Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/9yUm_bz_RXGZH-mtJkHR8akzm_k.roa
File: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (raw, json)
Hash identifier: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=
Subject key identifier: F7:25:26:FD:BC:FF:45:71:99:1F:E9:AD:26:41:D1:F1:A9:33:9B:F9
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61EC2DFFD52E62B5209E1867D267C
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/9yUm_bz_RXGZH-mtJkHR8akzm_k.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209514
IP address blocks: 147.234.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1e:c2:df:fd:52:e6:2b:52:09:e1:86:7d:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72526fdbcff4571991fe9ad2641d1f1a9339bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:e8:06:2e:79:5d:5f:7e:6d:b2:e3:d6:8d:
1b:0c:42:7e:b6:cf:00:0c:f4:b0:b1:e6:14:02:34:
1c:0a:44:65:aa:22:e4:5e:89:4b:b4:0e:2f:6f:d6:
d1:11:34:31:c6:e4:ec:d0:b5:bc:f2:d6:3e:2c:7d:
24:08:a9:ec:5d:e3:07:58:ea:ae:36:dd:d7:00:e2:
0f:23:00:42:88:a3:4c:08:df:be:c0:d3:a1:4a:99:
8d:6c:64:6b:c5:75:b4:40:77:7f:87:00:ec:c4:47:
ab:d9:a5:6d:da:0e:68:82:95:17:ca:79:86:fa:2c:
6a:bc:2b:eb:51:5d:e4:9f:50:1f:8d:aa:a8:b7:0d:
ea:86:4f:31:cf:f4:5b:07:6f:53:7f:05:f6:f3:23:
7a:25:9f:7c:3b:f2:2a:c6:b3:57:89:b0:c0:88:3a:
87:0e:60:dd:44:1f:c1:23:c1:91:4c:08:a8:17:42:
28:90:b6:14:05:12:07:f6:2b:56:e6:72:21:9f:29:
e9:27:c9:6e:03:91:dc:8d:50:17:40:91:ad:67:3f:
cf:3c:e6:89:cb:39:b3:8b:c5:92:f6:d1:9b:a8:95:
10:b5:46:a0:33:47:27:d3:f0:6c:32:e5:55:59:22:
24:d1:51:e2:55:62:71:0d:98:1d:3d:04:9a:53:4d:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:26:FD:BC:FF:45:71:99:1F:E9:AD:26:41:D1:F1:A9:33:9B:F9
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/9yUm_bz_RXGZH-mtJkHR8akzm_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c9:f3:c4:21:2e:ab:74:ce:d3:42:5f:72:68:86:91:f3:d1:
12:af:cf:cd:19:21:74:5b:25:35:93:6b:d5:44:92:53:6f:50:
ae:93:20:b3:92:5e:91:f3:5a:cd:1e:3f:fb:e3:77:19:70:ab:
18:1d:57:b7:77:95:d2:2a:ec:54:b6:15:63:80:9d:65:7b:49:
bc:cb:92:bc:be:e5:7c:3c:06:4b:e3:be:5a:aa:7b:84:6a:a2:
e6:d1:8e:56:53:f8:aa:c5:fc:f5:9e:82:a1:65:1c:5b:76:d7:
32:33:53:96:ea:cd:00:4e:bc:1c:c5:a3:31:9f:af:1c:3a:89:
c2:8a:1e:58:da:18:27:f2:56:ed:00:5e:93:64:99:03:82:6a:
a2:51:c9:26:42:ec:cf:37:c0:94:21:fa:66:ad:4c:47:81:62:
dd:c2:ff:ab:f0:dd:28:88:7d:8d:b5:39:7c:48:87:d9:1e:08:
42:1a:a4:81:ff:0a:75:38:49:5c:a1:1b:4c:52:67:fd:b1:ec:
f1:ae:6a:8b:33:3e:bd:5e:34:a3:fb:8e:60:43:1c:68:6b:d0:
50:50:c2:26:6a:04:a4:a3:52:6d:39:0e:9e:0a:7c:8c:5b:a8:
5c:0c:3d:9d:e3:e1:86:62:62:fe:00:ac:73:62:5f:0b:00:33:
36:b7:67:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnth7C3/1S5itSCeGGfSZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjUwMTAyMTU1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI1MjZmZGJjZmY0NTcxOTkxZmU5YWQyNjQxZDFmMWE5MzM5YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriXoBi55XV9+bbLj1o0bDEJ+ts8A
DPSwseYUAjQcCkRlqiLkXolLtA4vb9bRETQxxuTs0LW88tY+LH0kCKnsXeMHWOqu
Nt3XAOIPIwBCiKNMCN++wNOhSpmNbGRrxXW0QHd/hwDsxEer2aVt2g5ogpUXynmG
+ixqvCvrUV3kn1Afjaqotw3qhk8xz/RbB29TfwX28yN6JZ98O/IqxrNXibDAiDqH
DmDdRB/BI8GRTAioF0IokLYUBRIH9itW5nIhnynpJ8luA5HcjVAXQJGtZz/PPOaJ
yzmzi8WS9tGbqJUQtUagM0cn0/BsMuVVWSIk0VHiVWJxDZgdPQSaU01p6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPclJv28/0VxmR/prSZB0fGpM5v5MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvOXlVbV9iel9SWEdaSC1tdEprSFI4YWt6bV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+opMA0G
CSqGSIb3DQEBCwUAA4IBAQB/yfPEIS6rdM7TQl9yaIaR89ESr8/NGSF0WyU1k2vV
RJJTb1CukyCzkl6R81rNHj/743cZcKsYHVe3d5XSKuxUthVjgJ1le0m8y5K8vuV8
PAZL475aqnuEaqLm0Y5WU/iqxfz1noKhZRxbdtcyM1OW6s0ATrwcxaMxn68cOonC
ih5Y2hgn8lbtAF6TZJkDgmqiUckmQuzPN8CUIfpmrUxHgWLdwv+r8N0oiH2NtTl8
SIfZHghCGqSB/wp1OElcoRtMUmf9sezxrmqLMz69XjSj+45gQxxoa9BQUMImagSk
o1JtOQ6eCnyMW6hcDD2d4+GGYmL+AKxzYl8LADM2t2c2
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:01 2025 by rpki-client