Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jhFFnOfiUX1beQnMdFI7HQkXMu4.roa
File: jhFFnOfiUX1beQnMdFI7HQkXMu4.roa (raw, json)
Hash identifier: 3FY7Qpzpo28uDSYDS9CvGlbhOup4Iwr9S2FVCDXO+eg=
Subject key identifier: 8E:11:45:9C:E7:E2:51:7D:5B:79:09:CC:74:52:3B:1D:09:17:32:EE
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B241FEF0C653E9412C263C7A228EDA
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jhFFnOfiUX1beQnMdFI7HQkXMu4.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43607
IP address blocks: 193.17.2.0/24 maxlen: 24
2a07:2480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:fe:f0:c6:53:e9:41:2c:26:3c:7a:22:8e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e11459ce7e2517d5b7909cc74523b1d091732ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:79:3d:c9:fc:47:cc:6d:c5:20:a4:8e:d7:
8a:f4:e3:61:e0:8b:6a:b5:54:e9:6c:b3:9e:60:2e:
cd:18:5f:68:19:01:c3:28:e9:13:79:a1:ff:71:42:
53:27:94:34:df:e9:9d:50:43:cb:21:f2:85:2a:81:
af:cd:60:4c:9a:dc:28:c7:69:90:e8:66:fc:c5:bb:
12:5a:7f:99:ba:c8:66:b0:26:7a:7b:87:7a:5a:ef:
41:b9:6a:5c:82:46:6c:c8:37:d5:c3:a4:7b:6f:8c:
7b:9b:d3:23:af:1f:b5:b2:04:18:ba:e4:d0:58:01:
32:12:9d:11:7b:30:d4:10:dc:78:0a:e1:d3:ed:7d:
21:99:ac:8a:cc:99:a4:b3:f4:58:a2:76:71:b3:4e:
26:8e:60:fc:aa:e5:3c:43:2c:3a:66:bc:7c:95:ef:
77:f5:9f:29:48:fb:f0:b3:2e:5d:bf:8e:50:6b:00:
ff:1e:af:90:57:5d:76:78:1c:0a:44:01:9f:3d:76:
d0:0f:be:07:2b:f4:2e:9a:df:b8:f7:90:ca:d1:be:
95:ac:d9:a3:66:0e:21:f0:0a:7d:f0:58:81:25:c5:
4b:71:05:d6:9e:5d:76:eb:6b:80:5c:7e:9e:f6:c5:
cb:e4:8a:75:d0:aa:31:6a:eb:65:66:ac:32:f9:6e:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:45:9C:E7:E2:51:7D:5B:79:09:CC:74:52:3B:1D:09:17:32:EE
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/jhFFnOfiUX1beQnMdFI7HQkXMu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
IPv6:
2a07:2480::/32
Signature Algorithm: sha256WithRSAEncryption
6c:1f:a0:ad:4b:a7:45:54:74:a1:b6:f5:fe:2f:9a:b4:4e:9b:
d4:e5:da:c5:ac:38:4f:fd:13:c6:e5:3a:3d:68:d1:8d:39:ec:
f0:4e:a8:5c:af:49:6f:82:fd:44:21:26:9e:ef:a7:9f:23:fa:
4b:e4:18:74:c8:3a:27:0c:cb:4e:77:e5:86:0e:b3:56:15:ff:
b6:30:3a:78:cd:46:76:a4:71:f5:66:45:cc:9c:42:09:9c:d8:
f9:1a:40:69:a2:23:a6:b6:ef:e4:1c:87:9b:db:57:57:d6:1a:
6b:ae:d2:1d:ad:e8:56:98:46:e5:5a:a2:d6:04:b2:10:2f:93:
18:66:38:43:01:7f:7e:97:f8:e9:77:79:2b:9a:6b:0d:8a:6a:
6a:c5:9b:59:85:99:fe:e8:f8:07:ed:2d:68:11:5b:f5:9c:b5:
09:8b:16:19:61:9b:b2:b2:a5:bd:47:79:fc:d0:3b:98:d5:6e:
2e:a1:ee:1e:27:cb:04:a2:c4:32:d3:7e:ff:e7:d5:17:3b:50:
19:7f:f0:22:81:86:ea:f8:f2:df:51:e5:30:db:f5:62:2b:09:
10:56:d7:72:7a:ad:1d:ba:20:1e:6d:d9:c0:f7:df:ce:6d:bd:
8b:c4:c7:c6:06:25:22:d9:ca:07:7a:f9:64:e2:6f:7f:38:48:
6d:2b:02:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhskH+8MZT6UEsJjx6Io7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh
YmE1ZGEwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTExNDU5Y2U3ZTI1MTdkNWI3OTA5Y2M3NDUyM2IxZDA5MTczMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ap5Pcn8R8xtxSCkjteK9ONh4Itq
tVTpbLOeYC7NGF9oGQHDKOkTeaH/cUJTJ5Q03+mdUEPLIfKFKoGvzWBMmtwox2mQ
6Gb8xbsSWn+ZushmsCZ6e4d6Wu9BuWpcgkZsyDfVw6R7b4x7m9Mjrx+1sgQYuuTQ
WAEyEp0RezDUENx4CuHT7X0hmayKzJmks/RYonZxs04mjmD8quU8Qyw6Zrx8le93
9Z8pSPvwsy5dv45QawD/Hq+QV112eBwKRAGfPXbQD74HK/Qumt+495DK0b6VrNmj
Zg4h8Ap98FiBJcVLcQXWnl1262uAXH6e9sXL5Ip10KoxautlZqwy+W5QQQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI4RRZzn4lF9W3kJzHRSOx0JFzLuMB8GA1UdIwQY
MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt
Mzg0ZmZjZTc3ZjUyLzEvamhGRm5PZmlVWDFiZVFuTWRGSTdIUWtYTXU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy
LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRECMA0E
AgACMAcDBQAqBySAMA0GCSqGSIb3DQEBCwUAA4IBAQBsH6CtS6dFVHShtvX+L5q0
TpvU5drFrDhP/RPG5To9aNGNOezwTqhcr0lvgv1EISae76efI/pL5Bh0yDonDMtO
d+WGDrNWFf+2MDp4zUZ2pHH1ZkXMnEIJnNj5GkBpoiOmtu/kHIeb21dX1hprrtId
rehWmEblWqLWBLIQL5MYZjhDAX9+l/jpd3krmmsNimpqxZtZhZn+6PgH7S1oEVv1
nLUJixYZYZuysqW9R3n80DuY1W4uoe4eJ8sEosQy037/59UXO1AZf/AigYbq+PLf
UeUw2/ViKwkQVtdyeq0duiAebdnA99/Obb2LxMfGBiUi2coHevlk4m9/OEhtKwIN
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:34 2025 by rpki-client