Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/djR18VSZQibAPKa6Hc71tlHD7V8.roa
File: djR18VSZQibAPKa6Hc71tlHD7V8.roa (raw, json)
Hash identifier: 2LRPxg1+Z3g9S9wp3xO9dhQ+ysav2wQvZbolyp3nWc8=
Subject key identifier: 76:34:75:F1:54:99:42:26:C0:3C:A6:BA:1D:CE:F5:B6:51:C3:ED:5F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281185793401ED98A3FF8A3DFB8240
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/djR18VSZQibAPKa6Hc71tlHD7V8.roa
Signing time: Thu 02 Jan 2025 17:55:01 +0000
ROA not before: Thu 02 Jan 2025 17:55:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35464
IP address blocks: 82.103.80.0/24 maxlen: 24
82.103.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:11:85:79:34:01:ed:98:a3:ff:8a:3d:fb:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=763475f154994226c03ca6ba1dcef5b651c3ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:4e:ec:3b:d6:a9:57:9a:7f:66:c2:9a:bc:
81:18:c1:ba:70:78:b8:4c:af:ac:a3:6a:20:05:19:
f9:2a:fb:51:0e:90:9d:c7:7c:a4:5a:eb:e7:b0:f5:
f0:87:9b:dc:63:12:80:d5:2b:da:25:be:cf:bb:2e:
32:65:3d:8f:7c:f3:bd:38:0a:34:be:31:40:db:8b:
5c:26:48:c5:65:ce:e7:30:20:7f:11:ee:97:66:a6:
1c:e7:dd:cb:a8:dc:6f:da:0a:0a:ec:10:32:48:a0:
b9:4a:36:6b:97:2c:fb:9d:8a:d3:a1:0b:7a:8c:99:
a1:01:41:14:d6:e5:97:37:c9:3f:4b:ca:91:64:ae:
fa:47:78:fb:99:9e:ea:40:55:5e:03:95:7b:a2:90:
71:20:3b:82:bb:33:78:3d:fe:91:7f:79:a0:d5:19:
92:36:08:c3:4a:d3:4c:0f:6e:3b:4e:51:d7:6d:15:
7b:57:a0:fe:7b:dd:35:06:6e:73:39:f2:eb:97:6a:
0a:64:9e:0e:84:2a:27:ee:9e:36:97:f5:60:0a:da:
b0:5a:4c:5a:b7:0d:96:cd:ed:bf:f2:61:c4:2d:23:
91:c1:32:dc:11:54:df:35:0b:b4:fa:45:a3:37:36:
8d:42:af:77:69:af:91:52:12:73:3e:14:14:ff:d7:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:75:F1:54:99:42:26:C0:3C:A6:BA:1D:CE:F5:B6:51:C3:ED:5F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/djR18VSZQibAPKa6Hc71tlHD7V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.80.0/24
82.103.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fe:41:d3:26:93:a4:da:5a:76:02:26:16:81:5e:29:86:e5:
cf:08:54:80:99:f3:3d:9a:a3:f4:f2:25:2b:32:18:28:57:9e:
a7:41:cc:69:73:ab:1c:92:d3:f7:28:48:15:3f:60:cc:cc:9f:
63:03:fc:4c:67:d1:c7:6d:89:a7:a4:4e:72:8e:6d:91:de:76:
88:03:5e:67:fb:f2:36:22:49:13:ad:8f:21:ba:8f:97:f4:a3:
99:a2:e6:5d:39:26:bf:77:b0:6f:e4:5c:69:35:c8:21:fa:06:
9d:13:7c:b4:57:87:b1:5e:62:97:b8:0d:f4:52:fb:9a:de:b8:
85:de:e4:3e:dc:58:2b:28:d4:1c:e0:2c:cf:56:e7:81:bc:d9:
58:37:f2:0c:ab:d0:0f:7f:5b:41:bd:b9:dd:e4:78:65:d0:f3:
4c:4f:18:dc:0c:06:c9:45:69:88:6f:98:3e:03:37:42:8d:ce:
d7:3a:5f:e7:35:dd:6f:7b:ab:20:85:2c:59:a2:82:cc:0c:8b:
17:34:16:3a:0c:4b:05:ce:54:b5:8c:45:db:76:47:95:ee:b5:
38:f4:6d:28:fc:20:53:15:23:c2:d0:b0:41:91:53:6a:28:98:
70:c8:6a:c4:5c:a9:fa:6c:bb:85:74:93:ad:09:ea:96:e1:9b:
e4:6e:02:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoKBGFeTQB7Zij/4o9+4JAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjM0NzVmMTU0OTk0MjI2YzAzY2E2YmExZGNlZjViNjUxYzNlZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCRO7DvWqVeaf2bCmryBGMG6cHi4
TK+so2ogBRn5KvtRDpCdx3ykWuvnsPXwh5vcYxKA1SvaJb7Puy4yZT2PfPO9OAo0
vjFA24tcJkjFZc7nMCB/Ee6XZqYc593LqNxv2goK7BAySKC5SjZrlyz7nYrToQt6
jJmhAUEU1uWXN8k/S8qRZK76R3j7mZ7qQFVeA5V7opBxIDuCuzN4Pf6Rf3mg1RmS
NgjDStNMD247TlHXbRV7V6D+e901Bm5zOfLrl2oKZJ4OhCon7p42l/VgCtqwWkxa
tw2Wze2/8mHELSORwTLcEVTfNQu0+kWjNzaNQq93aa+RUhJzPhQU/9ebCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHY0dfFUmUImwDymuh3O9bZRw+1fMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvZGpSMThWU1pRaWJBUEthNkhjNzF0bEhEN1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUmdQAwQA
UmdoMA0GCSqGSIb3DQEBCwUAA4IBAQB6/kHTJpOk2lp2AiYWgV4phuXPCFSAmfM9
mqP08iUrMhgoV56nQcxpc6scktP3KEgVP2DMzJ9jA/xMZ9HHbYmnpE5yjm2R3naI
A15n+/I2IkkTrY8huo+X9KOZouZdOSa/d7Bv5FxpNcgh+gadE3y0V4exXmKXuA30
Uvua3riF3uQ+3FgrKNQc4CzPVueBvNlYN/IMq9APf1tBvbnd5Hhl0PNMTxjcDAbJ
RWmIb5g+AzdCjc7XOl/nNd1ve6sghSxZooLMDIsXNBY6DEsFzlS1jEXbdkeV7rU4
9G0o/CBTFSPC0LBBkVNqKJhwyGrEXKn6bLuFdJOtCeqW4ZvkbgKt
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:37 2025 by rpki-client