Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/JoUWdKjnvYv36EECrdw-DD3L2JE.roa
File: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (raw, json)
Hash identifier: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=
Subject key identifier: 26:85:16:74:A8:E7:BD:8B:F7:E8:41:02:AD:DC:3E:0C:3D:CB:D8:91
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 019425217F9C680E181A6EBFD5DEFF69F31A
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/JoUWdKjnvYv36EECrdw-DD3L2JE.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 85.31.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7f:9c:68:0e:18:1a:6e:bf:d5:de:ff:69:f3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26851674a8e7bd8bf7e84102addc3e0c3dcbd891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:54:62:de:e6:26:84:54:9c:f1:40:10:4c:
28:74:45:de:c6:a4:d0:eb:89:f7:d1:35:41:fe:c4:
71:58:f0:1b:51:43:63:78:25:12:5c:f3:8b:b8:68:
f0:a1:06:50:e7:50:e5:76:59:5f:ce:72:8c:f4:25:
72:fe:37:9b:7c:e6:36:6a:d3:7a:0a:6e:bd:db:d1:
b4:12:1f:37:07:b0:94:60:94:f4:f8:c4:87:04:08:
43:60:03:cd:e8:5b:13:2b:83:86:9f:37:aa:62:e5:
f6:b7:c2:4c:f9:43:fb:68:bf:b8:d0:71:32:a0:80:
e4:15:f1:46:c3:a4:88:65:60:24:25:b4:21:9f:0f:
fa:a5:97:4e:35:f2:f7:d8:b1:d2:da:f6:34:7b:08:
7f:ce:99:41:05:e2:ca:5e:eb:e7:dd:0a:2a:2d:01:
21:e9:2e:7e:a7:49:4c:17:f8:cd:de:f6:45:6a:88:
af:fe:c0:f5:78:84:65:ac:db:c8:50:86:01:f8:25:
a6:22:a4:d8:79:cf:8e:7f:59:c7:ce:72:ec:27:a6:
a9:87:b3:12:0a:cb:b1:dc:55:ac:66:a0:e3:50:ed:
03:7f:b6:01:bb:3d:9b:a3:fe:8e:3a:63:52:62:04:
f9:41:8c:21:18:a3:ff:3e:2a:27:c8:06:a9:1f:87:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:16:74:A8:E7:BD:8B:F7:E8:41:02:AD:DC:3E:0C:3D:CB:D8:91
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/JoUWdKjnvYv36EECrdw-DD3L2JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
35:19:c0:fd:56:d6:55:c6:3b:6e:f6:46:df:4d:83:f1:47:b8:
0e:32:e8:31:cd:ff:55:9e:5a:8a:25:59:28:5d:a9:e9:fb:22:
de:a7:42:28:19:54:e0:77:8c:e0:9a:6b:02:50:44:24:32:ae:
b3:58:cc:a2:e9:41:50:59:c5:65:74:08:a9:8f:3c:31:ad:d4:
3f:53:d2:aa:21:84:51:50:19:2e:7d:49:ed:ca:23:7a:97:2e:
e9:27:a8:91:1c:c0:db:97:95:58:b9:8b:05:42:a5:10:58:ad:
59:6d:68:d1:31:07:26:eb:bf:f8:38:96:8a:df:23:a9:0b:5e:
e6:e6:4f:c8:23:4e:30:fc:1e:3e:0a:ee:45:94:d1:4b:d9:25:
48:bf:89:f3:81:0a:79:18:9d:d9:30:51:0f:a1:ad:cf:68:f9:
63:be:21:48:70:36:18:c7:d4:db:3e:bf:15:cc:47:49:0b:84:
ed:f3:ce:96:bb:ad:b6:fd:de:48:6a:d4:31:b9:7b:b3:e4:af:
28:12:03:ce:41:56:7d:dc:ef:8e:31:18:f4:94:1a:2a:57:b4:
f8:98:26:2c:b1:23:fc:dc:f0:e0:04:2e:d9:0e:b0:e2:af:96:
ae:6d:d0:b9:2d:6e:53:10:df:48:49:76:dc:e0:85:b6:37:b8:
8b:3e:86:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIX+caA4YGm6/1d7/afMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1
YmI5MzkwHhcNMjUwMTAyMDM0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjg1MTY3NGE4ZTdiZDhiZjdlODQxMDJhZGRjM2UwYzNkY2JkODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+1UYt7mJoRUnPFAEEwodEXexqTQ
64n30TVB/sRxWPAbUUNjeCUSXPOLuGjwoQZQ51DldllfznKM9CVy/jebfOY2atN6
Cm6929G0Eh83B7CUYJT0+MSHBAhDYAPN6FsTK4OGnzeqYuX2t8JM+UP7aL+40HEy
oIDkFfFGw6SIZWAkJbQhnw/6pZdONfL32LHS2vY0ewh/zplBBeLKXuvn3QoqLQEh
6S5+p0lMF/jN3vZFaoiv/sD1eIRlrNvIUIYB+CWmIqTYec+Of1nHznLsJ6aph7MS
Csux3FWsZqDjUO0Df7YBuz2bo/6OOmNSYgT5QYwhGKP/PionyAapH4eEAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaFFnSo572L9+hBAq3cPgw9y9iRMB8GA1UdIwQY
MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt
Y2IzZmE0MDdlMGY0LzEvSm9VV2RLam52WXYzNkVFQ3Jkdy1ERDNMMkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0
LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR8pMA0G
CSqGSIb3DQEBCwUAA4IBAQA1GcD9VtZVxjtu9kbfTYPxR7gOMugxzf9VnlqKJVko
Xanp+yLep0IoGVTgd4zgmmsCUEQkMq6zWMyi6UFQWcVldAipjzwxrdQ/U9KqIYRR
UBkufUntyiN6ly7pJ6iRHMDbl5VYuYsFQqUQWK1ZbWjRMQcm67/4OJaK3yOpC17m
5k/II04w/B4+Cu5FlNFL2SVIv4nzgQp5GJ3ZMFEPoa3PaPljviFIcDYYx9TbPr8V
zEdJC4Tt886Wu622/d5IatQxuXuz5K8oEgPOQVZ93O+OMRj0lBoqV7T4mCYssSP8
3PDgBC7ZDrDir5aubdC5LW5TEN9ISXbc4IW2N7iLPobb
-----END CERTIFICATE-----
Generated at Sun Mar 9 02:50:38 2025 by rpki-client