Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa
File: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (raw, json)
Hash identifier: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=
Subject key identifier: 26:9D:14:32:D9:51:77:C6:70:BC:23:A1:A9:F0:FF:00:3A:C1:28:B2
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9F9F5DC2CA5A55024AED7F96E9FE2
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20836
IP address blocks: 149.154.157.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f9:f5:dc:2c:a5:a5:50:24:ae:d7:f9:6e:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=269d1432d95177c670bc23a1a9f0ff003ac128b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:ff:f3:6b:bf:c1:99:cb:49:12:25:6c:b6:
30:bb:11:c8:39:a7:80:6f:dc:71:42:93:ef:ae:21:
1a:5a:e7:94:e5:36:ac:83:71:e5:80:cd:15:88:0d:
d7:12:da:d8:ca:79:76:5e:94:21:91:c7:86:65:46:
cb:b5:c3:38:68:5f:75:dd:6a:ae:08:4a:0d:75:1e:
3e:8b:bc:c3:9b:68:c2:57:f1:8a:f2:b0:51:cd:3d:
1f:76:e5:40:90:d4:d4:70:c3:2c:e1:79:cd:5c:76:
71:61:d4:13:74:f4:64:a1:cd:1d:c3:a6:0b:d0:d0:
2c:b8:3e:0d:ec:bd:25:69:76:ec:b8:57:36:1b:81:
0e:c9:3f:8e:bd:26:c1:80:7d:ec:8c:a7:06:0d:02:
f9:87:5a:60:3b:79:3e:9a:be:a3:87:c3:bd:55:01:
9c:1f:b4:d1:de:38:25:7b:4b:76:de:00:d7:4e:d6:
7a:57:0b:fd:c0:23:33:3f:13:1e:b6:56:83:b1:6b:
2f:e5:00:33:b4:63:5c:2d:21:4b:7c:5e:99:be:fe:
1a:06:3e:a3:64:48:f0:a0:bb:39:6b:fc:9b:14:c0:
0f:fa:82:3b:1d:ae:aa:16:ef:8d:89:76:15:84:f9:
0c:76:d5:e8:00:15:79:d1:0a:1e:30:67:00:4a:78:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:14:32:D9:51:77:C6:70:BC:23:A1:A9:F0:FF:00:3A:C1:28:B2
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.154.157.0/24
151.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e0:d0:2d:a4:2c:92:3b:8b:04:d0:9f:2b:1a:a2:77:cc:93:
3a:cd:54:aa:e9:45:4f:e6:37:e5:be:d9:c0:b6:d5:6c:5e:f0:
d4:bc:2c:9d:b5:ed:0c:2e:75:c8:ca:ca:7b:e2:cb:82:7c:e3:
7e:ca:87:dd:f5:a3:7e:ef:ce:a5:ad:d2:20:c2:e3:8e:42:0d:
77:d6:fa:b6:23:fd:38:88:60:79:e8:34:ff:98:33:3a:cd:ee:
0c:1c:bc:9b:34:a5:74:26:94:7a:fc:ed:a2:c4:9d:c6:3c:59:
2d:ad:de:ef:6b:55:63:44:84:3b:d0:96:a9:c0:aa:fc:3c:f9:
12:04:a6:b0:dd:8f:67:20:80:18:b7:72:8b:f2:54:6f:8d:2d:
5e:65:cb:63:b8:06:42:3a:53:9e:a5:29:e0:c2:c1:3c:6f:9b:
e4:7d:c9:d0:45:70:5b:95:b3:fc:58:9a:bb:75:8a:93:81:12:
e4:cc:d1:75:81:64:0f:7f:75:5a:b9:21:97:0d:ff:19:81:fa:
a3:c4:19:08:36:a6:ab:33:7a:c0:5f:9e:65:f5:42:2e:3b:e9:
b8:c7:ee:9b:45:f6:70:d1:25:81:5c:5b:14:13:b8:4b:10:3a:
57:2d:32:f4:24:63:66:b4:1d:16:49:36:63:b6:c6:69:bf:3e:
fa:9e:1f:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2fn13CylpVAkrtf5bp/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwMTAyMTE1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjlkMTQzMmQ5NTE3N2M2NzBiYzIzYTFhOWYwZmYwMDNhYzEyOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSX/82u/wZnLSRIlbLYwuxHIOaeA
b9xxQpPvriEaWueU5Tasg3HlgM0ViA3XEtrYynl2XpQhkceGZUbLtcM4aF913Wqu
CEoNdR4+i7zDm2jCV/GK8rBRzT0fduVAkNTUcMMs4XnNXHZxYdQTdPRkoc0dw6YL
0NAsuD4N7L0laXbsuFc2G4EOyT+OvSbBgH3sjKcGDQL5h1pgO3k+mr6jh8O9VQGc
H7TR3jgle0t23gDXTtZ6Vwv9wCMzPxMetlaDsWsv5QAztGNcLSFLfF6Zvv4aBj6j
ZEjwoLs5a/ybFMAP+oI7Ha6qFu+NiXYVhPkMdtXoABV50QoeMGcASniEbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCadFDLZUXfGcLwjoanw/wA6wSiyMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvSnAwVU10bFJkOFp3dkNPaHFmRF9BRHJCS0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlZqdAwQA
l+wSMA0GCSqGSIb3DQEBCwUAA4IBAQB+4NAtpCySO4sE0J8rGqJ3zJM6zVSq6UVP
5jflvtnAttVsXvDUvCydte0MLnXIysp74suCfON+yofd9aN+786lrdIgwuOOQg13
1vq2I/04iGB56DT/mDM6ze4MHLybNKV0JpR6/O2ixJ3GPFktrd7va1VjRIQ70Jap
wKr8PPkSBKaw3Y9nIIAYt3KL8lRvjS1eZctjuAZCOlOepSngwsE8b5vkfcnQRXBb
lbP8WJq7dYqTgRLkzNF1gWQPf3VauSGXDf8ZgfqjxBkINqarM3rAX55l9UIuO+m4
x+6bRfZw0SWBXFsUE7hLEDpXLTL0JGNmtB0WSTZjtsZpvz76nh/B
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:11:07 2025 by rpki-client