Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/jTP-5VX48T-YciHdKxsQK5ibXEA.roa
File: jTP-5VX48T-YciHdKxsQK5ibXEA.roa (raw, json)
Hash identifier: TuGk9Z8jBKOomZunpwGFQNHcF5XcXRrxTkB4n3mm5T8=
Subject key identifier: 8D:33:FE:E5:55:F8:F1:3F:98:72:21:DD:2B:1B:10:2B:98:9B:5C:40
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7069F788DC2692195866167A31A2B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/jTP-5VX48T-YciHdKxsQK5ibXEA.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48292
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:06:9f:78:8d:c2:69:21:95:86:61:67:a3:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d33fee555f8f13f987221dd2b1b102b989b5c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:7f:c5:5f:dc:be:25:ac:9a:0d:5f:d4:ac:
11:41:45:04:42:03:dc:3a:5b:3a:c2:09:68:2a:db:
ed:01:c5:bd:33:f8:af:76:06:fe:82:05:9d:70:d9:
95:91:29:76:a7:39:6f:7e:ff:e4:8f:86:30:14:68:
6a:2c:31:62:ab:7e:15:86:9c:18:5c:bc:a8:d5:83:
93:c0:43:8d:38:4d:64:f4:3e:84:4a:b1:00:85:1c:
1d:98:0a:d9:67:61:0a:39:6d:2e:02:84:65:fd:b9:
c4:20:f1:dc:04:68:4b:51:2a:dc:60:6a:a1:87:47:
77:1e:fc:f4:cc:a1:36:06:1b:55:5f:6c:33:0a:57:
84:f6:c7:87:85:d2:da:32:a7:03:61:fc:5d:d6:81:
f5:5a:e4:22:56:0c:d8:c5:6f:fe:51:73:f4:65:ad:
d8:78:11:f4:ee:0d:71:20:4c:de:eb:39:ef:b1:7b:
a3:37:da:30:5b:d8:c4:bb:7a:48:2c:f9:d9:ed:ae:
5a:54:31:c0:da:29:10:55:d9:c8:e5:75:a4:ce:46:
41:59:69:8b:cd:93:55:cb:6b:cf:18:8a:5a:b5:84:
0f:cb:bd:5a:62:63:25:70:97:7a:a7:6b:22:26:cd:
e0:39:61:29:99:38:3a:95:65:d1:b0:03:66:85:c9:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:FE:E5:55:F8:F1:3F:98:72:21:DD:2B:1B:10:2B:98:9B:5C:40
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/jTP-5VX48T-YciHdKxsQK5ibXEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
Signature Algorithm: sha256WithRSAEncryption
a5:ea:72:5f:7f:c5:97:fa:23:43:4a:7b:0f:bc:01:09:65:e6:
16:2c:34:37:9a:86:11:ba:51:75:60:37:99:ec:7c:d7:65:9f:
c1:e9:29:13:48:1f:8a:e2:0c:11:f7:87:7a:56:da:ab:72:1f:
68:be:22:69:71:8c:ff:48:ce:5d:8a:80:16:d3:f5:67:c3:7d:
5d:d2:d6:20:33:df:e9:c5:5d:be:56:40:8b:3c:1a:db:11:24:
fa:12:75:a5:53:21:ee:7a:b1:ae:47:10:25:8c:65:2f:23:9a:
8a:9c:8d:8c:8e:be:80:da:e9:ad:8e:31:1b:9c:22:7e:45:66:
ad:2f:06:7c:93:89:28:b7:21:3c:3b:23:c4:48:8f:fe:55:be:
18:cf:03:2d:3b:90:1f:30:78:7e:c3:79:78:bc:94:c9:21:e3:
d9:1a:73:8f:ef:1c:d9:ac:9a:35:78:d3:8e:08:23:28:ac:f1:
05:27:9f:83:5a:d2:f4:0c:02:9e:c2:43:50:c4:27:37:bf:0f:
55:6b:8f:99:f1:bd:f1:0c:37:a0:30:c1:61:67:37:43:1e:21:
10:96:a4:36:02:2b:fb:67:cc:9a:af:74:89:40:0d:7e:d6:68:
eb:02:8d:bc:29:3f:23:d6:f5:8a:66:99:29:70:ec:f3:bb:a8:
99:f2:bb:97
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj1wafeI3CaSGVhmFnoxorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDMzZmVlNTU1ZjhmMTNmOTg3MjIxZGQyYjFiMTAyYjk4OWI1YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqst/xV/cviWsmg1f1KwRQUUEQgPc
Ols6wgloKtvtAcW9M/ivdgb+ggWdcNmVkSl2pzlvfv/kj4YwFGhqLDFiq34VhpwY
XLyo1YOTwEONOE1k9D6ESrEAhRwdmArZZ2EKOW0uAoRl/bnEIPHcBGhLUSrcYGqh
h0d3Hvz0zKE2BhtVX2wzCleE9seHhdLaMqcDYfxd1oH1WuQiVgzYxW/+UXP0Za3Y
eBH07g1xIEze6znvsXujN9owW9jEu3pILPnZ7a5aVDHA2ikQVdnI5XWkzkZBWWmL
zZNVy2vPGIpatYQPy71aYmMlcJd6p2siJs3gOWEpmTg6lWXRsANmhckjCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI0z/uVV+PE/mHIh3SsbECuYm1xAMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvalRQLTVWWDQ4VC1ZY2lIZEt4c1FLNWliWEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXV7qAD
BAHV7qQwDQYJKoZIhvcNAQELBQADggEBAKXqcl9/xZf6I0NKew+8AQll5hYsNDea
hhG6UXVgN5nsfNdln8HpKRNIH4riDBH3h3pW2qtyH2i+ImlxjP9Izl2KgBbT9WfD
fV3S1iAz3+nFXb5WQIs8GtsRJPoSdaVTIe56sa5HECWMZS8jmoqcjYyOvoDa6a2O
MRucIn5FZq0vBnyTiSi3ITw7I8RIj/5VvhjPAy07kB8weH7DeXi8lMkh49kac4/v
HNmsmjV4044IIyis8QUnn4Na0vQMAp7CQ1DEJze/D1Vrj5nxvfEMN6AwwWFnN0Me
IRCWpDYCK/tnzJqvdIlADX7WaOsCjbwpPyPW9YpmmSlw7PO7qJnyu5c=
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:40:03 2025 by rpki-client