Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JLQCxlw1CL9lT4v8-gJ1J24YdLI.roa
File: JLQCxlw1CL9lT4v8-gJ1J24YdLI.roa (raw, json)
Hash identifier: R+C5SXan9J7+Pe6Ydl8+3CMRgCJjFo2lHM6l+a9uBIE=
Subject key identifier: 24:B4:02:C6:5C:35:08:BF:65:4F:8B:FC:FA:02:75:27:6E:18:74:B2
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D1DE07B3B0F8D7CF46C78DD324D1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JLQCxlw1CL9lT4v8-gJ1J24YdLI.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 212.107.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:de:07:b3:b0:f8:d7:cf:46:c7:8d:d3:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b402c65c3508bf654f8bfcfa0275276e1874b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:20:a0:fe:a2:49:21:ed:df:d1:8c:de:ce:
e4:cc:d7:b4:c4:ea:16:5b:df:6e:1e:df:e6:84:6d:
9d:d2:08:c3:b3:b5:0c:75:55:91:ff:c7:56:f5:f1:
d3:95:cd:fc:d7:d5:f5:ed:d7:1d:26:bc:bf:86:ac:
23:b2:08:9e:f1:34:e2:9d:2c:91:a2:3e:eb:4c:66:
fe:a6:da:dc:48:3f:0e:bd:0c:0e:41:59:c2:a3:d3:
f1:89:79:cf:1d:d9:1c:18:12:73:a6:c9:7a:57:dd:
87:68:2f:dd:ad:d9:f8:4c:1a:bb:a1:a6:1f:b4:91:
87:31:31:17:a7:a1:e9:b0:23:55:1f:a9:d7:b5:4a:
e8:c7:51:7e:4e:eb:07:88:06:67:23:cd:e2:b2:0f:
da:a0:50:b7:f7:f4:02:3e:c2:5b:df:54:7a:df:29:
47:15:b0:e0:bf:c6:5b:e8:4b:fe:8a:6d:87:b6:55:
c6:58:48:84:d5:46:b6:c0:fc:61:aa:ba:64:4b:e5:
93:47:8c:1e:58:57:d2:b9:89:ab:74:ea:94:44:0d:
a8:86:11:01:09:6e:9b:24:78:82:4f:06:30:20:63:
1f:98:61:53:8f:91:e1:0c:02:d6:8b:23:ab:e8:00:
3e:5f:9f:4e:81:1c:f9:b3:93:fe:1c:76:ae:19:60:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:02:C6:5C:35:08:BF:65:4F:8B:FC:FA:02:75:27:6E:18:74:B2
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JLQCxlw1CL9lT4v8-gJ1J24YdLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3d:9e:1c:90:2b:0e:18:df:47:af:b9:8c:03:9d:10:03:37:
83:fd:a6:ff:5d:de:12:0a:b0:6f:60:4a:7e:aa:53:73:1c:fb:
f8:2d:db:89:9e:56:aa:88:6f:32:46:50:1e:69:72:c7:8e:6a:
5e:e9:cb:22:87:74:fa:77:7a:f0:ee:6d:91:b9:a4:39:95:ea:
3f:17:82:49:54:9a:ed:2c:bb:5f:98:ed:b5:46:c2:6d:8a:35:
82:fc:33:13:a8:a7:ef:81:e4:28:80:79:5f:83:78:64:97:27:
de:0f:5d:45:1c:05:85:95:48:55:68:e0:ad:5f:7e:08:74:13:
a0:0f:5d:3e:08:66:2b:1d:49:5f:b3:ef:4e:09:14:ac:d4:6d:
28:98:69:ff:44:ee:00:7e:66:38:d7:31:89:12:31:96:2f:7e:
61:ef:4f:34:48:93:93:6f:af:be:bb:51:b4:f9:dd:fc:0d:96:
fe:1f:70:9d:d4:b1:ad:06:21:b7:08:7c:c0:50:be:8f:07:97:
da:c7:89:cf:0e:1a:17:ca:67:50:9c:bc:69:da:b9:f2:bb:89:
2b:4e:6d:57:15:51:4b:e9:33:0e:e0:8f:8a:2a:66:db:24:85:
62:e8:5e:6c:2d:1d:ee:bd:86:57:eb:ad:18:c5:5a:c0:12:12:
a7:c1:05:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR9HeB7Ow+NfPRseN0yTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGI0MDJjNjVjMzUwOGJmNjU0ZjhiZmNmYTAyNzUyNzZlMTg3NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHIgoP6iSSHt39GM3s7kzNe0xOoW
W99uHt/mhG2d0gjDs7UMdVWR/8dW9fHTlc3819X17dcdJry/hqwjsgie8TTinSyR
oj7rTGb+ptrcSD8OvQwOQVnCo9PxiXnPHdkcGBJzpsl6V92HaC/drdn4TBq7oaYf
tJGHMTEXp6HpsCNVH6nXtUrox1F+TusHiAZnI83isg/aoFC39/QCPsJb31R63ylH
FbDgv8Zb6Ev+im2HtlXGWEiE1Ua2wPxhqrpkS+WTR4weWFfSuYmrdOqURA2ohhEB
CW6bJHiCTwYwIGMfmGFTj5HhDALWiyOr6AA+X59OgRz5s5P+HHauGWB6lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCS0AsZcNQi/ZU+L/PoCdSduGHSyMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvSkxRQ3hsdzFDTDlsVDR2OC1nSjFKMjRZZExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GsPMA0G
CSqGSIb3DQEBCwUAA4IBAQAFPZ4ckCsOGN9Hr7mMA50QAzeD/ab/Xd4SCrBvYEp+
qlNzHPv4LduJnlaqiG8yRlAeaXLHjmpe6csih3T6d3rw7m2RuaQ5leo/F4JJVJrt
LLtfmO21RsJtijWC/DMTqKfvgeQogHlfg3hklyfeD11FHAWFlUhVaOCtX34IdBOg
D10+CGYrHUlfs+9OCRSs1G0omGn/RO4AfmY41zGJEjGWL35h7080SJOTb6++u1G0
+d38DZb+H3Cd1LGtBiG3CHzAUL6PB5fax4nPDhoXymdQnLxp2rnyu4krTm1XFVFL
6TMO4I+KKmbbJIVi6F5sLR3uvYZX660YxVrAEhKnwQUW
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:02:25 2025 by rpki-client