Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JhjPr83v2vT8YONJJDn67FdCujs.roa
File: JhjPr83v2vT8YONJJDn67FdCujs.roa (raw, json)
Hash identifier: 2XYyvZMj9vIB4YRnk+3axJ8D3R3/GKTm3osAl9aqgqk=
Subject key identifier: 26:18:CF:AF:CD:EF:DA:F4:FC:60:E3:49:24:39:FA:EC:57:42:BA:3B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CAD6D6B7B28B2EC6A51F0C7F9760
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JhjPr83v2vT8YONJJDn67FdCujs.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15490
IP address blocks: 2.56.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ca:d6:d6:b7:b2:8b:2e:c6:a5:1f:0c:7f:97:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2618cfafcdefdaf4fc60e3492439faec5742ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:02:df:ae:12:bd:39:67:41:d9:de:fd:f7:
bc:26:e1:c1:3b:4a:08:bc:ef:70:1b:0a:c3:16:ae:
5f:97:b4:e1:fa:4e:6d:f7:31:56:de:6f:31:61:9c:
c2:00:5c:ee:27:be:e8:07:3d:af:4c:37:fc:c1:9b:
84:30:b6:74:fb:e2:45:8a:aa:9e:61:ec:ba:56:e7:
c8:86:b0:52:26:15:33:2e:9f:4a:a0:1a:2f:25:72:
b3:32:9d:59:fe:80:15:c7:0c:de:13:48:79:b0:70:
4f:2f:bd:19:e8:ea:9f:99:4e:b7:f5:b2:0e:b0:1d:
ec:2e:a6:1f:b1:0f:46:7d:83:9d:9b:e1:a1:11:e4:
bd:fe:8a:99:b0:06:d4:ee:7d:b6:9e:d2:95:2f:fb:
cf:8a:b4:e4:f6:16:18:69:ce:27:f5:25:97:72:e6:
8a:cd:17:e5:ef:b3:72:88:6d:e7:46:54:ed:54:72:
e9:c8:8e:31:d4:a9:21:c0:25:cd:19:c2:40:8a:b7:
62:f0:05:1f:e1:ba:d9:2c:0d:ac:25:93:27:92:19:
5f:52:30:7a:cc:0c:4b:ce:a3:c0:68:20:d8:41:14:
df:e5:e0:1c:db:5c:26:53:06:81:5e:4f:85:a8:fc:
bb:ec:97:55:53:c4:c5:18:59:b4:42:d6:58:8d:7e:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:CF:AF:CD:EF:DA:F4:FC:60:E3:49:24:39:FA:EC:57:42:BA:3B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JhjPr83v2vT8YONJJDn67FdCujs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
Signature Algorithm: sha256WithRSAEncryption
da:53:8b:2a:6a:54:09:4f:2b:21:89:62:fd:03:81:9c:61:9d:
90:f3:6f:b7:0a:f7:92:8b:7e:da:32:df:01:37:4a:a0:9a:f8:
ba:c9:52:20:0b:6d:a9:72:ce:16:77:d7:b8:e5:57:98:63:ce:
c2:a5:eb:74:0c:f9:ca:fa:32:27:fb:42:49:73:22:ff:70:cd:
a3:2b:97:eb:62:2b:52:52:74:9e:45:98:c0:15:8a:0f:ec:d4:
7e:9e:fc:43:65:51:97:11:ce:b5:ac:cb:a9:72:fd:5d:db:18:
7c:aa:72:38:39:ee:18:b9:1e:b8:ed:cd:e4:87:1d:50:67:dd:
be:dd:7f:94:fc:11:71:f7:c0:f9:cc:ae:17:06:27:11:6c:3d:
83:3e:e2:88:cc:7a:f8:d0:21:07:c6:8f:78:3f:50:d2:97:e8:
06:c1:3f:7e:32:62:a3:3c:91:f5:da:1a:08:47:e1:c6:ed:3a:
ea:1a:7a:a1:36:fb:fc:af:7e:28:51:1c:c1:2e:a3:fc:10:65:
b4:2c:3f:a3:32:2e:7b:b1:4c:2a:cc:d3:ef:6d:7e:a9:6b:ca:
87:76:1e:29:2a:3c:49:75:5d:5f:d3:5b:9a:25:83:86:0e:5b:
28:22:c6:23:61:b3:a5:5c:f2:32:7a:f4:d8:91:f6:1b:7c:27:
40:d5:6e:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8rW1reyiy7GpR8Mf5dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjE4Y2ZhZmNkZWZkYWY0ZmM2MGUzNDkyNDM5ZmFlYzU3NDJiYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfgC364SvTlnQdne/fe8JuHBO0oI
vO9wGwrDFq5fl7Th+k5t9zFW3m8xYZzCAFzuJ77oBz2vTDf8wZuEMLZ0++JFiqqe
Yey6VufIhrBSJhUzLp9KoBovJXKzMp1Z/oAVxwzeE0h5sHBPL70Z6OqfmU639bIO
sB3sLqYfsQ9GfYOdm+GhEeS9/oqZsAbU7n22ntKVL/vPirTk9hYYac4n9SWXcuaK
zRfl77NyiG3nRlTtVHLpyI4x1KkhwCXNGcJAirdi8AUf4brZLA2sJZMnkhlfUjB6
zAxLzqPAaCDYQRTf5eAc21wmUwaBXk+FqPy77JdVU8TFGFm0QtZYjX6HiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYYz6/N79r0/GDjSSQ5+uxXQro7MB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvSmhqUHI4M3YydlQ4WU9OSkpEbjY3RmRDdWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjimMA0G
CSqGSIb3DQEBCwUAA4IBAQDaU4sqalQJTyshiWL9A4GcYZ2Q82+3CveSi37aMt8B
N0qgmvi6yVIgC22pcs4Wd9e45VeYY87Cpet0DPnK+jIn+0JJcyL/cM2jK5frYitS
UnSeRZjAFYoP7NR+nvxDZVGXEc61rMupcv1d2xh8qnI4Oe4YuR647c3khx1QZ92+
3X+U/BFx98D5zK4XBicRbD2DPuKIzHr40CEHxo94P1DSl+gGwT9+MmKjPJH12hoI
R+HG7TrqGnqhNvv8r34oURzBLqP8EGW0LD+jMi57sUwqzNPvbX6pa8qHdh4pKjxJ
dV1f01uaJYOGDlsoIsYjYbOlXPIyevTYkfYbfCdA1W61
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:13 2025 by rpki-client