Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jxPO1OIDwMy6svPDnUDwuFmYu14.roa
File: jxPO1OIDwMy6svPDnUDwuFmYu14.roa (raw, json)
Hash identifier: yKR3AON8jtCi5KNN6lT1IiBm3gEAU+4s+0neYrgyS2k=
Subject key identifier: 8F:13:CE:D4:E2:03:C0:CC:BA:B2:F3:C3:9D:40:F0:B8:59:98:BB:5E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D581F404E4B2C5BC2E914E4BA720
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jxPO1OIDwMy6svPDnUDwuFmYu14.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.139.30.0/24 maxlen: 24
45.141.185.0/24 maxlen: 24
45.141.196.0/24 maxlen: 24
85.209.105.0/24 maxlen: 24
85.209.106.0/24 maxlen: 24
85.209.107.0/24 maxlen: 24
91.191.186.0/24 maxlen: 24
109.196.175.0/24 maxlen: 24
195.2.248.0/24 maxlen: 24
213.139.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:81:f4:04:e4:b2:c5:bc:2e:91:4e:4b:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f13ced4e203c0ccbab2f3c39d40f0b85998bb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:59:95:f7:05:e3:5e:92:95:b4:77:aa:06:
90:67:1a:21:fd:ca:c7:7d:1e:a0:c0:b4:fd:36:ad:
4d:32:94:20:e3:ea:42:d8:d7:34:89:70:35:61:fc:
0d:e9:fa:e7:44:71:a9:b4:b3:20:de:7b:00:31:06:
4e:cf:ec:ae:29:d0:a2:f5:17:78:90:45:5c:33:04:
d8:f1:c0:20:35:09:af:9a:25:56:b0:64:ce:25:b8:
f5:38:e7:db:45:d9:ad:ab:6e:e9:2f:e2:90:28:12:
77:18:85:02:a5:a4:76:45:b1:2e:fa:e3:b3:77:28:
15:70:c2:b2:96:2e:be:64:4d:19:bb:6d:32:fb:eb:
d5:a3:cc:87:26:67:33:6c:17:b1:66:dc:75:78:f1:
f4:32:b7:4e:9a:9f:0f:46:7d:b4:62:c3:c0:84:82:
e3:b8:f8:37:83:d0:24:71:43:27:fb:78:c0:19:41:
76:1a:c9:da:98:c6:e7:c1:38:21:a9:24:24:75:be:
3e:ae:c7:f6:54:25:44:c6:f6:4a:87:3d:e2:53:e4:
b2:78:d3:33:f5:5b:4a:51:f9:d5:3b:b5:05:e3:bc:
d8:2a:e4:24:fa:2e:65:40:17:bd:27:58:34:84:4c:
85:be:52:d6:8e:7c:b9:8b:f9:5d:d4:20:59:19:6e:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:13:CE:D4:E2:03:C0:CC:BA:B2:F3:C3:9D:40:F0:B8:59:98:BB:5E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jxPO1OIDwMy6svPDnUDwuFmYu14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.30.0/24
45.141.185.0/24
45.141.196.0/24
85.209.105.0-85.209.107.255
91.191.186.0/24
109.196.175.0/24
195.2.248.0/24
213.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2c:71:2f:fb:8e:aa:bc:72:2b:c4:36:ce:60:c9:a8:c2:72:
d4:e5:9d:d8:9e:ab:8b:16:01:77:3a:c4:6b:84:1a:1c:da:fd:
9f:75:1d:58:67:33:89:22:e1:bf:bc:1f:c0:fc:0e:ec:68:3f:
05:da:29:fa:29:b2:42:a9:55:49:e8:8d:a6:6b:14:3f:1b:a2:
e7:35:99:e9:92:14:0a:d3:3f:da:0c:8f:77:be:dc:9a:f1:e5:
48:ea:0e:9b:6a:b9:7d:8d:24:18:3d:01:f9:b7:88:cc:b3:f1:
31:54:ce:81:67:13:07:e5:9e:ae:72:cf:72:4d:34:da:0f:84:
1f:59:70:17:e3:e7:51:e5:7d:3b:8a:1f:76:75:de:d6:f1:f0:
3f:90:c4:f3:fe:a2:02:c1:b0:d1:97:0a:fa:f3:bc:df:00:40:
27:a0:a6:b2:6f:7a:ec:8f:31:a6:98:f1:81:f7:52:98:b5:35:
50:58:39:11:51:e5:24:7f:9a:17:7c:a5:49:dc:4e:b2:8d:4b:
7f:81:5f:27:2e:65:ed:36:94:a0:cc:c9:9c:37:4b:5a:1f:8b:
7f:30:bc:a8:ca:29:67:4a:26:f7:7b:c7:6a:ec:9c:e3:ef:76:
35:bb:c2:69:20:53:59:a7:0f:0c:7e:71:c5:62:20:e3:7c:07:
ba:6b:8a:0f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQg1dWB9ATkssW8LpFOS6cgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjEzY2VkNGUyMDNjMGNjYmFiMmYzYzM5ZDQwZjBiODU5OThiYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjFZlfcF416SlbR3qgaQZxoh/crH
fR6gwLT9Nq1NMpQg4+pC2Nc0iXA1YfwN6frnRHGptLMg3nsAMQZOz+yuKdCi9Rd4
kEVcMwTY8cAgNQmvmiVWsGTOJbj1OOfbRdmtq27pL+KQKBJ3GIUCpaR2RbEu+uOz
dygVcMKyli6+ZE0Zu20y++vVo8yHJmczbBexZtx1ePH0MrdOmp8PRn20YsPAhILj
uPg3g9AkcUMn+3jAGUF2GsnamMbnwTghqSQkdb4+rsf2VCVExvZKhz3iU+SyeNMz
9VtKUfnVO7UF47zYKuQk+i5lQBe9J1g0hEyFvlLWjny5i/ld1CBZGW57HwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFI8TztTiA8DMurLzw51A8LhZmLteMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvanhQTzFPSUR3TXk2c3ZQRG5VRHd1Rm1ZdTE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALYseAwQA
LY25AwQALY3EMAwDBABV0WkDBAJV0WgDBABbv7oDBABtxK8DBADDAvgDBADVi+Qw
DQYJKoZIhvcNAQELBQADggEBACQscS/7jqq8civENs5gyajCctTlndieq4sWAXc6
xGuEGhza/Z91HVhnM4ki4b+8H8D8DuxoPwXaKfopskKpVUnojaZrFD8bouc1memS
FArTP9oMj3e+3Jrx5UjqDptquX2NJBg9Afm3iMyz8TFUzoFnEwflnq5yz3JNNNoP
hB9ZcBfj51HlfTuKH3Z13tbx8D+QxPP+ogLBsNGXCvrzvN8AQCegprJveuyPMaaY
8YH3Upi1NVBYORFR5SR/mhd8pUncTrKNS3+BXycuZe02lKDMyZw3S1ofi38wvKjK
KWdKJvd7x2rsnOPvdjW7wmkgU1mnDwx+ccViION8B7prig8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:15 2025 by rpki-client