Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/yXmhizI4Z65kZAreixYHF_jmabo.roa
File: yXmhizI4Z65kZAreixYHF_jmabo.roa (raw, json)
Hash identifier: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=
Subject key identifier: C9:79:A1:8B:32:38:67:AE:64:64:0A:DE:8B:16:07:17:F8:E6:69:BA
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 0194266BE18FC6A7765848130FA27C68879F
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/yXmhizI4Z65kZAreixYHF_jmabo.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.99.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e1:8f:c6:a7:76:58:48:13:0f:a2:7c:68:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c979a18b323867ae64640ade8b160717f8e669ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:ec:70:5b:37:d1:42:cb:b5:2e:b5:40:ca:
23:2f:cb:1b:e7:2f:f4:71:13:ba:a9:e8:bd:f1:c9:
a5:39:06:89:3c:ef:78:6f:e2:b5:42:fe:b8:fd:76:
e2:97:3a:1b:57:66:50:b0:2e:d7:19:d1:3e:e0:3a:
ef:b8:90:22:99:48:7e:95:1d:72:7f:b4:11:cd:74:
93:8c:9c:15:da:59:15:e1:ff:90:11:10:9c:d2:d9:
f7:b6:cd:d7:48:f4:4f:46:75:d3:d2:41:a4:75:66:
0b:9a:62:5c:ee:68:a2:c7:67:0c:1f:54:9c:2b:5c:
83:58:10:75:1e:dd:5b:7b:2d:f5:a1:9a:b9:04:8c:
b8:0e:21:0e:b8:c7:e3:83:1f:e2:a0:2e:5c:95:55:
3b:27:ed:3c:b3:c2:51:96:3d:a8:5e:f3:18:f9:df:
a4:78:2a:4a:fa:8f:45:d7:6a:ab:ae:e7:77:74:06:
45:c4:a9:85:60:41:76:55:78:bf:f2:25:59:bc:ea:
d7:d5:45:95:aa:c6:6e:71:65:87:dd:a8:ff:95:94:
22:ed:02:09:d6:e6:aa:f4:2d:bd:d2:b9:76:15:d7:
28:f7:bb:d8:e5:20:50:a6:a7:53:7c:e8:2c:59:6d:
20:1d:8c:22:f7:81:58:58:d6:64:04:20:88:a2:2e:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:A1:8B:32:38:67:AE:64:64:0A:DE:8B:16:07:17:F8:E6:69:BA
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/yXmhizI4Z65kZAreixYHF_jmabo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.96.0/23
Signature Algorithm: sha256WithRSAEncryption
54:ae:20:2a:e7:2c:3b:5e:b7:b8:7b:d3:39:9d:1f:53:4e:e0:
8b:0e:02:9a:bd:9d:64:ce:74:32:2e:8b:f2:ca:a6:5b:ee:5d:
d5:25:b4:33:e2:15:21:6b:26:c9:bb:93:e3:39:bb:2f:28:7d:
47:6a:44:d7:b8:a8:65:89:2b:4f:30:0f:93:c3:fb:e0:c6:5d:
b8:40:57:8e:01:aa:f3:24:f6:5d:0c:c4:52:28:9b:90:b8:ff:
32:f3:53:9a:6c:71:dc:fd:6c:d1:df:a2:24:de:da:c9:51:78:
10:32:5f:b7:69:8d:69:b2:17:d2:37:ae:ca:7e:38:c6:35:87:
90:a6:bd:94:cf:70:14:8a:7f:84:10:10:73:24:ea:2f:52:d8:
d8:9a:13:32:83:61:4c:94:48:94:4e:4d:cf:90:4d:8c:bf:5a:
f8:77:e7:42:95:07:1e:a3:93:b0:23:4c:a7:0d:2f:d7:9d:83:
da:1b:13:3c:f8:da:0f:75:1c:b1:74:18:65:8a:c2:92:24:2a:
72:d5:bc:1b:08:0f:dc:b7:f4:84:2c:e1:ec:73:c8:f6:d3:45:
f9:4d:6a:d4:4c:31:ae:60:09:69:76:5c:c7:a9:0d:13:6f:23:
71:66:3c:5c:9f:95:eb:94:8e:62:a3:4b:3c:e8:91:c4:9f:da:
56:d6:f7:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+GPxqd2WEgTD6J8aIefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjUwMTAyMDk0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTc5YTE4YjMyMzg2N2FlNjQ2NDBhZGU4YjE2MDcxN2Y4ZTY2OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WHscFs30ULLtS61QMojL8sb5y/0
cRO6qei98cmlOQaJPO94b+K1Qv64/XbilzobV2ZQsC7XGdE+4DrvuJAimUh+lR1y
f7QRzXSTjJwV2lkV4f+QERCc0tn3ts3XSPRPRnXT0kGkdWYLmmJc7miix2cMH1Sc
K1yDWBB1Ht1bey31oZq5BIy4DiEOuMfjgx/ioC5clVU7J+08s8JRlj2oXvMY+d+k
eCpK+o9F12qrrud3dAZFxKmFYEF2VXi/8iVZvOrX1UWVqsZucWWH3aj/lZQi7QIJ
1uaq9C290rl2Fdco97vY5SBQpqdTfOgsWW0gHYwi94FYWNZkBCCIoi6o5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMl5oYsyOGeuZGQK3osWBxf45mm6MB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEveVhtaGl6STRaNjVrWkFyZWl4WUhGX2ptYWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmNgMA0G
CSqGSIb3DQEBCwUAA4IBAQBUriAq5yw7Xre4e9M5nR9TTuCLDgKavZ1kznQyLovy
yqZb7l3VJbQz4hUhaybJu5PjObsvKH1HakTXuKhliStPMA+Tw/vgxl24QFeOAarz
JPZdDMRSKJuQuP8y81OabHHc/WzR36Ik3trJUXgQMl+3aY1pshfSN67KfjjGNYeQ
pr2Uz3AUin+EEBBzJOovUtjYmhMyg2FMlEiUTk3PkE2Mv1r4d+dClQceo5OwI0yn
DS/XnYPaGxM8+NoPdRyxdBhlisKSJCpy1bwbCA/ct/SELOHsc8j200X5TWrUTDGu
YAlpdlzHqQ0TbyNxZjxcn5XrlI5io0s86JHEn9pW1ve3
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:32:43 2025 by rpki-client