Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa
File: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (raw, json)
Hash identifier: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=
Subject key identifier: 20:97:F1:CE:CD:97:E1:C9:DB:57:CA:0F:09:13:18:37:6B:73:4E:D9
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F7D805B95894222B25973F18588F5
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 82.150.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7d:80:5b:95:89:42:22:b2:59:73:f1:85:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2097f1cecd97e1c9db57ca0f091318376b734ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:2d:18:6f:54:2c:71:be:2a:c3:93:6b:d8:
e4:31:ba:28:50:07:ac:06:3a:05:bd:af:34:5d:a1:
f2:98:28:a1:7f:de:db:93:20:f4:2d:37:0b:1b:7f:
3e:5a:f2:79:88:98:14:25:24:e5:3b:dd:52:ad:9c:
95:8f:fb:de:f3:95:1e:76:b8:79:59:d1:b8:17:65:
2d:44:ef:ae:cc:6c:60:ac:9d:8d:88:03:32:9a:1e:
c2:ce:ab:7e:a9:ab:f7:03:e8:2b:f7:b0:1e:3c:ea:
af:88:ae:47:4c:23:d2:37:f3:30:0d:bf:c4:b5:aa:
e4:d6:73:c1:5c:fc:9c:1b:2d:ba:d9:cd:d8:31:08:
9e:9e:57:f3:24:0c:e9:19:97:3f:07:5e:bd:b3:18:
fc:bf:1e:77:8b:25:4c:6c:04:86:32:12:2d:1b:7d:
4e:58:10:a8:a6:81:7b:2a:f0:86:24:4b:16:43:a6:
a8:54:24:4c:89:0d:04:e3:e7:24:ea:63:25:f9:8b:
1e:c8:ba:3b:8a:7b:52:3d:fd:b1:84:bf:65:11:5f:
3f:f8:aa:06:31:7e:ae:40:6f:55:f8:4b:4f:42:e6:
72:fa:d1:36:dc:33:d8:3f:e8:4a:4a:d0:3a:b2:34:
24:5d:bc:72:9a:9a:b1:c9:09:44:7f:52:c9:44:21:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:F1:CE:CD:97:E1:C9:DB:57:CA:0F:09:13:18:37:6B:73:4E:D9
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:81:62:90:b8:d1:21:a7:38:95:38:dc:62:fb:0d:cb:22:
8e:eb:62:64:57:78:20:3a:ef:08:f7:59:8e:6a:91:8b:83:f1:
47:92:3a:91:3d:9b:5d:99:f9:8d:8a:08:d4:80:f1:e7:87:29:
a2:a2:ce:3e:0a:45:7b:67:e3:6c:a3:3d:a9:ae:75:3e:2a:8a:
43:7f:bf:19:c9:c8:dd:15:03:3a:6f:93:ae:35:5c:8d:fe:60:
c0:ec:d7:9b:32:f2:73:e6:d8:08:85:15:1a:c8:42:d1:36:8e:
68:39:26:88:63:3b:43:59:77:74:ab:20:c8:62:7e:63:a6:b1:
f0:9f:06:ce:0b:36:ec:a1:30:b3:b6:98:d6:90:dc:a7:17:b3:
77:29:52:dd:17:f7:a7:b2:30:08:c3:42:52:a2:30:dc:fd:69:
5f:34:e6:60:37:5b:2d:ef:17:e8:7a:a0:3c:13:2b:6e:a5:fa:
b7:8f:bb:2f:98:97:2c:c5:9b:0e:6e:2c:91:87:71:70:c5:c3:
5b:6c:cf:7a:7e:11:3e:85:c9:93:07:b2:fd:90:be:7d:7e:32:
79:6b:79:06:a8:b8:6a:ac:9e:47:6b:45:e9:93:9b:05:36:36:
63:9b:f4:93:f8:9b:58:70:9d:48:78:e1:3f:68:00:d9:8d:04:
a6:47:c4:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj32AW5WJQiKyWXPxhYj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwMTAyMDU0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDk3ZjFjZWNkOTdlMWM5ZGI1N2NhMGYwOTEzMTgzNzZiNzM0ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudotGG9ULHG+KsOTa9jkMbooUAes
BjoFva80XaHymCihf97bkyD0LTcLG38+WvJ5iJgUJSTlO91SrZyVj/ve85Uedrh5
WdG4F2UtRO+uzGxgrJ2NiAMymh7Czqt+qav3A+gr97AePOqviK5HTCPSN/MwDb/E
tark1nPBXPycGy262c3YMQienlfzJAzpGZc/B169sxj8vx53iyVMbASGMhItG31O
WBCopoF7KvCGJEsWQ6aoVCRMiQ0E4+ck6mMl+YseyLo7intSPf2xhL9lEV8/+KoG
MX6uQG9V+EtPQuZy+tE23DPYP+hKStA6sjQkXbxympqxyQlEf1LJRCHrVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCX8c7Nl+HJ21fKDwkTGDdrc07ZMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvSUpmeHpzMlg0Y25iVjhvUENSTVlOMnR6VHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaJMA0G
CSqGSIb3DQEBCwUAA4IBAQADYYFikLjRIac4lTjcYvsNyyKO62JkV3ggOu8I91mO
apGLg/FHkjqRPZtdmfmNigjUgPHnhymios4+CkV7Z+Nsoz2prnU+KopDf78Zycjd
FQM6b5OuNVyN/mDA7NebMvJz5tgIhRUayELRNo5oOSaIYztDWXd0qyDIYn5jprHw
nwbOCzbsoTCztpjWkNynF7N3KVLdF/ensjAIw0JSojDc/WlfNOZgN1st7xfoeqA8
Eytupfq3j7svmJcsxZsObiyRh3FwxcNbbM96fhE+hcmTB7L9kL59fjJ5a3kGqLhq
rJ5Ha0Xpk5sFNjZjm/ST+JtYcJ1IeOE/aADZjQSmR8S/
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:31:06 2025 by rpki-client