Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/rjvci4lVGCr57ADE7C3M4Mib4mk.roa
File: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (raw, json)
Hash identifier: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=
Subject key identifier: AE:3B:DC:8B:89:55:18:2A:F9:EC:00:C4:EC:2D:CC:E0:C8:9B:E2:69
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 019426D9DDFEE3252619ED99F5E323FC5707
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/rjvci4lVGCr57ADE7C3M4Mib4mk.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8368
IP address blocks: 185.39.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dd:fe:e3:25:26:19:ed:99:f5:e3:23:fc:57:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae3bdc8b8955182af9ec00c4ec2dcce0c89be269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:22:7d:5c:03:eb:cd:a0:4b:3e:0f:82:ac:
d1:a9:24:28:4a:97:4a:be:4c:89:cf:5b:ab:bb:1f:
82:9c:97:78:fe:72:2b:5b:e2:e0:b9:32:29:0e:37:
84:7b:47:a5:a7:28:66:64:f6:21:b7:a4:3a:d9:c1:
9d:de:5a:9c:48:cd:37:4e:25:aa:0a:a1:6f:e9:27:
30:73:f4:57:c0:dc:7a:11:3b:94:2b:ab:c8:1f:0b:
cb:b2:61:7c:a1:3c:2c:2f:c8:45:c4:d4:a3:30:6d:
d0:83:49:aa:b7:75:4a:dd:fa:93:ea:7c:de:fd:73:
d6:b0:40:11:03:4d:fa:55:fe:c7:88:64:22:ef:80:
4f:50:ec:6b:3c:3e:ac:63:fc:a2:6e:97:13:76:46:
1b:1f:58:8f:5b:d4:3d:b9:0e:e6:eb:6d:72:ba:9f:
bb:75:1f:e8:df:04:39:c7:b0:da:23:73:50:0d:a5:
c1:d7:a9:04:a4:ce:d2:06:8d:02:6c:24:87:fe:9f:
15:d9:29:fc:a3:79:67:de:f5:6e:97:12:55:a6:0e:
3c:78:f1:5f:0f:49:3a:c6:34:8a:96:77:0a:51:b6:
8d:5a:4b:a6:7f:98:0d:4a:1b:fc:69:ea:8a:78:7c:
50:25:ed:c3:39:7e:e9:e2:84:f0:23:9b:2b:b0:f9:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:DC:8B:89:55:18:2A:F9:EC:00:C4:EC:2D:CC:E0:C8:9B:E2:69
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/rjvci4lVGCr57ADE7C3M4Mib4mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.152.0/22
Signature Algorithm: sha256WithRSAEncryption
96:a7:d7:cb:9c:27:3b:3b:25:aa:8c:8e:1e:3d:02:d1:de:9d:
dd:7d:71:84:50:4b:50:60:ec:a7:c6:4f:19:73:32:3b:61:21:
7d:33:5f:4b:33:cc:72:9c:9a:39:48:09:76:45:16:af:20:63:
ef:64:d3:88:75:31:38:e3:8b:34:56:b9:4b:6e:21:af:c5:cf:
11:01:0f:b6:bf:cf:98:f2:c0:54:21:f0:87:95:6f:26:59:4c:
02:1f:b5:62:10:34:e7:a5:5d:01:46:d1:11:94:a1:da:53:51:
a9:75:ef:18:83:d0:d8:ae:97:06:43:c2:09:51:a2:5e:72:02:
07:fb:d8:a6:45:16:a0:f5:ee:03:63:57:6b:3b:45:18:0e:5b:
f2:03:9c:fa:74:53:46:13:27:c9:62:7f:56:d9:fd:f5:5a:47:
3c:e0:19:7a:ac:ec:2b:af:c8:01:83:e0:d8:98:31:1a:41:6c:
94:80:f1:8f:ee:20:4f:bb:6d:99:e1:40:d1:47:ef:bf:d1:09:
28:f5:9e:12:69:93:c3:64:35:8c:03:54:01:c1:09:05:35:40:
29:63:da:48:40:02:59:e4:76:39:fc:75:44:42:d9:41:d7:dd:
09:b1:4e:51:09:b2:7b:5c:9b:f1:bc:74:1b:18:c0:6e:36:42:
ac:60:1a:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2d3+4yUmGe2Z9eMj/FcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWI0Y2Q0MGJhZTQ3ZDQ4ZjUxYzljY2NjNjA3Y2NlNTdj
ZTAwZjcwHhcNMjUwMTAyMTE0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTNiZGM4Yjg5NTUxODJhZjllYzAwYzRlYzJkY2NlMGM4OWJlMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ywifVwD682gSz4PgqzRqSQoSpdK
vkyJz1urux+CnJd4/nIrW+LguTIpDjeEe0elpyhmZPYht6Q62cGd3lqcSM03TiWq
CqFv6Scwc/RXwNx6ETuUK6vIHwvLsmF8oTwsL8hFxNSjMG3Qg0mqt3VK3fqT6nze
/XPWsEARA036Vf7HiGQi74BPUOxrPD6sY/yibpcTdkYbH1iPW9Q9uQ7m621yup+7
dR/o3wQ5x7DaI3NQDaXB16kEpM7SBo0CbCSH/p8V2Sn8o3ln3vVulxJVpg48ePFf
D0k6xjSKlncKUbaNWkumf5gNShv8aeqKeHxQJe3DOX7p4oTwI5srsPn3cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK473IuJVRgq+ewAxOwtzODIm+JpMB8GA1UdIwQY
MBaAFEIbTNQLrkfUj1HJzMxgfM5XzgD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEt
ODRjY2YzNDIwMjg2LzEvcmp2Y2k0bFZHQ3I1N0FERTdDM000TWliNG1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEtODRjY2YzNDIwMjg2
LzEvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSeYMA0G
CSqGSIb3DQEBCwUAA4IBAQCWp9fLnCc7OyWqjI4ePQLR3p3dfXGEUEtQYOynxk8Z
czI7YSF9M19LM8xynJo5SAl2RRavIGPvZNOIdTE444s0VrlLbiGvxc8RAQ+2v8+Y
8sBUIfCHlW8mWUwCH7ViEDTnpV0BRtERlKHaU1Gpde8Yg9DYrpcGQ8IJUaJecgIH
+9imRRag9e4DY1drO0UYDlvyA5z6dFNGEyfJYn9W2f31Wkc84Bl6rOwrr8gBg+DY
mDEaQWyUgPGP7iBPu22Z4UDRR++/0Qko9Z4SaZPDZDWMA1QBwQkFNUApY9pIQAJZ
5HY5/HVEQtlB190JsU5RCbJ7XJvxvHQbGMBuNkKsYBr5
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:50 2025 by rpki-client