Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kJE4zRJapXktztqWJxisJJJo2Uw.roa
File: kJE4zRJapXktztqWJxisJJJo2Uw.roa (raw, json)
Hash identifier: OadOhc6aHuMk66iI6ljXBoSjEcNtYAtU6MKovDnWx9s=
Subject key identifier: 90:91:38:CD:12:5A:A5:79:2D:CE:DA:96:27:18:AC:24:92:68:D9:4C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AD1B125565F0DDF385A180BFB7A0
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kJE4zRJapXktztqWJxisJJJo2Uw.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31629
IP address blocks: 81.255.154.0/23 maxlen: 24
81.255.154.0/24 maxlen: 24
81.255.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ad:1b:12:55:65:f0:dd:f3:85:a1:80:bf:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=909138cd125aa5792dceda962718ac249268d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:16:f1:80:6c:25:d7:c4:72:d8:90:fe:cd:
fb:80:50:95:e5:df:0c:dc:96:d4:f9:4b:26:20:c0:
9a:b3:f7:7e:15:2e:bb:3d:c9:bd:da:b9:98:5b:f4:
e8:78:3d:64:ba:c3:d6:84:2a:f7:98:92:91:e0:ac:
1d:15:1b:15:58:3d:6e:cf:a1:f6:5e:eb:09:9d:fc:
4d:ad:11:d2:44:2b:0e:37:12:ac:9f:e5:f8:e3:10:
5c:17:e6:52:68:5a:db:69:81:61:99:10:8d:a5:f2:
fc:8e:2e:66:5e:62:e6:f6:b5:fb:25:fd:10:e8:66:
b9:79:4a:52:92:cc:94:1a:b7:2d:c6:cd:27:6a:94:
f5:c4:47:45:78:80:01:b3:29:75:55:b7:84:73:c3:
f1:6c:0d:ec:51:cb:2a:18:2b:f5:be:3f:9f:82:16:
f0:1f:6c:a9:9e:15:c2:e9:1b:d4:70:01:42:75:c4:
71:9b:f4:00:25:f6:36:e6:a5:0b:cd:42:9e:6a:d3:
0c:ec:e1:d4:70:7e:77:cb:01:02:59:4e:55:de:fb:
d5:86:eb:ac:cd:ac:df:09:e2:55:7b:d2:2a:cd:32:
9c:2c:bb:61:c0:b3:23:b7:ab:ab:d6:bf:25:d4:f9:
19:af:13:38:fd:02:b9:15:54:07:64:6c:89:22:36:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:38:CD:12:5A:A5:79:2D:CE:DA:96:27:18:AC:24:92:68:D9:4C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kJE4zRJapXktztqWJxisJJJo2Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.154.0/23
Signature Algorithm: sha256WithRSAEncryption
87:76:19:06:eb:49:75:aa:ce:61:0e:bc:4c:2d:be:0d:e8:59:
3d:cc:aa:f2:c3:03:7d:9d:6f:6d:22:69:50:04:0c:dc:fa:26:
63:5b:8b:3c:9f:30:ef:c7:f3:2d:03:ce:f8:cd:11:8b:3f:bd:
44:56:17:ad:a5:1a:24:ee:64:07:70:be:2b:65:15:f1:fe:33:
08:c9:e7:60:b6:ce:be:b6:02:33:0c:2e:2c:4f:59:a2:6a:55:
89:3e:01:80:06:71:34:b4:70:53:38:70:bf:ac:0d:a4:9a:19:
96:e4:c0:05:0e:f1:f3:55:17:54:b0:99:6d:67:1d:97:91:39:
d4:20:1f:10:06:40:2f:cd:23:ce:04:d1:7e:b5:b7:de:11:4a:
3e:c6:12:cf:b4:79:58:0c:93:2e:a8:c4:02:4b:aa:7d:70:1e:
11:46:5b:a4:53:69:c6:b5:81:6b:14:a6:98:5e:fe:d4:ea:63:
05:ae:69:46:6f:27:97:0f:2d:e6:04:3e:c0:69:07:53:3f:02:
fb:4a:d9:bb:ec:b1:17:55:32:ab:52:6a:ce:72:98:1d:20:61:
9e:17:aa:dc:da:73:13:5b:23:6e:18:b7:0d:ab:81:9b:fa:82:
a0:28:63:ac:1f:82:ff:c5:3c:11:5a:0c:55:67:ef:05:ea:8d:
e3:23:5d:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1a0bElVl8N3zhaGAv7egMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDkxMzhjZDEyNWFhNTc5MmRjZWRhOTYyNzE4YWMyNDkyNjhkOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxoW8YBsJdfEctiQ/s37gFCV5d8M
3JbU+UsmIMCas/d+FS67Pcm92rmYW/ToeD1kusPWhCr3mJKR4KwdFRsVWD1uz6H2
XusJnfxNrRHSRCsONxKsn+X44xBcF+ZSaFrbaYFhmRCNpfL8ji5mXmLm9rX7Jf0Q
6Ga5eUpSksyUGrctxs0napT1xEdFeIABsyl1VbeEc8PxbA3sUcsqGCv1vj+fghbw
H2ypnhXC6RvUcAFCdcRxm/QAJfY25qULzUKeatMM7OHUcH53ywECWU5V3vvVhuus
zazfCeJVe9IqzTKcLLthwLMjt6ur1r8l1PkZrxM4/QK5FVQHZGyJIjYR/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCROM0SWqV5Lc7alicYrCSSaNlMMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEva0pFNHpSSmFwWGt0enRxV0p4aXNKSkpvMlV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUf+aMA0G
CSqGSIb3DQEBCwUAA4IBAQCHdhkG60l1qs5hDrxMLb4N6Fk9zKrywwN9nW9tImlQ
BAzc+iZjW4s8nzDvx/MtA874zRGLP71EVhetpRok7mQHcL4rZRXx/jMIyedgts6+
tgIzDC4sT1mialWJPgGABnE0tHBTOHC/rA2kmhmW5MAFDvHzVRdUsJltZx2XkTnU
IB8QBkAvzSPOBNF+tbfeEUo+xhLPtHlYDJMuqMQCS6p9cB4RRlukU2nGtYFrFKaY
Xv7U6mMFrmlGbyeXDy3mBD7AaQdTPwL7Stm77LEXVTKrUmrOcpgdIGGeF6rc2nMT
WyNuGLcNq4Gb+oKgKGOsH4L/xTwRWgxVZ+8F6o3jI119
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:26:59 2025 by rpki-client