Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa
File: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (raw, json)
Hash identifier: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=
Subject key identifier: 26:56:4C:BB:A1:0B:31:68:E1:E5:57:CF:47:E1:0C:1F:0C:30:A0:92
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0194228E16652B1950F89366E571BE23B0E0
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.238.154.0/24 maxlen: 24
217.117.65.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:16:65:2b:19:50:f8:93:66:e5:71:be:23:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26564cbba10b3168e1e557cf47e10c1f0c30a092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:c4:ce:fe:e9:01:38:54:c1:bf:3a:f5:2a:
3d:7e:9e:9a:3e:dc:40:8f:23:53:a3:a6:62:55:6b:
8c:0b:f8:21:6b:be:75:52:da:b6:fd:1a:76:3c:0e:
84:63:fc:2c:94:1a:6f:5b:4d:a8:81:b8:1f:4f:11:
5f:c7:14:fb:a0:3e:e5:40:d5:1d:e4:da:1c:aa:ea:
e7:be:50:18:60:e7:24:ca:c6:9d:b6:3f:f2:be:01:
9f:a1:bd:3d:4f:33:d7:58:1d:17:cb:ef:b7:00:ed:
c7:88:14:29:39:69:42:6b:41:04:f2:ca:9a:e6:09:
22:c7:44:4d:40:98:34:14:c9:56:e7:a9:ea:7e:2a:
e0:08:ed:75:e2:55:fe:e3:11:7d:b3:e1:17:7c:57:
f8:c9:4e:e8:2b:8b:ce:f5:25:e7:57:cc:93:e3:54:
eb:2e:fb:00:e0:5a:66:10:4b:23:f5:db:14:dc:57:
fb:d0:ad:9e:46:92:03:d2:4e:7a:4b:b9:0b:d9:40:
f3:d7:5f:8a:89:34:0c:bc:51:71:d4:bb:38:c9:8b:
fe:be:a7:f8:fa:95:58:ee:2b:b2:24:7c:9d:da:19:
f9:f0:9f:48:2d:aa:5b:fc:e9:76:f9:14:08:2e:ae:
94:00:1f:5d:d6:8e:d7:cc:30:d2:62:72:24:33:51:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:4C:BB:A1:0B:31:68:E1:E5:57:CF:47:E1:0C:1F:0C:30:A0:92
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.154.0/24
217.117.65.0/24
217.117.71.0/24
217.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ce:7c:e6:65:41:14:34:e1:78:7b:23:47:f3:95:be:87:79:
02:32:59:9b:1f:cf:da:79:86:e1:88:f4:6a:0d:06:b7:28:1e:
c5:39:fb:78:5c:ba:47:c5:2d:ab:a0:81:fd:b9:91:73:e3:d4:
52:a5:50:25:ec:b1:c7:47:48:8b:54:50:d7:79:0f:e2:5d:06:
8a:93:91:e0:7a:63:01:9b:e0:0e:28:21:be:20:f3:97:88:d4:
44:60:85:5c:6e:9b:05:32:e6:87:8e:e5:99:e0:00:0d:46:e1:
fd:13:8e:4b:d0:a9:20:a2:51:18:2c:1f:08:69:3d:6c:96:91:
3e:f9:db:8b:bd:ac:b7:39:95:3c:36:79:89:8a:90:d4:e2:d9:
d2:40:30:42:e0:90:a9:5b:2a:53:c9:ac:17:f4:e4:ef:57:dc:
fe:8d:88:24:b1:90:37:11:5a:1e:9f:c5:9d:02:ed:d4:b1:b6:
a0:d3:a7:22:3b:0b:d9:c4:53:9f:9d:8a:d4:dc:6c:b0:f8:55:
53:77:08:16:54:29:60:83:7e:eb:2d:0e:c6:a2:27:ea:27:09:
4a:0b:15:ea:d9:06:d3:c2:2f:b2:c0:c8:3a:5c:42:8b:32:12:
6c:e0:3a:f6:78:a2:71:dc:6a:6a:33:33:5b:9e:a8:eb:51:da:
9c:b1:6c:a6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQijhZlKxlQ+JNm5XG+I7DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjUwMTAxMTU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjU2NGNiYmExMGIzMTY4ZTFlNTU3Y2Y0N2UxMGMxZjBjMzBhMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBbEzv7pAThUwb869So9fp6aPtxA
jyNTo6ZiVWuMC/gha751Utq2/Rp2PA6EY/wslBpvW02ogbgfTxFfxxT7oD7lQNUd
5NocqurnvlAYYOckysadtj/yvgGfob09TzPXWB0Xy++3AO3HiBQpOWlCa0EE8sqa
5gkix0RNQJg0FMlW56nqfirgCO114lX+4xF9s+EXfFf4yU7oK4vO9SXnV8yT41Tr
LvsA4FpmEEsj9dsU3Ff70K2eRpID0k56S7kL2UDz11+KiTQMvFFx1Ls4yYv+vqf4
+pVY7iuyJHyd2hn58J9ILapb/Ol2+RQILq6UAB9d1o7XzDDSYnIkM1GzrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCZWTLuhCzFo4eVXz0fhDB8MMKCSMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvSmxaTXU2RUxNV2poNVZmUFItRU1Id3d3b0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+6aAwQA
2XVBAwQA2XVHAwQA2XVMMA0GCSqGSIb3DQEBCwUAA4IBAQBgznzmZUEUNOF4eyNH
85W+h3kCMlmbH8/aeYbhiPRqDQa3KB7FOft4XLpHxS2roIH9uZFz49RSpVAl7LHH
R0iLVFDXeQ/iXQaKk5HgemMBm+AOKCG+IPOXiNREYIVcbpsFMuaHjuWZ4AANRuH9
E45L0KkgolEYLB8IaT1slpE++duLvay3OZU8NnmJipDU4tnSQDBC4JCpWypTyawX
9OTvV9z+jYgksZA3EVoen8WdAu3Usbag06ciOwvZxFOfnYrU3Gyw+FVTdwgWVClg
g37rLQ7GoifqJwlKCxXq2QbTwi+ywMg6XEKLMhJs4Dr2eKJx3GpqMzNbnqjrUdqc
sWym
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:30 2025 by rpki-client