ad:67:c9:f6:49:97:67:bb:40:1d:34:55:b9:f7:50:
6d:3a:83:e0:93:bf:ac:6c:83:4a:7c:41:2d:81:7a:48:c7:7b:
39:1f:28:f0:72:fc:bd:fa:78:33:8e:4a:19:ef:01:31:00:3c:
0d:ad:2c:92:e4:af:1f:a2:95:7e:88:12:fa:3b:7c:f1:3d:40:
46:7f:f8:78:9a:ec:95:b1:8e:a7:f9:14:2a:8e:b6:72:2e:4b:
07:87:22:a4:43:98:86:72:96:b5:88:d1:7b:47:e4:98:61:40:
6a:5f:60:49:e3:b0:31:a8:0a:35:86:3a:38:99:b9:e3:bc:a3:
54:4f:07:ae:88:22:ca:50:0b:14:55:5a:6f:cb:3c:71:a1:b2:
2c:1a:29:24:1d:73:cc:bc:be:21:ed:c7:21:f2:14:02:10:33:
a6:c0:06:3f:93:81:9f:d7:f0:68:47:8d:0b:05:89:d1:e0:f5:
25:e5:eb:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYaAxb0NG40DpxUzuAfGa/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjUwNDA5MTAwNTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjgxNTVkMjU5YWI4MDE1NjlkOGQ3MjFhZjA1MGQwNDJjNDVhOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulvLyDmBs3SLTp18m4jU08K5FK0q
bv+706MEVoJteGLdcJLJedI2uVhXLUTe2BP1wiNaEE8wdeNRKqPMg+Ir/jmkGCZq
ogtGZB0oOt2y4nXJzpLSm10jj2h0sgOtZZWRJkCGLFlDYLensZLw4JOuXd/Qapw7
gIsaL3xm83kFSfwEu+6/ggrmH/Ye5lgjPkM05F8gy9d9NurJHMMaGrYvP2BWs3tU
V5K/x6Em+HJGBhhO4bSQrK1rixRgAVME46BNsCX+TF2asoJ7AOPmPgU0qs9KrDHh
gFWdfrXdqB4DQu3VJi/qZeF/HaGiAZu+UJz8fCDBfWYuOZzXcHgMrNPRFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaBVdJZq4AVadjXIa8FDQQsRaj5MB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvSm9GVjBsbXJnQlZwMk5jaHJ3VU5CQ3hGcVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXlcMA0G
CSqGSIb3DQEBCwUAA4IBAQAgzYssfzsqigmrEF7EjTGxxYLEZqZNF3EFnAj49GSv
JFGBZF+URrzL3qkgaYBbFACcgxCGvTQz4rq1cHKHXIww8GqOB71pFn5oNGGtZ8n2
SZdnu0AdNFW591BtOoPgk7+sbINKfEEtgXpIx3s5Hyjwcvy9+ngzjkoZ7wExADwN
rSyS5K8fopV+iBL6O3zxPUBGf/h4muyVsY6n+RQqjrZyLksHhyKkQ5iGcpa1iNF7
R+SYYUBqX2BJ47AxqAo1hjo4mbnjvKNUTweuiCLKUAsUVVpvyzxxobIsGikkHXPM
vL4h7cch8hQCEDOmwAY/k4Gf1/BoR40LBYnR4PUl5ev2
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:35:06 2025 by rpki-client