Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/jbn0uNt62cbm-5uAutTNS6KIeT0.roa
File: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (raw, json)
Hash identifier: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=
Subject key identifier: 8D:B9:F4:B8:DB:7A:D9:C6:E6:FB:9B:80:BA:D4:CD:4B:A2:88:79:3D
Certificate issuer: /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial: 019422FB680425D660C7028A2F8C03AB44B6
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/jbn0uNt62cbm-5uAutTNS6KIeT0.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48095
IP address blocks: 185.201.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:68:04:25:d6:60:c7:02:8a:2f:8c:03:ab:44:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8db9f4b8db7ad9c6e6fb9b80bad4cd4ba288793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:d8:92:e2:ac:d4:30:f2:71:6f:ac:6f:24:
65:38:64:61:fd:a7:4d:dc:58:d4:76:2f:56:41:9e:
a2:1f:e8:dd:71:ab:dd:61:17:ac:0e:a0:38:ea:df:
22:70:bd:7f:84:1d:ef:b9:98:a0:64:4e:01:e1:55:
31:03:e5:35:3a:81:31:b9:c6:43:88:b2:72:eb:c1:
cf:40:d5:6d:fa:4a:38:8b:e0:82:36:e2:e9:10:87:
9e:9d:fc:98:58:26:bc:a2:85:0b:d7:ff:75:de:e5:
19:91:7c:d5:c8:e5:12:77:09:14:ab:23:d5:55:72:
c5:73:b0:f0:0d:93:67:bb:99:89:31:25:f6:bc:85:
97:6e:9d:1d:7f:33:62:79:f8:c5:02:7b:39:51:64:
c0:ed:7c:b3:24:06:32:23:22:a4:c3:ab:12:9a:29:
eb:54:5e:3e:2f:fd:d1:19:72:08:bc:c8:b1:ec:60:
5e:da:20:66:76:cb:6c:f1:84:20:f9:f6:55:20:53:
02:a4:ab:80:f8:01:7c:70:9b:ad:23:5a:63:8f:df:
35:cd:e6:a6:c9:72:b1:51:cd:1b:51:b3:8b:b2:51:
da:17:c0:90:10:c7:9b:6f:d8:85:b5:ba:d8:52:0d:
a0:72:3e:57:b1:4f:2a:14:7e:2c:98:23:7d:c9:ae:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:F4:B8:DB:7A:D9:C6:E6:FB:9B:80:BA:D4:CD:4B:A2:88:79:3D
X509v3 Authority Key Identifier:
keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/jbn0uNt62cbm-5uAutTNS6KIeT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.244.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3e:e2:83:f1:0a:ec:3d:62:3d:c3:57:84:9b:20:76:9c:a2:
5e:1c:ce:32:1d:ce:86:3b:9e:88:1a:3d:fd:fb:dd:3d:7f:eb:
0e:25:10:d5:c5:e8:95:84:87:c8:35:87:48:26:be:a9:ba:77:
cc:21:1b:25:b1:73:10:36:60:bd:bc:3f:8e:32:62:74:42:6f:
18:ed:da:71:95:a1:3b:7c:1f:7c:15:ed:37:8f:25:c0:c1:0a:
4e:d4:2c:48:e8:f0:2b:67:3e:a1:44:e5:95:fd:64:2f:96:80:
bb:47:af:6b:9a:4c:c6:30:40:2f:9b:86:70:96:28:bf:f0:8c:
8e:09:21:53:76:58:08:18:b2:b2:e0:a9:d4:30:7c:f3:d5:65:
dc:57:0b:82:14:55:48:5a:f6:5d:06:04:97:d7:ee:45:55:52:
e9:2e:ea:d9:4b:3c:95:49:85:8e:60:b8:76:ac:94:37:3c:33:
a6:07:3c:97:d8:25:30:c0:f8:1a:c0:23:79:ae:79:69:71:dc:
9d:cd:a7:47:6d:01:d0:43:b6:37:c5:c0:08:3e:27:9e:7d:b1:
a4:fa:c3:99:61:26:31:36:06:b4:82:25:3d:b7:48:73:6d:90:
5e:cd:c8:2a:1d:7e:f5:22:1e:0c:52:6a:08:e1:00:43:b7:0b:
a1:07:60:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+2gEJdZgxwKKL4wDq0S2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQzNGY4YzIwYTUwNzNlODYwODIxYzhjMDliZjc1Nzlh
MjZkMGIwHhcNMjUwMTAxMTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI5ZjRiOGRiN2FkOWM2ZTZmYjliODBiYWQ0Y2Q0YmEyODg3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tzYkuKs1DDycW+sbyRlOGRh/adN
3FjUdi9WQZ6iH+jdcavdYResDqA46t8icL1/hB3vuZigZE4B4VUxA+U1OoExucZD
iLJy68HPQNVt+ko4i+CCNuLpEIeenfyYWCa8ooUL1/913uUZkXzVyOUSdwkUqyPV
VXLFc7DwDZNnu5mJMSX2vIWXbp0dfzNiefjFAns5UWTA7XyzJAYyIyKkw6sSminr
VF4+L/3RGXIIvMix7GBe2iBmdsts8YQg+fZVIFMCpKuA+AF8cJutI1pjj981zeam
yXKxUc0bUbOLslHaF8CQEMebb9iFtbrYUg2gcj5XsU8qFH4smCN9ya6oNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI259LjbetnG5vubgLrUzUuiiHk9MB8GA1UdIwQY
MBaAFEetNPjCClBz6GCCHIwJv3V5om0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTkt
MjU0MTNjMjYwZTQ1LzEvamJuMHVOdDYyY2JtLTV1QXV0VE5TNktJZVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTktMjU0MTNjMjYwZTQ1
LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucn0MA0G
CSqGSIb3DQEBCwUAA4IBAQCFPuKD8QrsPWI9w1eEmyB2nKJeHM4yHc6GO56IGj39
+909f+sOJRDVxeiVhIfINYdIJr6punfMIRslsXMQNmC9vD+OMmJ0Qm8Y7dpxlaE7
fB98Fe03jyXAwQpO1CxI6PArZz6hROWV/WQvloC7R69rmkzGMEAvm4Zwlii/8IyO
CSFTdlgIGLKy4KnUMHzz1WXcVwuCFFVIWvZdBgSX1+5FVVLpLurZSzyVSYWOYLh2
rJQ3PDOmBzyX2CUwwPgawCN5rnlpcdydzadHbQHQQ7Y3xcAIPieefbGk+sOZYSYx
Nga0giU9t0hzbZBezcgqHX71Ih4MUmoI4QBDtwuhB2DA
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:31 2025 by rpki-client