Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/SJe0yiKrFFgre-LwlA373na16-M.roa
File: SJe0yiKrFFgre-LwlA373na16-M.roa (raw, json)
Hash identifier: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=
Subject key identifier: 48:97:B4:CA:22:AB:14:58:2B:7B:E2:F0:94:0D:FB:DE:76:B5:EB:E3
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 0194274816E58AC87015C138EFF5AF5E26B6
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/SJe0yiKrFFgre-LwlA373na16-M.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 152.89.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:16:e5:8a:c8:70:15:c1:38:ef:f5:af:5e:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4897b4ca22ab14582b7be2f0940dfbde76b5ebe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:b2:5f:58:30:f8:6f:03:2d:26:86:2c:db:
84:d0:96:35:87:f1:12:06:b8:c0:7f:66:01:33:3e:
1d:0a:57:56:a9:dd:ee:6f:24:24:29:51:1a:cc:c6:
0b:92:cf:c1:5f:0c:37:07:e1:2f:b7:bb:59:51:d2:
7f:b3:08:74:d3:f6:83:f9:98:c8:23:3e:32:c6:92:
b9:e3:54:95:df:92:a5:94:34:9d:9b:da:b3:12:7c:
63:43:d9:4f:ba:b7:3a:02:6c:af:81:c9:b0:f2:94:
f7:bd:a3:cf:d0:41:4f:95:d4:5c:c9:b6:c4:0f:11:
50:50:c3:fe:24:b6:8d:cb:c9:09:cd:b4:5a:9a:c9:
bd:fc:d9:2e:96:a9:3f:24:d8:55:43:5b:3b:46:f6:
dd:a2:42:b0:6a:98:c2:40:60:1f:be:cf:0e:35:f7:
52:56:24:bb:dd:16:04:04:eb:d4:4c:94:79:90:03:
09:14:64:59:c9:d7:4d:85:3b:7d:fa:d0:3c:39:ed:
a6:50:48:f6:a9:e9:9a:c2:7d:74:d4:25:65:7b:66:
04:f4:8e:80:2e:8a:9f:4a:bb:1a:e2:b7:e9:02:11:
04:90:9e:2a:4a:80:e4:b2:17:18:a0:93:a2:fd:49:
5c:b1:32:e7:77:a4:7d:80:93:ca:94:81:0e:5e:6e:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:97:B4:CA:22:AB:14:58:2B:7B:E2:F0:94:0D:FB:DE:76:B5:EB:E3
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/SJe0yiKrFFgre-LwlA373na16-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.68.0/22
Signature Algorithm: sha256WithRSAEncryption
42:2f:8e:47:95:e2:63:35:c6:ea:43:78:2d:ff:c6:51:fc:97:
71:fb:4a:8e:63:33:4b:df:34:40:45:98:73:6b:d4:c0:44:1d:
4a:9e:33:7e:d2:68:d6:40:44:de:c6:50:7b:63:90:f0:03:fc:
2d:6a:ff:5e:32:a5:be:bc:24:00:2a:d5:07:fa:1c:75:13:9d:
c4:1d:bb:56:54:97:14:76:15:8a:16:7e:6e:59:82:50:62:7a:
df:dc:34:3b:b0:48:ae:d0:a2:90:8f:38:6a:11:ca:c2:83:01:
e8:cc:ce:59:c8:42:53:5e:ec:ba:a2:59:f1:c2:ab:4f:e8:48:
58:2e:cc:98:a1:1d:67:e4:fe:8d:d8:7d:8e:54:9f:45:6a:2f:
ce:8e:14:aa:d1:a8:13:cf:c2:64:02:d9:e6:03:7d:c9:97:f2:
3e:57:61:86:d5:4b:e6:43:48:84:dc:08:9f:bc:32:05:d9:3c:
d1:fc:52:c1:bc:5e:67:03:c9:2e:e2:ad:eb:eb:a6:b5:4d:de:
ac:da:45:60:18:59:b0:76:43:46:52:ac:f4:75:9c:0b:19:11:
5a:57:cb:44:17:d5:27:f1:0f:11:83:72:7b:da:e8:4f:8f:4f:
51:05:a1:4a:d9:9d:c2:92:1a:10:55:de:44:f3:0e:12:b9:c0:
96:e9:4d:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSBblishwFcE47/WvXia2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjUwMTAyMTM1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODk3YjRjYTIyYWIxNDU4MmI3YmUyZjA5NDBkZmJkZTc2YjVlYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YOyX1gw+G8DLSaGLNuE0JY1h/ES
BrjAf2YBMz4dCldWqd3ubyQkKVEazMYLks/BXww3B+Evt7tZUdJ/swh00/aD+ZjI
Iz4yxpK541SV35KllDSdm9qzEnxjQ9lPurc6Amyvgcmw8pT3vaPP0EFPldRcybbE
DxFQUMP+JLaNy8kJzbRamsm9/Nkulqk/JNhVQ1s7RvbdokKwapjCQGAfvs8ONfdS
ViS73RYEBOvUTJR5kAMJFGRZyddNhTt9+tA8Oe2mUEj2qemawn101CVle2YE9I6A
LoqfSrsa4rfpAhEEkJ4qSoDkshcYoJOi/UlcsTLnd6R9gJPKlIEOXm7rPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiXtMoiqxRYK3vi8JQN+952tevjMB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvU0plMHlpS3JGRmdyZS1Md2xBMzczbmExNi1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFlEMA0G
CSqGSIb3DQEBCwUAA4IBAQBCL45HleJjNcbqQ3gt/8ZR/Jdx+0qOYzNL3zRARZhz
a9TARB1KnjN+0mjWQETexlB7Y5DwA/wtav9eMqW+vCQAKtUH+hx1E53EHbtWVJcU
dhWKFn5uWYJQYnrf3DQ7sEiu0KKQjzhqEcrCgwHozM5ZyEJTXuy6olnxwqtP6EhY
LsyYoR1n5P6N2H2OVJ9Fai/OjhSq0agTz8JkAtnmA33Jl/I+V2GG1UvmQ0iE3Aif
vDIF2TzR/FLBvF5nA8ku4q3r66a1Td6s2kVgGFmwdkNGUqz0dZwLGRFaV8tEF9Un
8Q8Rg3J72uhPj09RBaFK2Z3CkhoQVd5E8w4SucCW6U3F
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:06 2025 by rpki-client