Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/jurUKjOgqPlKTPlS6z_hV6r5Fec.roa
File: jurUKjOgqPlKTPlS6z_hV6r5Fec.roa (raw, json)
Hash identifier: mK/2mFnvM6PHbw/5fnMHl0N0FSkbsHgl6zx5ITdWUqk=
Subject key identifier: 8E:EA:D4:2A:33:A0:A8:F9:4A:4C:F9:52:EB:3F:E1:57:AA:F9:15:E7
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3B3E8C809ACCEB21C3F7EE6C00D9
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/jurUKjOgqPlKTPlS6z_hV6r5Fec.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:3e:8c:80:9a:cc:eb:21:c3:f7:ee:6c:00:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eead42a33a0a8f94a4cf952eb3fe157aaf915e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:ba:78:02:fb:7d:a6:e1:79:b2:c7:99:36:
8b:31:e5:52:9b:39:33:a9:bd:bf:ca:c7:f2:e2:1a:
48:1c:38:b8:a6:11:0d:bb:a4:24:91:11:35:70:6b:
2b:b8:04:ea:b9:49:9f:90:39:ce:88:4c:15:ec:bc:
e8:97:61:de:84:f6:24:09:d6:26:e2:e8:e2:00:f1:
8f:0b:c2:36:8b:52:e1:69:a7:a3:7b:62:38:6c:19:
8a:fd:00:b2:00:dd:8f:95:ee:72:d6:b8:ad:cf:d3:
0c:3c:24:5a:86:08:03:0e:26:84:ca:d3:8f:e8:64:
92:88:76:e0:69:83:74:93:a0:88:08:fe:92:a3:1f:
cb:25:69:30:d9:71:17:4b:ce:2c:87:b9:d1:58:5d:
d1:73:6a:26:78:0f:dd:7e:f7:ba:f4:68:30:40:a6:
99:fd:ad:6a:1f:6b:8c:c6:8c:f3:9f:4d:cc:5e:f3:
d3:1b:73:de:a7:6d:4b:96:60:59:58:d6:a4:4e:43:
c8:6f:46:ad:7f:46:5b:df:9e:fb:b5:51:31:82:52:
96:50:b1:d8:d2:b0:d5:f9:b1:d8:2f:2b:5e:f4:e1:
30:d8:85:97:02:67:01:a3:d0:60:67:fa:a4:72:b0:
d6:85:2b:5b:6a:bd:20:a7:c3:00:68:87:49:2c:62:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:D4:2A:33:A0:A8:F9:4A:4C:F9:52:EB:3F:E1:57:AA:F9:15:E7
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/jurUKjOgqPlKTPlS6z_hV6r5Fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:24:f7:4a:16:79:c0:08:b4:58:cb:4a:ce:0f:58:6b:cd:dd:
2e:12:8b:b1:ac:34:72:fc:91:55:bb:2b:2d:85:22:ba:a7:a6:
0f:0a:bf:3c:dc:21:62:0e:1a:ce:37:44:d1:09:08:53:73:c5:
65:da:25:4c:34:e9:7e:38:d8:8c:d2:5d:69:ac:71:a7:d6:93:
ca:2f:42:18:0a:2d:12:af:3d:b8:6d:76:f3:6a:65:37:bb:ee:
a7:39:8b:75:e2:56:5a:6d:62:bb:a2:4e:a4:f6:d3:0c:e9:50:
c2:5c:28:a3:f0:42:6b:29:63:0f:3d:3a:f2:39:41:1e:27:ce:
04:2e:8e:83:a3:32:57:2d:9b:3f:f7:31:57:6e:f3:19:a1:10:
c9:e0:9f:12:54:22:f5:51:b5:c9:19:82:75:7c:c0:2c:a7:df:
c2:c5:e4:f7:ec:81:4a:94:79:b1:b0:90:79:c4:9a:78:30:69:
bd:fa:7c:d5:44:65:66:42:0e:ee:be:bf:29:89:0c:ec:ca:73:
ab:0f:64:24:71:53:5d:69:46:75:37:0b:86:6f:0c:ec:6f:4b:
02:ca:e2:f4:cc:51:b6:ff:28:02:f9:d2:08:18:15:05:08:1b:
80:20:e6:2f:b7:12:68:6a:ba:3d:74:6b:63:7a:07:8a:01:ae:
f7:db:22:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDs+jICazOshw/fubADZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWVhZDQyYTMzYTBhOGY5NGE0Y2Y5NTJlYjNmZTE1N2FhZjkxNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSK6eAL7fabhebLHmTaLMeVSmzkz
qb2/ysfy4hpIHDi4phENu6QkkRE1cGsruATquUmfkDnOiEwV7Lzol2HehPYkCdYm
4ujiAPGPC8I2i1Lhaaeje2I4bBmK/QCyAN2Ple5y1ritz9MMPCRahggDDiaEytOP
6GSSiHbgaYN0k6CICP6Sox/LJWkw2XEXS84sh7nRWF3Rc2omeA/dfve69GgwQKaZ
/a1qH2uMxozzn03MXvPTG3Pep21LlmBZWNakTkPIb0atf0Zb3577tVExglKWULHY
0rDV+bHYLyte9OEw2IWXAmcBo9BgZ/qkcrDWhStbar0gp8MAaIdJLGK8wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7q1CozoKj5Skz5Uus/4Veq+RXnMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvanVyVUtqT2dxUGxLVFBsUzZ6X2hWNnI1RmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoqMA0G
CSqGSIb3DQEBCwUAA4IBAQBvJPdKFnnACLRYy0rOD1hrzd0uEouxrDRy/JFVuyst
hSK6p6YPCr883CFiDhrON0TRCQhTc8Vl2iVMNOl+ONiM0l1prHGn1pPKL0IYCi0S
rz24bXbzamU3u+6nOYt14lZabWK7ok6k9tMM6VDCXCij8EJrKWMPPTryOUEeJ84E
Lo6DozJXLZs/9zFXbvMZoRDJ4J8SVCL1UbXJGYJ1fMAsp9/CxeT37IFKlHmxsJB5
xJp4MGm9+nzVRGVmQg7uvr8piQzsynOrD2QkcVNdaUZ1NwuGbwzsb0sCyuL0zFG2
/ygC+dIIGBUFCBuAIOYvtxJoaro9dGtjegeKAa732yJZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:31 2025 by rpki-client