Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rJVqQ0LvRc5OTIXLhdxUESJqAA0.roa
File: rJVqQ0LvRc5OTIXLhdxUESJqAA0.roa (raw, json)
Hash identifier: Vp6I1jXURLTAVlgEpNZtZGEgUcHNs/Xk+Xza9skUTmM=
Subject key identifier: AC:95:6A:43:42:EF:45:CE:4E:4C:85:CB:85:DC:54:11:22:6A:00:0D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD21767B46D671A1F80BE9D68601C9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rJVqQ0LvRc5OTIXLhdxUESJqAA0.roa
Signing time: Thu 02 Jan 2025 07:48:53 +0000
ROA not before: Thu 02 Jan 2025 07:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 104.249.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:21:76:7b:46:d6:71:a1:f8:0b:e9:d6:86:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac956a4342ef45ce4e4c85cb85dc5411226a000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:ed:c1:7a:fa:55:ca:78:80:dd:15:4e:20:
dc:2c:09:e0:02:27:50:38:35:cd:bb:64:e5:24:6d:
fe:c0:8b:09:01:9b:08:0d:2a:d6:96:16:e8:09:de:
aa:1c:48:2e:cf:1e:6c:be:89:c7:41:7f:e3:86:f3:
7b:e4:d3:45:98:e6:c9:b0:df:88:56:9e:24:6c:15:
29:dc:50:c1:cc:1f:8f:22:81:16:b2:eb:08:6d:6d:
5b:64:eb:b4:d9:ed:25:ca:b7:73:b5:5a:f9:a3:85:
ad:98:03:a3:1a:23:ea:af:c4:6d:e5:7d:e2:0f:79:
f5:f0:94:05:a1:0b:56:9e:8d:2c:fe:63:88:18:fa:
61:dc:56:b3:46:c3:58:50:60:49:d6:9a:73:da:27:
a4:b1:2a:82:eb:5b:34:47:a8:e5:60:af:a6:e3:90:
72:4e:6b:c8:e3:fe:39:44:8a:2d:ed:0e:8f:a9:7e:
50:c6:69:23:73:19:f1:2a:59:7d:fd:43:8b:7c:b4:
24:8b:53:82:20:d1:73:86:56:4c:a4:17:04:a2:d3:
41:5f:75:0d:fd:78:ea:22:d3:d3:64:83:3a:f5:66:
71:3e:9c:85:b5:60:35:3d:f0:ed:1c:70:31:28:3b:
5c:9b:d8:df:d0:e2:9d:e5:fa:42:29:9c:86:10:da:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:6A:43:42:EF:45:CE:4E:4C:85:CB:85:DC:54:11:22:6A:00:0D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/rJVqQ0LvRc5OTIXLhdxUESJqAA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:50:0c:36:8d:a2:7e:c7:12:a9:e0:d7:3f:0d:e4:e1:d2:ff:
1a:77:b7:51:5f:31:fd:e4:dc:f3:20:01:42:df:6c:d6:1c:fc:
d8:8c:3f:fd:32:56:6b:a7:cd:f3:d3:aa:62:e6:00:f8:39:0b:
8b:9d:92:0b:bd:f4:64:5c:c7:0c:fc:58:c5:85:e8:01:68:64:
7f:9c:da:90:4c:9e:64:ac:8f:64:3a:d2:0d:02:11:24:ea:b9:
a4:2f:36:ac:40:a8:0d:f4:20:bc:63:03:f0:15:a2:af:bc:b1:
ac:93:cd:53:fd:55:48:5b:8b:14:54:f4:32:95:39:f1:4a:c8:
f6:9b:ef:1b:08:7f:9a:b9:cd:20:48:61:6d:d5:3a:a8:46:49:
7f:aa:95:2c:9d:2a:68:38:9e:fe:9f:9e:56:d8:26:4e:11:53:
b4:4c:d7:f5:bb:97:b4:aa:36:35:40:fb:65:f4:9b:ea:a7:91:
fd:70:d6:c5:c7:47:51:1c:b8:de:a0:9c:1c:10:4c:9a:47:07:
04:50:c4:33:17:6e:ce:57:02:1f:5d:f5:e7:56:dc:be:5d:6c:
f7:03:34:a0:9c:d4:f5:49:64:09:d3:25:b7:4d:e6:a8:d2:f0:
22:b3:49:2e:f8:21:82:fa:2e:35:10:84:28:0d:71:de:a8:37:
c8:a7:1c:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/SF2e0bWcaH4C+nWhgHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk1NmE0MzQyZWY0NWNlNGU0Yzg1Y2I4NWRjNTQxMTIyNmEwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mjtwXr6Vcp4gN0VTiDcLAngAidQ
ODXNu2TlJG3+wIsJAZsIDSrWlhboCd6qHEguzx5svonHQX/jhvN75NNFmObJsN+I
Vp4kbBUp3FDBzB+PIoEWsusIbW1bZOu02e0lyrdztVr5o4WtmAOjGiPqr8Rt5X3i
D3n18JQFoQtWno0s/mOIGPph3FazRsNYUGBJ1ppz2ieksSqC61s0R6jlYK+m45By
TmvI4/45RIot7Q6PqX5QxmkjcxnxKll9/UOLfLQki1OCINFzhlZMpBcEotNBX3UN
/XjqItPTZIM69WZxPpyFtWA1PfDtHHAxKDtcm9jf0OKd5fpCKZyGENrRpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyVakNC70XOTkyFy4XcVBEiagANMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvckpWcVEwTHZSYzVPVElYTGhkeFVFU0pxQUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPkoMA0G
CSqGSIb3DQEBCwUAA4IBAQB7UAw2jaJ+xxKp4Nc/DeTh0v8ad7dRXzH95NzzIAFC
32zWHPzYjD/9MlZrp83z06pi5gD4OQuLnZILvfRkXMcM/FjFhegBaGR/nNqQTJ5k
rI9kOtINAhEk6rmkLzasQKgN9CC8YwPwFaKvvLGsk81T/VVIW4sUVPQylTnxSsj2
m+8bCH+auc0gSGFt1TqoRkl/qpUsnSpoOJ7+n55W2CZOEVO0TNf1u5e0qjY1QPtl
9Jvqp5H9cNbFx0dRHLjeoJwcEEyaRwcEUMQzF27OVwIfXfXnVty+XWz3AzSgnNT1
SWQJ0yW3Teao0vAis0ku+CGC+i41EIQoDXHeqDfIpxw+
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:56 2025 by rpki-client