Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jfEOeJHIG0Jm8HdzGjL7a8L3nWY.roa
File: jfEOeJHIG0Jm8HdzGjL7a8L3nWY.roa (raw, json)
Hash identifier: q40R00s/M+MhsjEKU1I9hY3aZ9bd52DhQ/KdLQaj3RE=
Subject key identifier: 8D:F1:0E:78:91:C8:1B:42:66:F0:77:73:1A:32:FB:6B:C2:F7:9D:66
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01944B825222504C1F0D096DC153011E96A6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jfEOeJHIG0Jm8HdzGjL7a8L3nWY.roa
Signing time: Thu 09 Jan 2025 14:40:19 +0000
ROA not before: Thu 09 Jan 2025 14:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51500
IP address blocks: 31.148.50.0/23 maxlen: 24
93.171.154.0/24 maxlen: 24
95.47.56.0/24 maxlen: 24
95.47.196.0/23 maxlen: 24
146.158.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:82:52:22:50:4c:1f:0d:09:6d:c1:53:01:1e:96:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 9 14:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df10e7891c81b4266f077731a32fb6bc2f79d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:70:c9:2d:b0:7f:c0:07:b9:b2:33:41:56:
4b:3c:0c:e5:24:dc:c5:f7:32:fc:ad:33:27:6f:37:
49:a9:17:8c:af:fa:6c:8f:05:68:36:b1:7a:7a:1b:
b0:3f:62:d5:f1:e4:3a:38:a9:d2:7e:ae:88:ec:6b:
a5:89:4b:cf:03:a5:17:22:b2:71:dd:ad:5a:9a:af:
89:36:84:d9:e0:61:09:9e:ac:2a:e8:98:4c:c1:b1:
e6:c4:22:fe:32:b5:de:48:66:18:7d:00:91:eb:a4:
33:a8:1f:34:4a:8d:95:17:09:5e:f2:e6:39:c0:72:
4f:41:48:04:d9:d3:27:90:65:06:5e:dc:57:7d:a7:
e9:d7:bb:fd:ef:a9:04:f0:51:13:27:ee:ae:d8:49:
d3:4f:29:d2:e9:29:3d:c9:cc:89:d5:c2:64:c5:ea:
a2:df:94:14:43:b0:10:8c:29:e8:1c:19:7a:cb:94:
bc:3c:66:63:34:19:d9:9a:14:89:da:91:bd:af:7c:
02:0e:76:5c:ae:94:d7:54:92:c1:87:f2:c9:e5:20:
35:e3:a9:06:3c:1e:44:56:3b:d5:ec:a9:42:3c:25:
dd:eb:cb:e6:99:5f:02:a8:d6:a8:29:5b:70:b1:3c:
a2:9c:7c:48:58:77:f7:ce:5d:83:bb:68:05:8b:80:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:0E:78:91:C8:1B:42:66:F0:77:73:1A:32:FB:6B:C2:F7:9D:66
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jfEOeJHIG0Jm8HdzGjL7a8L3nWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.50.0/23
93.171.154.0/24
95.47.56.0/24
95.47.196.0/23
146.158.73.0/24
Signature Algorithm: sha256WithRSAEncryption
14:06:f9:f5:ea:70:ae:76:fd:05:0a:ed:40:69:d7:ba:0e:ba:
f3:2f:d1:b5:6a:79:99:d8:34:c0:6b:cc:af:80:3c:de:b2:a8:
03:44:54:3b:9b:8c:99:2f:50:25:51:18:df:1c:08:d4:ad:0a:
31:b2:bb:39:46:0d:e4:0e:41:4d:94:8d:c4:1e:9a:95:b1:19:
e9:1d:d1:4a:f7:39:f7:bd:f9:d4:9a:f2:c7:8a:99:7b:7c:bd:
e8:2d:ef:ae:d9:aa:71:66:f3:d0:7e:b7:4e:79:42:5c:c2:35:
ea:08:38:87:e4:01:1b:4a:b6:61:00:55:f7:b4:f7:ac:03:42:
66:0d:96:29:88:3e:44:0c:4f:4a:8f:a5:99:7e:2a:d5:a2:31:
ff:85:69:db:86:17:00:71:48:25:b8:e2:90:65:db:28:7d:ed:
f3:b6:06:94:66:d9:89:de:18:8d:ef:5c:16:0c:78:eb:7c:09:
76:da:a8:22:af:6f:8f:1d:b3:fc:fe:1b:ca:d0:4d:fe:bd:44:
86:86:08:b5:5e:2a:d0:a0:de:8a:46:ae:cf:b5:f6:d0:d9:7a:
aa:dc:8f:2b:20:0e:07:91:b5:83:b7:58:a0:2e:74:4e:24:c2:
a4:f4:72:d2:1b:16:cc:7f:2e:36:de:b9:e1:7c:32:1c:a5:3c:
59:52:69:2e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZRLglIiUEwfDQltwVMBHpamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTA5MTQ0MDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGYxMGU3ODkxYzgxYjQyNjZmMDc3NzMxYTMyZmI2YmMyZjc5ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pwyS2wf8AHubIzQVZLPAzlJNzF
9zL8rTMnbzdJqReMr/psjwVoNrF6ehuwP2LV8eQ6OKnSfq6I7GuliUvPA6UXIrJx
3a1amq+JNoTZ4GEJnqwq6JhMwbHmxCL+MrXeSGYYfQCR66QzqB80So2VFwle8uY5
wHJPQUgE2dMnkGUGXtxXfafp17v976kE8FETJ+6u2EnTTynS6Sk9ycyJ1cJkxeqi
35QUQ7AQjCnoHBl6y5S8PGZjNBnZmhSJ2pG9r3wCDnZcrpTXVJLBh/LJ5SA146kG
PB5EVjvV7KlCPCXd68vmmV8CqNaoKVtwsTyinHxIWHf3zl2Du2gFi4CXNQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFI3xDniRyBtCZvB3cxoy+2vC951mMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvamZFT2VKSElHMEptOEhkekdqTDdhOEwzbldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBH5QyAwQA
XauaAwQAXy84AwQBXy/EAwQAkp5JMA0GCSqGSIb3DQEBCwUAA4IBAQAUBvn16nCu
dv0FCu1Aade6DrrzL9G1anmZ2DTAa8yvgDzesqgDRFQ7m4yZL1AlURjfHAjUrQox
srs5Rg3kDkFNlI3EHpqVsRnpHdFK9zn3vfnUmvLHipl7fL3oLe+u2apxZvPQfrdO
eUJcwjXqCDiH5AEbSrZhAFX3tPesA0JmDZYpiD5EDE9Kj6WZfirVojH/hWnbhhcA
cUgluOKQZdsofe3ztgaUZtmJ3hiN71wWDHjrfAl22qgir2+PHbP8/hvK0E3+vUSG
hgi1XirQoN6KRq7PtfbQ2Xqq3I8rIA4HkbWDt1igLnROJMKk9HLSGxbMfy423rnh
fDIcpTxZUmku
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:51:38 2025 by rpki-client