Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa
File: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (raw, json)
Hash identifier: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=
Subject key identifier: 27:5F:F2:F1:F2:C6:48:70:BB:60:90:40:03:E6:93:BA:63:E9:AF:F6
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B2A1226F79202C8A35590C281EC2FF
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa
Signing time: Thu 02 Jan 2025 01:47:53 +0000
ROA not before: Thu 02 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 62.171.244.0/22 maxlen: 24
213.18.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a1:22:6f:79:20:2c:8a:35:59:0c:28:1e:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275ff2f1f2c64870bb60904003e693ba63e9aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:46:80:48:d8:1e:2a:1a:f1:0e:3a:9f:4e:
c5:a7:f4:d7:b0:b9:c5:11:dd:6d:3d:72:53:47:7d:
b3:44:43:38:fd:31:09:81:42:c6:71:74:bf:88:7c:
eb:2e:7f:ec:ea:b6:8a:d2:b2:7f:ec:22:5b:92:52:
9d:52:37:36:3c:75:5f:ae:55:12:de:4e:a3:bf:b1:
dd:c3:9e:0e:3a:4e:55:40:21:0b:26:bc:b6:d8:ad:
a7:29:14:e6:77:ca:ea:dc:93:35:63:df:99:f4:3c:
75:73:99:56:26:a6:54:ee:d1:d0:10:f4:75:cc:f0:
f0:5c:1c:5a:6e:13:c2:b1:64:1e:4f:86:36:6a:e1:
79:52:b9:af:26:6c:47:cf:14:b9:68:49:fc:f9:64:
67:3d:36:4f:ee:f6:82:4d:4e:4e:6a:47:77:11:70:
d7:cd:8a:07:3d:d3:0d:12:7a:e3:20:17:7a:3d:d1:
cd:fc:36:96:47:6a:d0:25:ad:5f:d4:78:1d:b0:17:
bc:c2:2e:e2:9c:1d:d9:5b:0d:54:43:91:01:a6:ea:
59:21:1e:68:8e:58:dd:4d:7e:91:bf:3f:3f:27:12:
89:ba:9c:62:0e:5b:75:c6:4b:26:52:15:e4:69:af:
df:12:25:67:07:77:74:14:d8:87:93:13:0b:c4:15:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:F2:F1:F2:C6:48:70:BB:60:90:40:03:E6:93:BA:63:E9:AF:F6
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.244.0/22
213.18.242.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6b:d7:fd:3e:2d:b8:ed:1c:5e:1d:16:eb:f1:14:6d:30:9a:
70:14:cb:66:a7:f5:9b:2f:fe:8f:87:29:5a:e0:14:90:6b:5a:
61:0a:61:1a:3e:6b:8c:cf:e6:51:3c:41:7c:16:0f:66:04:58:
7a:78:e9:6c:0d:80:69:d6:2e:fc:28:9e:8b:4c:99:41:f5:47:
67:78:e5:fc:02:b2:b4:e7:8a:f7:20:38:f1:ba:25:97:56:32:
65:bc:94:91:50:11:a4:4e:c0:00:77:2c:02:81:be:51:dd:5d:
c5:c4:1f:a3:e3:91:2c:23:fe:70:8f:3b:a1:23:69:ed:3d:85:
cd:e5:df:f2:48:a3:aa:b1:28:3b:9d:5a:06:38:66:d3:f7:41:
18:5e:e7:dc:57:ac:ab:d9:b4:6b:b0:f9:08:ca:5d:e6:cd:4a:
c0:b7:58:45:5a:5b:c8:7a:ae:aa:cd:57:89:01:de:e6:be:86:
c7:3b:91:d0:ec:16:f5:99:84:c8:5a:e5:c8:58:97:7b:23:94:
71:31:36:60:c3:73:0d:4b:c8:5a:eb:1c:69:36:b1:6d:ce:c1:
f5:b1:df:68:47:5a:6a:18:2d:0d:ae:1e:f3:4e:12:2e:05:79:
61:11:77:85:f7:53:9b:81:3b:b0:35:8d:1d:1d:1d:64:6e:3a:
c0:ed:69:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQksqEib3kgLIo1WQwoHsL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwMTAyMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzVmZjJmMWYyYzY0ODcwYmI2MDkwNDAwM2U2OTNiYTYzZTlhZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WRGgEjYHioa8Q46n07Fp/TXsLnF
Ed1tPXJTR32zREM4/TEJgULGcXS/iHzrLn/s6raK0rJ/7CJbklKdUjc2PHVfrlUS
3k6jv7Hdw54OOk5VQCELJry22K2nKRTmd8rq3JM1Y9+Z9Dx1c5lWJqZU7tHQEPR1
zPDwXBxabhPCsWQeT4Y2auF5UrmvJmxHzxS5aEn8+WRnPTZP7vaCTU5Oakd3EXDX
zYoHPdMNEnrjIBd6PdHN/DaWR2rQJa1f1HgdsBe8wi7inB3ZWw1UQ5EBpupZIR5o
jljdTX6Rvz8/JxKJupxiDlt1xksmUhXkaa/fEiVnB3d0FNiHkxMLxBWnYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCdf8vHyxkhwu2CQQAPmk7pj6a/2MB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvSjFfeThmTEdTSEM3WUpCQUEtYVR1bVBwcl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPqv0AwQB
1RLyMA0GCSqGSIb3DQEBCwUAA4IBAQBKa9f9Pi247RxeHRbr8RRtMJpwFMtmp/Wb
L/6Phyla4BSQa1phCmEaPmuMz+ZRPEF8Fg9mBFh6eOlsDYBp1i78KJ6LTJlB9Udn
eOX8ArK054r3IDjxuiWXVjJlvJSRUBGkTsAAdywCgb5R3V3FxB+j45EsI/5wjzuh
I2ntPYXN5d/ySKOqsSg7nVoGOGbT90EYXufcV6yr2bRrsPkIyl3mzUrAt1hFWlvI
eq6qzVeJAd7mvobHO5HQ7Bb1mYTIWuXIWJd7I5RxMTZgw3MNS8ha6xxpNrFtzsH1
sd9oR1pqGC0Nrh7zThIuBXlhEXeF91ObgTuwNY0dHR1kbjrA7Wlh
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:02:33 2025 by rpki-client