Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/j_X8tJ2h9OHGJHosgdoOoXcoQic.roa
File: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (raw, json)
Hash identifier: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=
Subject key identifier: 8F:F5:FC:B4:9D:A1:F4:E1:C6:24:7A:2C:81:DA:0E:A1:77:28:42:27
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 01947AEEEE5202C7104BE41B1DC0112C88D2
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/j_X8tJ2h9OHGJHosgdoOoXcoQic.roa
Signing time: Sat 18 Jan 2025 19:41:06 +0000
ROA not before: Sat 18 Jan 2025 19:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215792
IP address blocks: 185.37.239.0/24 maxlen: 24
185.92.204.0/22 maxlen: 22
2a13:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:ee:ee:52:02:c7:10:4b:e4:1b:1d:c0:11:2c:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Jan 18 19:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff5fcb49da1f4e1c6247a2c81da0ea177284227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:ad:e2:fc:6f:40:82:e5:ea:a7:ef:96:3e:
bc:a6:15:dd:b9:8a:86:95:fa:e7:7e:0a:b4:75:7e:
11:ce:45:04:51:2f:ca:6c:e2:85:3e:4d:e8:55:cf:
4d:c6:e6:7d:a3:d1:54:ef:b8:3e:e2:46:88:6d:ff:
b3:e7:b5:f1:4c:bb:a0:32:b6:05:1d:73:87:f5:13:
a6:8b:93:70:ec:9f:ba:31:69:00:a7:0e:0d:b8:40:
ce:d5:78:39:9d:3d:40:40:92:34:04:a8:e2:bd:7e:
58:ab:5c:b7:67:29:fc:ff:31:e8:b2:6e:34:e0:68:
72:2c:b5:2b:55:30:96:7f:79:5e:2d:59:d5:93:41:
d5:13:2f:7d:d4:7d:68:2d:7b:ce:79:ce:42:a1:99:
e9:be:4f:1c:4f:cb:02:4f:56:6e:5d:4f:c5:be:e9:
24:0c:89:88:28:9a:4d:89:ea:bf:e2:e1:fb:14:55:
44:66:19:db:31:ce:f0:01:f8:1e:07:20:68:b0:95:
c1:7f:8c:6e:85:ac:de:94:d9:f7:a2:42:58:49:ac:
a0:0c:c3:25:5f:4f:39:e0:47:33:83:86:b0:ab:07:
a0:54:54:f0:e9:94:b4:b6:8f:94:2b:47:48:78:a0:
53:fe:7a:5b:3d:6f:de:ce:36:e2:20:97:b1:d6:6b:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:FC:B4:9D:A1:F4:E1:C6:24:7A:2C:81:DA:0E:A1:77:28:42:27
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/j_X8tJ2h9OHGJHosgdoOoXcoQic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.239.0/24
185.92.204.0/22
IPv6:
2a13:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:9d:72:78:2e:8f:e7:7b:ac:07:2d:92:42:1f:6b:eb:0c:9a:
c1:1d:47:55:e4:9f:b9:f3:84:5e:a5:d6:32:80:57:eb:b3:93:
50:2e:eb:d5:ca:bb:59:02:ff:f3:a8:4f:d7:81:57:a3:53:11:
d6:a7:d9:51:19:9d:36:44:ae:4e:ac:a6:3a:87:d0:85:35:6f:
eb:3a:86:a5:06:46:5f:32:60:20:58:21:4d:f2:6e:28:57:8c:
6d:9a:c1:43:20:fb:84:f7:33:72:67:22:8a:cc:ec:41:d7:a9:
8a:bf:1d:45:f8:86:cd:80:69:2f:d6:29:61:99:b1:3d:c7:aa:
b3:6f:15:dd:4b:4c:49:fe:37:6a:e0:05:07:52:71:48:95:f7:
a2:65:ce:80:5a:1c:2f:d9:b3:0c:08:7b:23:99:98:6b:40:3f:
70:d3:8c:f8:73:40:62:84:cd:95:aa:4a:a0:80:7c:c7:b6:bf:
5f:02:ed:99:d6:73:b3:30:69:f0:9c:d4:bd:eb:87:da:4b:9e:
4e:60:2e:fe:c1:45:58:16:f8:cc:e8:f7:0d:91:be:b3:ae:65:
3b:d6:e3:71:06:46:36:b7:21:dd:23:c8:83:b1:c6:44:6b:70:
2a:af:e6:34:19:1e:60:76:83:3c:d3:47:71:3f:f2:79:27:77:
38:70:e6:0b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZR67u5SAscQS+QbHcARLIjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjUwMTE4MTk0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY1ZmNiNDlkYTFmNGUxYzYyNDdhMmM4MWRhMGVhMTc3Mjg0MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Wt4vxvQILl6qfvlj68phXduYqG
lfrnfgq0dX4RzkUEUS/KbOKFPk3oVc9NxuZ9o9FU77g+4kaIbf+z57XxTLugMrYF
HXOH9ROmi5Nw7J+6MWkApw4NuEDO1Xg5nT1AQJI0BKjivX5Yq1y3Zyn8/zHosm40
4GhyLLUrVTCWf3leLVnVk0HVEy991H1oLXvOec5CoZnpvk8cT8sCT1ZuXU/Fvukk
DImIKJpNieq/4uH7FFVEZhnbMc7wAfgeByBosJXBf4xuhazelNn3okJYSaygDMMl
X0854Eczg4awqwegVFTw6ZS0to+UK0dIeKBT/npbPW/ezjbiIJex1muTkwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI/1/LSdofThxiR6LIHaDqF3KEInMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEval9YOHRKMmg5T0hHSkhvc2dkb09vWGNvUWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuSXvAwQC
uVzMMA0EAgACMAcDBQMqE6PAMA0GCSqGSIb3DQEBCwUAA4IBAQAEnXJ4Lo/ne6wH
LZJCH2vrDJrBHUdV5J+584RepdYygFfrs5NQLuvVyrtZAv/zqE/XgVejUxHWp9lR
GZ02RK5OrKY6h9CFNW/rOoalBkZfMmAgWCFN8m4oV4xtmsFDIPuE9zNyZyKKzOxB
16mKvx1F+IbNgGkv1ilhmbE9x6qzbxXdS0xJ/jdq4AUHUnFIlfeiZc6AWhwv2bMM
CHsjmZhrQD9w04z4c0BihM2VqkqggHzHtr9fAu2Z1nOzMGnwnNS964faS55OYC7+
wUVYFvjM6PcNkb6zrmU71uNxBkY2tyHdI8iDscZEa3Aqr+Y0GR5gdoM800dxP/J5
J3c4cOYL
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:14 2025 by rpki-client