Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/dJPP-PkBi33AJe9GjVGArq6S2Qk.roa
File: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (raw, json)
Hash identifier: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=
Subject key identifier: 74:93:CF:F8:F9:01:8B:7D:C0:25:EF:46:8D:51:80:AE:AE:92:D9:09
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70D8ABCFE7D236E942BDF27531079
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/dJPP-PkBi33AJe9GjVGArq6S2Qk.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209371
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0d:8a:bc:fe:7d:23:6e:94:2b:df:27:53:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7493cff8f9018b7dc025ef468d5180aeae92d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:1c:b7:21:60:2a:d5:79:b8:28:9f:8d:ac:
92:45:47:d1:fe:65:7f:c6:f5:1c:07:52:90:90:50:
f8:8f:31:ce:fa:b1:bc:ef:42:6e:95:ae:9f:08:0f:
3f:d7:5a:7b:08:fe:13:a4:15:5a:24:74:33:74:74:
48:fc:59:a1:2b:f5:b0:f3:f9:10:df:b1:c3:d0:98:
4b:5a:ce:40:6f:65:0e:5d:76:89:45:d5:f6:56:1e:
a8:38:d6:d4:9a:c5:8c:3f:59:15:47:8f:73:d9:fa:
0e:1a:16:4a:3e:53:4d:e5:6c:ce:bd:8b:a4:16:f7:
fa:00:1b:a2:93:fe:39:4e:1b:73:27:d4:0f:18:75:
d5:4b:51:bb:c6:34:bf:4a:c4:34:91:ad:99:ec:da:
fc:3e:db:c0:34:eb:2b:3f:14:1c:02:fb:ea:88:e7:
ce:55:d2:02:6a:18:45:4a:fe:7b:78:93:ca:0e:45:
85:15:a3:6b:1f:50:21:bc:01:7d:55:2f:e6:32:dc:
5b:72:84:78:37:a4:18:41:9b:fc:6a:95:4e:c3:33:
bf:d9:16:b5:0e:a2:fe:c6:36:21:20:e4:bc:a8:ec:
6f:01:a6:c4:60:00:05:76:be:18:39:f7:8c:d1:7c:
c5:5c:12:d1:d0:90:c8:aa:6e:3d:d8:45:eb:43:59:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:CF:F8:F9:01:8B:7D:C0:25:EF:46:8D:51:80:AE:AE:92:D9:09
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/dJPP-PkBi33AJe9GjVGArq6S2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:49:48:d8:de:e9:f6:dd:e4:f0:e0:06:53:c7:54:a5:55:
79:43:dc:97:08:9f:2d:d0:37:69:d9:99:7c:a1:87:fe:0c:95:
91:30:c5:2b:ce:94:5b:c0:19:1c:de:c8:bb:77:de:90:43:52:
b0:d9:cc:cf:6d:80:d7:5a:1b:3d:4f:2c:15:60:da:50:b9:32:
35:2b:e8:27:ce:20:a3:0f:74:fc:cb:6f:8b:38:79:c9:37:47:
76:53:1b:17:e4:64:94:0f:59:9b:30:b1:e9:2e:e8:de:b8:3d:
cf:44:04:0f:2d:ac:98:5c:93:75:ea:b5:4e:79:a2:b9:8f:71:
9e:fa:e0:d9:12:df:95:b4:a8:8c:1b:bc:57:2b:48:a2:50:ce:
1c:75:bd:7c:03:4a:64:a9:6f:85:5b:02:86:6c:2a:80:39:c2:
e2:d6:9d:d0:4a:d9:6e:a7:51:5e:ce:3f:49:d8:ae:51:5e:d6:
c7:17:d1:8c:66:99:4e:29:7f:36:56:bb:3e:05:d8:c6:16:f7:
94:44:5f:cb:51:e6:6d:a5:28:1d:18:86:f6:8e:5e:93:1f:54:
51:7f:9a:2d:9c:fb:2b:99:db:03:d1:e7:ce:8d:5c:f6:56:46:
e8:96:87:9e:14:aa:29:32:cd:ca:b9:a2:0e:9c:81:1e:f0:28:
e0:50:9d:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1w2KvP59I26UK98nUxB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDkzY2ZmOGY5MDE4YjdkYzAyNWVmNDY4ZDUxODBhZWFlOTJkOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwctyFgKtV5uCifjaySRUfR/mV/
xvUcB1KQkFD4jzHO+rG870Jula6fCA8/11p7CP4TpBVaJHQzdHRI/FmhK/Ww8/kQ
37HD0JhLWs5Ab2UOXXaJRdX2Vh6oONbUmsWMP1kVR49z2foOGhZKPlNN5WzOvYuk
Fvf6ABuik/45ThtzJ9QPGHXVS1G7xjS/SsQ0ka2Z7Nr8PtvANOsrPxQcAvvqiOfO
VdICahhFSv57eJPKDkWFFaNrH1AhvAF9VS/mMtxbcoR4N6QYQZv8apVOwzO/2Ra1
DqL+xjYhIOS8qOxvAabEYAAFdr4YOfeM0XzFXBLR0JDIqm492EXrQ1mN3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSTz/j5AYt9wCXvRo1RgK6uktkJMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvZEpQUC1Qa0JpMzNBSmU5R2pWR0FycTZTMlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e64MA0G
CSqGSIb3DQEBCwUAA4IBAQCiLElI2N7p9t3k8OAGU8dUpVV5Q9yXCJ8t0Ddp2Zl8
oYf+DJWRMMUrzpRbwBkc3si7d96QQ1Kw2czPbYDXWhs9TywVYNpQuTI1K+gnziCj
D3T8y2+LOHnJN0d2UxsX5GSUD1mbMLHpLujeuD3PRAQPLayYXJN16rVOeaK5j3Ge
+uDZEt+VtKiMG7xXK0iiUM4cdb18A0pkqW+FWwKGbCqAOcLi1p3QStlup1Fezj9J
2K5RXtbHF9GMZplOKX82Vrs+BdjGFveURF/LUeZtpSgdGIb2jl6TH1RRf5otnPsr
mdsD0efOjVz2VkboloeeFKopMs3KuaIOnIEe8CjgUJ14
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:22 2025 by rpki-client