Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/2jz_GVg3tc2PAmVfZM229I9y7DM.roa
File: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (raw, json)
Hash identifier: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=
Subject key identifier: DA:3C:FF:19:58:37:B5:CD:8F:02:65:5F:64:CD:B6:F4:8F:72:EC:33
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 019421B18FA66E4FE2245135D90D8C61AC23
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/2jz_GVg3tc2PAmVfZM229I9y7DM.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58067
IP address blocks: 176.114.16.0/20 maxlen: 20
176.114.16.0/24 maxlen: 24
176.114.17.0/24 maxlen: 24
176.114.18.0/24 maxlen: 24
176.114.19.0/24 maxlen: 24
176.114.20.0/24 maxlen: 24
176.114.21.0/24 maxlen: 24
176.114.22.0/24 maxlen: 24
176.114.23.0/24 maxlen: 24
176.114.24.0/24 maxlen: 24
176.114.25.0/24 maxlen: 24
176.114.26.0/24 maxlen: 24
176.114.27.0/24 maxlen: 24
176.114.28.0/24 maxlen: 24
176.114.29.0/24 maxlen: 24
176.114.30.0/24 maxlen: 24
176.114.31.0/24 maxlen: 24
2a0b:97c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8f:a6:6e:4f:e2:24:51:35:d9:0d:8c:61:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da3cff195837b5cd8f02655f64cdb6f48f72ec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:82:ab:83:bc:26:57:a1:93:50:f1:e1:91:
85:f4:45:df:d7:c7:2e:48:76:f5:d0:70:5b:f6:e7:
53:61:62:cb:60:b5:38:b2:89:1f:15:82:38:5f:d2:
8b:e8:c3:88:60:9e:0a:5a:d1:c5:4a:ae:79:93:31:
d8:5f:3e:d4:c2:d1:9f:c3:e9:e7:de:fc:01:d3:8e:
d4:c4:5b:39:65:66:eb:13:c1:db:e8:6b:02:ac:80:
1b:e9:44:c8:54:fb:8b:6d:f4:07:91:07:3d:bd:c4:
4c:c1:65:10:67:e0:9b:8b:ee:80:ac:6d:09:cc:33:
1e:81:b9:8b:db:e6:75:b7:16:d3:aa:a6:46:1c:32:
df:79:c4:d5:79:0e:fb:7d:d7:63:95:3b:a4:02:59:
53:60:0b:c5:e4:f6:81:67:85:48:28:ee:bf:60:d3:
77:b0:e3:3b:ac:ec:9c:eb:e0:06:a6:c0:2f:f8:29:
e0:6f:4a:5d:f4:c7:b8:ae:34:50:f2:64:a0:22:37:
82:bd:51:b2:26:5f:92:32:d0:e3:69:54:9d:1e:ba:
15:aa:72:a5:e8:8f:83:c5:c0:88:23:99:42:32:83:
21:09:5c:02:7d:68:65:dc:05:1f:88:a9:3b:22:96:
7e:2f:04:b4:1d:f1:47:23:b0:7b:c9:c3:26:28:69:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:FF:19:58:37:B5:CD:8F:02:65:5F:64:CD:B6:F4:8F:72:EC:33
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/2jz_GVg3tc2PAmVfZM229I9y7DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.16.0/20
IPv6:
2a0b:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:15:7b:43:4b:f3:ab:02:56:b6:3e:e0:42:f8:ef:ae:46:64:
85:ac:7f:72:a0:69:0e:f8:01:25:f4:8d:ec:c3:51:c2:b3:04:
99:fe:03:db:4a:db:b6:6c:be:cf:21:fd:af:1c:76:c0:58:04:
3e:3c:07:b9:97:ce:3a:0b:00:39:06:d2:a1:67:fe:09:02:00:
34:ea:77:76:4d:26:9a:e3:cc:f4:9d:2e:e3:8a:d5:23:a2:3c:
ad:17:43:d1:d0:cb:f7:8f:f2:93:65:8a:7b:be:6f:12:03:60:
8d:b5:32:8e:bb:50:18:06:d8:ec:2b:10:fc:d3:29:1e:0b:d0:
57:78:43:b7:a9:49:84:0c:7f:56:17:52:2d:aa:81:60:db:61:
38:ff:f0:36:df:4f:9b:0e:e2:46:13:8b:00:05:14:38:92:7d:
be:4d:2e:c2:d7:b1:f1:74:f3:c6:d2:fa:ac:34:1a:6c:b5:d2:
d3:95:bf:02:62:14:1f:2f:00:91:a3:35:32:30:24:f1:fb:27:
8c:d6:8b:1a:8c:f3:d2:5f:7d:67:82:7e:a7:63:7a:80:18:8d:
be:d7:63:15:12:cc:a7:8e:25:84:07:9f:40:3e:43:a9:74:e3:
24:51:b2:5b:6d:78:2e:21:93:67:19:ff:34:50:dc:4b:47:b4:
dc:97:32:dc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhsY+mbk/iJFE12Q2MYawjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTAyNGEwYmRmYmFkOTVmMDEwNjRkNTE4Y2Y2ZWE5NjZi
NDQ4OGEwHhcNMjUwMTAxMTE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTNjZmYxOTU4MzdiNWNkOGYwMjY1NWY2NGNkYjZmNDhmNzJlYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+Cq4O8Jlehk1Dx4ZGF9EXf18cu
SHb10HBb9udTYWLLYLU4sokfFYI4X9KL6MOIYJ4KWtHFSq55kzHYXz7UwtGfw+nn
3vwB047UxFs5ZWbrE8Hb6GsCrIAb6UTIVPuLbfQHkQc9vcRMwWUQZ+Cbi+6ArG0J
zDMegbmL2+Z1txbTqqZGHDLfecTVeQ77fddjlTukAllTYAvF5PaBZ4VIKO6/YNN3
sOM7rOyc6+AGpsAv+Cngb0pd9Me4rjRQ8mSgIjeCvVGyJl+SMtDjaVSdHroVqnKl
6I+DxcCII5lCMoMhCVwCfWhl3AUfiKk7IpZ+LwS0HfFHI7B7ycMmKGkKkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNo8/xlYN7XNjwJlX2TNtvSPcuwzMB8GA1UdIwQY
MBaAFGwQJKC9+62V8BBk1RjPbqlmtEiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2Ut
MjgzYmIwOTIzODE3LzEvMmp6X0dWZzN0YzJQQW1WZlpNMjI5STl5N0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2UtMjgzYmIwOTIzODE3
LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEsHIQMA0E
AgACMAcDBQMqC5fAMA0GCSqGSIb3DQEBCwUAA4IBAQAXFXtDS/OrAla2PuBC+O+u
RmSFrH9yoGkO+AEl9I3sw1HCswSZ/gPbStu2bL7PIf2vHHbAWAQ+PAe5l846CwA5
BtKhZ/4JAgA06nd2TSaa48z0nS7jitUjojytF0PR0Mv3j/KTZYp7vm8SA2CNtTKO
u1AYBtjsKxD80ykeC9BXeEO3qUmEDH9WF1ItqoFg22E4//A230+bDuJGE4sABRQ4
kn2+TS7C17HxdPPG0vqsNBpstdLTlb8CYhQfLwCRozUyMCTx+yeM1osajPPSX31n
gn6nY3qAGI2+12MVEsynjiWEB59APkOpdOMkUbJbbXguIZNnGf80UNxLR7TclzLc
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:59 2025 by rpki-client