Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J50iIKTdnsi-2gQTU8HI_BNUhFE.roa
File: J50iIKTdnsi-2gQTU8HI_BNUhFE.roa (raw, json)
Hash identifier: vY2dRL0A23EqoSVFCThkEkIZSvNFMvllsvIiBddBE4E=
Subject key identifier: 27:9D:22:20:A4:DD:9E:C8:BE:DA:04:13:53:C1:C8:FC:13:54:84:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196E194DB19891245DCCEA281BE1D5F9127
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J50iIKTdnsi-2gQTU8HI_BNUhFE.roa
Signing time: Sun 18 May 2025 04:09:11 +0000
ROA not before: Sun 18 May 2025 04:09:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:94:db:19:89:12:45:dc:ce:a2:81:be:1d:5f:91:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 18 04:09:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279d2220a4dd9ec8beda041353c1c8fc13548451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:35:d4:7d:97:df:fe:11:f3:30:bb:89:aa:
f0:d3:7a:43:77:bb:4b:25:28:4d:85:c5:7e:05:79:
14:4f:ba:60:56:cf:3f:5f:37:6c:c6:8b:49:c1:3f:
a2:f5:a4:ab:a1:7d:c3:82:31:77:87:33:ed:43:c7:
da:ff:ec:e6:ec:81:bd:6f:72:6e:7c:9c:a8:fd:7b:
8d:c9:6a:f2:61:55:b7:bc:b2:c7:34:f9:a4:ae:a6:
22:cf:62:4b:36:3c:17:9a:fe:77:1e:3c:55:f8:31:
5a:bb:91:73:95:7f:16:b1:bd:98:7c:87:e0:96:0f:
cd:97:95:a6:0a:c7:d4:90:0a:c8:49:09:14:8b:85:
f2:6b:28:20:6d:97:b3:c2:bb:dc:b3:79:c9:9c:e5:
a6:9b:01:12:c2:7a:23:a7:c5:18:8b:57:d9:d9:ce:
cf:cd:92:86:b1:a9:33:03:78:e7:7d:a0:ca:63:7a:
c6:b2:70:dc:bf:ad:f3:1b:65:30:80:c9:3c:ad:be:
6b:43:d3:e2:2c:62:57:de:08:92:b2:47:60:11:4a:
49:5f:3f:4b:17:3b:bd:f8:c9:c3:48:9b:24:05:8a:
c8:47:07:d9:75:76:e7:b3:8c:4e:67:39:59:bb:c3:
bc:30:fc:1a:99:52:38:6c:d2:61:fa:4f:d4:03:f3:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:22:20:A4:DD:9E:C8:BE:DA:04:13:53:C1:C8:FC:13:54:84:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J50iIKTdnsi-2gQTU8HI_BNUhFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
29:79:56:1c:59:71:6c:57:24:39:3c:70:0f:b6:10:9a:50:6e:
21:66:c2:f3:88:e2:9c:7d:72:9f:03:1a:f7:cf:d5:1f:41:80:
ec:a2:05:01:ac:39:37:9e:03:4f:9b:72:f4:bf:34:ae:0b:ec:
1c:b7:bc:2c:70:4b:de:3a:95:45:e0:f3:c1:7d:ab:17:8b:06:
5b:f6:1a:dc:e2:75:9a:bb:4d:f0:65:30:7d:d0:ff:ac:9d:79:
12:ee:d3:2f:38:2a:8e:79:59:5d:20:3e:8d:48:14:04:ed:14:
b3:aa:21:70:62:ea:74:9a:20:a8:17:ea:2d:90:bf:aa:ed:f1:
95:2e:db:78:7e:ef:64:0f:46:5c:0c:d1:8b:3b:05:66:74:52:
0d:5c:41:4a:cf:3e:10:e3:8a:d8:78:63:fa:04:7a:0f:d1:d8:
4d:c6:8d:40:52:b8:79:10:2a:7b:b9:78:37:79:ac:a7:03:53:
1c:fa:bf:ae:e1:8c:3e:ae:cf:ad:d8:42:cf:ec:c6:ee:0f:5c:
8c:f9:de:e5:59:10:f0:42:51:79:e3:49:0f:7c:67:7b:04:3a:
44:08:8a:46:15:dc:2f:c7:b0:b5:73:d5:fe:b0:e4:1a:a9:83:
e0:d4:ee:54:b2:eb:af:32:45:bd:eb:40:c8:8c:5e:32:f1:58:
30:a8:d8:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbhlNsZiRJF3M6igb4dX5EnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNTE4MDQwOTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzlkMjIyMGE0ZGQ5ZWM4YmVkYTA0MTM1M2MxYzhmYzEzNTQ4NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwk11H2X3/4R8zC7iarw03pDd7tL
JShNhcV+BXkUT7pgVs8/XzdsxotJwT+i9aSroX3DgjF3hzPtQ8fa/+zm7IG9b3Ju
fJyo/XuNyWryYVW3vLLHNPmkrqYiz2JLNjwXmv53HjxV+DFau5FzlX8Wsb2YfIfg
lg/Nl5WmCsfUkArISQkUi4XyayggbZezwrvcs3nJnOWmmwESwnojp8UYi1fZ2c7P
zZKGsakzA3jnfaDKY3rGsnDcv63zG2UwgMk8rb5rQ9PiLGJX3giSskdgEUpJXz9L
Fzu9+MnDSJskBYrIRwfZdXbns4xOZzlZu8O8MPwamVI4bNJh+k/UA/PUbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCedIiCk3Z7IvtoEE1PByPwTVIRRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSjUwaUlLVGRuc2ktMmdRVFU4SElfQk5VaEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNmMA0G
CSqGSIb3DQEBCwUAA4IBAQApeVYcWXFsVyQ5PHAPthCaUG4hZsLziOKcfXKfAxr3
z9UfQYDsogUBrDk3ngNPm3L0vzSuC+wct7wscEveOpVF4PPBfasXiwZb9hrc4nWa
u03wZTB90P+snXkS7tMvOCqOeVldID6NSBQE7RSzqiFwYup0miCoF+otkL+q7fGV
Ltt4fu9kD0ZcDNGLOwVmdFINXEFKzz4Q44rYeGP6BHoP0dhNxo1AUrh5ECp7uXg3
eaynA1Mc+r+u4Yw+rs+t2ELP7MbuD1yM+d7lWRDwQlF540kPfGd7BDpECIpGFdwv
x7C1c9X+sOQaqYPg1O5UsuuvMkW960DIjF4y8VgwqNh5
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:20:38 2025 by rpki-client