Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JRiOk_2TKu5CUeBn01ifQfYvtpU.roa
File: JRiOk_2TKu5CUeBn01ifQfYvtpU.roa (raw, json)
Hash identifier: 52AVuY7yVBdnGxwlkDBVy4L+oi28x69yEyj+PS6Tyh0=
Subject key identifier: 25:18:8E:93:FD:93:2A:EE:42:51:E0:67:D3:58:9F:41:F6:2F:B6:95
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E9C65A338EAF253B0A078FCA39C3
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JRiOk_2TKu5CUeBn01ifQfYvtpU.roa
Signing time: Wed 01 Jan 2025 21:49:00 +0000
ROA not before: Wed 01 Jan 2025 21:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209655
IP address blocks: 212.22.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e9:c6:5a:33:8e:af:25:3b:0a:07:8f:ca:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25188e93fd932aee4251e067d3589f41f62fb695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:ec:41:13:48:ae:37:dd:6a:94:1f:3f:d4:
e5:0f:c9:ea:62:fd:09:13:cb:1b:73:02:8c:bc:7e:
84:17:69:90:78:9a:39:03:46:9f:24:e0:08:26:75:
ec:9c:c7:d0:b7:77:3e:48:9c:25:d7:3b:a4:78:11:
0a:ec:62:90:cf:97:5c:58:a6:38:e6:f1:0b:24:41:
1b:1c:12:24:a0:f6:ac:5d:bf:66:04:a3:36:ca:5d:
b3:bc:4c:df:6a:cc:9f:b8:92:ce:f0:21:11:5c:07:
3b:70:58:b1:46:67:5f:a3:1a:f6:aa:7a:10:84:e7:
19:43:2c:55:27:bd:c9:93:5c:bf:c9:7f:a2:98:e1:
41:33:5a:16:bf:8a:7c:4a:b7:20:15:e5:44:fa:b8:
5b:96:ca:41:22:f3:36:d5:b9:53:ae:68:67:55:03:
cf:86:57:2d:bc:67:b4:7b:26:de:b2:44:22:4a:9e:
df:4b:17:b5:02:4d:79:11:05:c2:29:9d:e4:f4:02:
11:55:00:c5:20:1e:92:9c:e7:17:c1:c9:12:5d:ee:
cc:d6:60:b9:f3:89:63:1c:84:01:06:58:15:d8:05:
4d:a0:e6:dc:3d:8b:03:ff:ca:a5:0f:22:fc:9b:93:
28:0e:f5:17:31:4b:6e:0f:03:69:9c:aa:3b:a6:33:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:8E:93:FD:93:2A:EE:42:51:E0:67:D3:58:9F:41:F6:2F:B6:95
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JRiOk_2TKu5CUeBn01ifQfYvtpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f0:db:d0:2a:cd:cc:10:f5:66:a4:ef:d7:27:e5:a8:5f:56:
7b:0d:7f:4a:26:d9:ca:d2:7c:79:45:d9:79:0c:fe:9e:20:19:
c7:2b:7a:0d:92:33:60:8e:07:3b:b6:f7:d8:a2:42:58:ff:13:
ba:cf:f7:ac:0d:84:ab:ca:69:07:56:92:c3:16:17:6d:0b:29:
20:ee:87:68:74:c5:31:2a:fe:8c:53:79:7e:56:fb:bc:d8:e8:
bc:fc:a3:4b:99:a1:c7:b3:6c:34:61:f5:f3:09:b0:03:d1:bf:
2b:39:33:8d:48:af:be:85:a9:09:a1:ca:a4:a7:b3:c6:d1:1a:
46:ea:24:39:7c:10:d6:5e:67:00:75:70:e6:e0:d0:e6:6e:e3:
9e:78:a9:3c:b8:d0:3b:18:e3:83:e7:de:1f:70:15:c4:22:71:
7c:28:e9:a1:ef:da:88:24:ca:58:2f:3b:8a:a0:16:ef:75:5f:
08:df:fa:c7:16:7f:be:31:c8:da:de:7a:3d:6e:b7:6b:06:b5:
30:b3:0a:9c:88:43:4b:b5:62:2c:67:f5:32:5a:fc:95:66:aa:
a8:10:88:f5:b3:94:2c:e5:19:c7:08:53:ff:2c:b7:70:f4:2c:
1d:1f:6f:22:88:17:ef:e7:36:98:81:24:d6:b6:4b:52:b8:78:
d0:a4:22:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1+nGWjOOryU7CgePyjnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjUwMTAxMjE0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTE4OGU5M2ZkOTMyYWVlNDI1MWUwNjdkMzU4OWY0MWY2MmZiNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOrsQRNIrjfdapQfP9TlD8nqYv0J
E8sbcwKMvH6EF2mQeJo5A0afJOAIJnXsnMfQt3c+SJwl1zukeBEK7GKQz5dcWKY4
5vELJEEbHBIkoPasXb9mBKM2yl2zvEzfasyfuJLO8CERXAc7cFixRmdfoxr2qnoQ
hOcZQyxVJ73Jk1y/yX+imOFBM1oWv4p8SrcgFeVE+rhblspBIvM21blTrmhnVQPP
hlctvGe0eybeskQiSp7fSxe1Ak15EQXCKZ3k9AIRVQDFIB6SnOcXwckSXe7M1mC5
84ljHIQBBlgV2AVNoObcPYsD/8qlDyL8m5MoDvUXMUtuDwNpnKo7pjPS7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUYjpP9kyruQlHgZ9NYn0H2L7aVMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvSlJpT2tfMlRLdTVDVWVCbjAxaWZRZll2dHBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZIMA0G
CSqGSIb3DQEBCwUAA4IBAQAs8NvQKs3MEPVmpO/XJ+WoX1Z7DX9KJtnK0nx5Rdl5
DP6eIBnHK3oNkjNgjgc7tvfYokJY/xO6z/esDYSrymkHVpLDFhdtCykg7ododMUx
Kv6MU3l+Vvu82Oi8/KNLmaHHs2w0YfXzCbAD0b8rOTONSK++hakJocqkp7PG0RpG
6iQ5fBDWXmcAdXDm4NDmbuOeeKk8uNA7GOOD594fcBXEInF8KOmh79qIJMpYLzuK
oBbvdV8I3/rHFn++Mcja3no9brdrBrUwswqciENLtWIsZ/UyWvyVZqqoEIj1s5Qs
5RnHCFP/LLdw9CwdH28iiBfv5zaYgSTWtktSuHjQpCIT
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:37:47 2025 by rpki-client