Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/JboF5duYkSjIw0cFCDow2D7hhYA.roa
File: JboF5duYkSjIw0cFCDow2D7hhYA.roa (raw, json)
Hash identifier: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=
Subject key identifier: 25:BA:05:E5:DB:98:91:28:C8:C3:47:05:08:3A:30:D8:3E:E1:85:80
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01942220008F2615067776878D1C184A357F
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/JboF5duYkSjIw0cFCDow2D7hhYA.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45014
IP address blocks: 5.159.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:8f:26:15:06:77:76:87:8d:1c:18:4a:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ba05e5db989128c8c34705083a30d83ee18580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:9f:cb:11:24:b1:47:e1:39:91:31:f1:ab:
0a:9a:2b:3e:ae:22:4c:e9:e8:f1:61:bf:74:e5:f1:
56:fb:4b:be:e7:03:63:81:0a:2c:2f:fe:f6:a6:9a:
ee:bf:93:c8:d2:e2:cf:09:e6:de:8e:96:13:e8:3a:
26:8c:9f:00:de:4b:9c:20:85:3a:68:f5:47:58:17:
0e:76:69:ee:7b:ff:3c:7c:0c:68:39:5c:9c:f7:b1:
29:eb:e4:04:56:8f:3f:fc:a9:6f:3e:aa:a4:d2:4d:
78:32:ba:21:98:7b:49:f8:a5:13:55:a8:c5:4f:cf:
82:c4:31:bd:58:4a:39:e0:1c:6b:4a:73:8e:2e:0f:
60:29:06:67:b3:b9:cc:42:76:1d:49:15:9d:e9:a2:
5d:db:50:24:17:41:3e:0a:96:d1:d3:26:7e:1c:dd:
19:6f:99:59:79:82:16:5a:44:58:ac:e1:fe:55:cc:
d9:2c:78:0f:ef:a1:15:b8:4e:21:d6:01:db:4d:05:
27:23:9a:cb:69:55:35:eb:9e:11:d8:0b:af:a6:04:
90:72:5b:81:b2:f4:66:6b:9a:bc:e9:1d:23:fc:44:
d1:ca:d1:7e:24:98:b3:f4:37:a5:7e:aa:4e:87:b8:
cd:e8:64:c4:57:27:09:0c:7a:4c:a3:ee:68:c4:a4:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:05:E5:DB:98:91:28:C8:C3:47:05:08:3A:30:D8:3E:E1:85:80
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/JboF5duYkSjIw0cFCDow2D7hhYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.196.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9e:1f:de:3b:c9:7b:41:73:a2:4e:39:7b:63:35:f1:c5:3b:
66:9e:da:71:c5:7f:94:ae:c6:f6:21:c0:04:bf:54:ed:0a:9c:
77:40:fd:b2:3f:5f:0f:5e:ff:84:5d:b4:39:b6:06:d7:de:51:
b6:6b:de:ec:42:34:35:5c:e0:67:9b:57:66:6c:a0:6f:1e:dc:
29:11:31:04:f8:a1:70:24:1f:e2:6e:cd:bd:0e:16:6e:20:c5:
61:69:2a:c0:c5:62:97:d2:67:5f:d3:83:c9:53:ea:80:10:cb:
a6:fe:22:91:6a:2c:38:64:fb:f3:36:39:a8:06:14:f2:79:f3:
78:7a:d5:0a:6d:e8:07:34:41:39:63:b5:38:21:33:e7:7a:60:
bc:fa:6d:50:f2:c5:6b:88:3c:21:ff:04:80:53:7c:50:11:d4:
fd:13:f9:4e:54:e4:d1:8c:2d:f5:66:22:79:53:00:5a:85:0e:
16:d5:65:72:da:61:0e:0a:57:43:5b:d7:f8:6b:f3:07:48:71:
82:a4:74:fd:59:35:1d:d3:60:42:80:b6:22:2a:0d:12:6a:5d:
86:93:e2:f9:4e:49:d0:cd:d2:ff:25:b9:da:b1:11:bb:c5:89:
21:05:02:5a:7b:e6:0c:2a:06:66:0f:20:f0:0a:ed:53:ee:79:
b2:fc:e0:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIACPJhUGd3aHjRwYSjV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjUwMTAxMTM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWJhMDVlNWRiOTg5MTI4YzhjMzQ3MDUwODNhMzBkODNlZTE4NTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gGfyxEksUfhOZEx8asKmis+riJM
6ejxYb905fFW+0u+5wNjgQosL/72ppruv5PI0uLPCebejpYT6DomjJ8A3kucIIU6
aPVHWBcOdmnue/88fAxoOVyc97Ep6+QEVo8//KlvPqqk0k14MrohmHtJ+KUTVajF
T8+CxDG9WEo54BxrSnOOLg9gKQZns7nMQnYdSRWd6aJd21AkF0E+CpbR0yZ+HN0Z
b5lZeYIWWkRYrOH+VczZLHgP76EVuE4h1gHbTQUnI5rLaVU1654R2AuvpgSQcluB
svRma5q86R0j/ETRytF+JJiz9DelfqpOh7jN6GTEVycJDHpMo+5oxKTsaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCW6BeXbmJEoyMNHBQg6MNg+4YWAMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvSmJvRjVkdVlrU2pJdzBjRkNEb3cyRDdoaFlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ/EMA0G
CSqGSIb3DQEBCwUAA4IBAQB3nh/eO8l7QXOiTjl7YzXxxTtmntpxxX+Ursb2IcAE
v1TtCpx3QP2yP18PXv+EXbQ5tgbX3lG2a97sQjQ1XOBnm1dmbKBvHtwpETEE+KFw
JB/ibs29DhZuIMVhaSrAxWKX0mdf04PJU+qAEMum/iKRaiw4ZPvzNjmoBhTyefN4
etUKbegHNEE5Y7U4ITPnemC8+m1Q8sVriDwh/wSAU3xQEdT9E/lOVOTRjC31ZiJ5
UwBahQ4W1WVy2mEOCldDW9f4a/MHSHGCpHT9WTUd02BCgLYiKg0Sal2Gk+L5TknQ
zdL/JbnasRG7xYkhBQJae+YMKgZmDyDwCu1T7nmy/OAR
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:52:55 2025 by rpki-client