Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa
File: 9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa (raw, json)
Hash identifier: CXZ0q1QVdxVDaPhOEyR1OpgzYZ+TJLJ3piBsRyEK14c=
Subject key identifier: F7:18:C7:4F:63:70:18:C1:6F:A8:28:A9:2E:AF:65:27:2F:4D:8F:A4
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 019427B557A8D536E6AF87DE5DFDEE289AFA
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31060
IP address blocks: 193.23.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:57:a8:d5:36:e6:af:87:de:5d:fd:ee:28:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f718c74f637018c16fa828a92eaf65272f4d8fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:b2:34:53:dd:32:ed:b4:5d:97:3e:76:01:
55:9e:17:15:a0:ee:9f:ad:29:09:3a:54:4b:b8:a3:
62:6e:e3:1c:6b:0d:e6:31:64:8d:27:1a:7c:60:46:
6a:e2:0b:ee:77:d5:62:38:66:fc:87:9a:db:c0:4a:
c2:38:f4:a5:4a:47:42:65:ac:47:34:3c:63:c3:76:
22:b2:d9:a2:18:3e:c3:a4:80:7f:f2:2e:fb:fe:7c:
da:e7:64:ab:55:e4:4c:3c:45:8f:09:55:e1:31:26:
37:55:95:5f:a3:ff:dc:a6:73:02:bd:bc:7f:f9:85:
a2:e9:66:2e:94:d7:6b:50:3e:cf:26:ce:5c:aa:20:
7b:84:d7:9d:58:3c:c2:dc:99:ea:bf:2f:8b:24:4c:
75:ed:b3:fd:9f:83:70:63:4d:42:56:3b:63:d2:e1:
c5:3c:57:82:45:78:6c:79:d2:fd:d5:6d:68:39:a0:
e8:d6:9f:eb:89:af:26:55:73:f0:62:69:06:ef:85:
9b:d0:70:4f:e3:76:cf:34:be:b9:ce:a7:01:17:e5:
e7:dc:23:fa:db:38:01:66:ef:f6:ac:08:42:5c:19:
8c:94:a4:db:bc:ea:66:0b:43:a9:41:14:8c:46:b8:
56:f7:87:88:5b:43:59:56:b3:3e:37:44:62:a4:f5:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:C7:4F:63:70:18:C1:6F:A8:28:A9:2E:AF:65:27:2F:4D:8F:A4
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.49.0/24
Signature Algorithm: sha256WithRSAEncryption
17:af:fd:91:b2:05:64:25:c3:fc:35:86:57:3f:12:68:fa:23:
3e:2b:4a:0d:31:76:d6:ad:c0:82:35:b2:ea:4c:5e:97:5d:16:
a9:ed:4c:49:54:ef:1f:3c:76:62:b5:db:2a:c5:d6:90:dc:c4:
2d:a0:ef:62:f3:76:67:22:09:6c:c2:3d:af:fc:65:e0:62:5d:
2c:3d:c9:3e:93:8a:7c:06:3e:c3:21:6f:51:1c:99:39:e7:56:
78:d5:72:a9:ef:01:ca:c8:30:82:15:da:fe:c7:3f:c4:86:35:
ae:ce:cc:32:ab:c4:1f:2a:7b:9f:ed:6e:55:8c:02:9b:05:55:
44:77:b4:11:5f:ea:62:56:ff:28:ea:23:89:e8:be:e9:16:3e:
b4:32:40:5c:b2:46:3a:42:4e:b4:91:f8:2e:da:b2:e1:35:83:
da:cf:7b:ec:e7:73:b9:a2:48:f7:fc:10:d9:d3:23:70:56:60:
06:2c:1b:f9:65:c0:b6:d1:fb:4a:3c:8d:ee:ae:ff:7a:a4:24:
30:62:d2:0b:48:40:2c:d7:5e:cd:14:2f:43:32:12:f2:40:9a:
df:7c:0d:43:ba:3a:95:dd:34:52:c1:9f:c6:6f:0b:01:63:59:
a2:0a:5a:f2:50:a2:5a:42:de:97:24:6e:31:86:08:9d:01:b1:
c6:06:d6:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntVeo1Tbmr4feXf3uKJr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNThkOGM2MWY2MzM1MGM3N2JlZjFkNjZiMWNjZmE1YTAw
ZTBkZGIwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzE4Yzc0ZjYzNzAxOGMxNmZhODI4YTkyZWFmNjUyNzJmNGQ4ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ayNFPdMu20XZc+dgFVnhcVoO6f
rSkJOlRLuKNibuMcaw3mMWSNJxp8YEZq4gvud9ViOGb8h5rbwErCOPSlSkdCZaxH
NDxjw3YistmiGD7DpIB/8i77/nza52SrVeRMPEWPCVXhMSY3VZVfo//cpnMCvbx/
+YWi6WYulNdrUD7PJs5cqiB7hNedWDzC3Jnqvy+LJEx17bP9n4NwY01CVjtj0uHF
PFeCRXhsedL91W1oOaDo1p/ria8mVXPwYmkG74Wb0HBP43bPNL65zqcBF+Xn3CP6
2zgBZu/2rAhCXBmMlKTbvOpmC0OpQRSMRrhW94eIW0NZVrM+N0RipPXYAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcYx09jcBjBb6goqS6vZScvTY+kMB8GA1UdIwQY
MBaAFI5Y2MYfYzUMd77x1mscz6WgDg3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYt
YWI1OTU2YjRkOTcwLzEvOXhqSFQyTndHTUZ2cUNpcExxOWxKeTlOajZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYtYWI1OTU2YjRkOTcw
LzEvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRcxMA0G
CSqGSIb3DQEBCwUAA4IBAQAXr/2RsgVkJcP8NYZXPxJo+iM+K0oNMXbWrcCCNbLq
TF6XXRap7UxJVO8fPHZitdsqxdaQ3MQtoO9i83ZnIglswj2v/GXgYl0sPck+k4p8
Bj7DIW9RHJk551Z41XKp7wHKyDCCFdr+xz/EhjWuzswyq8QfKnuf7W5VjAKbBVVE
d7QRX+piVv8o6iOJ6L7pFj60MkBcskY6Qk60kfgu2rLhNYPaz3vs53O5okj3/BDZ
0yNwVmAGLBv5ZcC20ftKPI3urv96pCQwYtILSEAs117NFC9DMhLyQJrffA1DujqV
3TRSwZ/GbwsBY1miClryUKJaQt6XJG4xhgidAbHGBta/
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:15 2025 by rpki-client