Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/j1tyvf9vhLgeYpEFnimJVNZiLak.roa
File: j1tyvf9vhLgeYpEFnimJVNZiLak.roa (raw, json)
Hash identifier: FBnYfg3Jo8GDcVSyScgxsvOn1x+dSXjVbOPB7dScDYg=
Subject key identifier: 8F:5B:72:BD:FF:6F:84:B8:1E:62:91:05:9E:29:89:54:D6:62:2D:A9
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0194228D1FDD4EF869A74F15DC753F19C139
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/j1tyvf9vhLgeYpEFnimJVNZiLak.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.255.63.0/24 maxlen: 24
91.92.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1f:dd:4e:f8:69:a7:4f:15:dc:75:3f:19:c1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5b72bdff6f84b81e6291059e298954d6622da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:52:e6:8e:cb:f0:96:34:ac:10:37:ce:aa:
22:d3:4d:2a:44:d2:5d:c9:88:b7:99:4e:ad:bb:e1:
b9:a3:e7:5d:17:d4:0c:cf:3a:69:5c:6f:32:de:b9:
7c:b6:77:f6:53:51:4d:86:d8:06:f2:af:ce:c0:87:
b4:ba:55:11:b8:e2:98:8c:00:f4:87:7f:50:a6:08:
c4:87:c7:7b:e2:0f:54:82:bb:b9:06:96:6c:d9:5a:
1f:a7:8c:bd:4c:0f:fd:67:2b:e7:ae:b7:91:da:a7:
84:22:bc:7b:7a:07:1e:da:21:ab:cb:9e:96:a9:f7:
0d:ec:d1:a7:be:65:a1:ff:3e:c4:40:80:84:c3:fb:
90:41:70:a7:77:c8:04:60:fd:0d:02:1b:51:fb:79:
85:38:d5:0f:67:2f:a2:3f:3c:23:d9:fc:01:77:b3:
dd:e6:4c:d6:85:65:08:7e:77:0b:73:d2:4a:08:aa:
8f:c1:f9:89:73:4e:81:22:c9:c8:38:3e:55:80:4d:
7a:3d:da:a6:8e:fa:96:04:2e:88:2d:f7:d2:ae:7e:
63:4b:4a:4f:20:b7:76:91:e9:55:11:5d:04:b7:44:
07:ec:e5:a9:ed:45:f6:a3:76:e2:fe:b5:6f:1f:2e:
6d:08:49:0f:ad:ee:e8:09:ba:ee:bd:b8:80:f5:3b:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:72:BD:FF:6F:84:B8:1E:62:91:05:9E:29:89:54:D6:62:2D:A9
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/j1tyvf9vhLgeYpEFnimJVNZiLak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.63.0/24
91.92.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:67:9a:37:a4:d4:02:63:a0:37:f2:c7:36:83:5a:a6:11:6e:
3f:65:8f:0c:b0:fb:b3:57:51:ad:c7:e5:95:d0:4f:3f:c1:39:
bd:c9:ed:24:83:b4:69:8d:0e:01:3d:ad:c4:d8:76:ac:42:72:
a4:a0:d7:0e:d6:d0:e5:17:13:5e:fb:11:d8:55:64:55:2f:72:
4a:8c:eb:84:e0:f6:17:ee:6c:6b:f9:be:a2:3c:10:34:88:02:
92:83:2b:0f:a9:39:5d:42:f3:f0:9f:d2:b4:a4:48:a1:42:11:
15:16:8c:12:80:db:2a:e1:a1:99:12:26:d6:ab:22:bb:d4:9e:
4d:59:ff:e3:6c:7b:e7:b5:a3:9d:1f:c9:73:09:ae:e3:61:f2:
a2:db:e0:e2:d2:0e:2a:95:43:5a:f1:de:00:c7:00:e3:7d:6c:
e4:3c:8c:e4:00:53:d3:7e:b4:4c:02:c4:4d:e5:46:37:32:33:
34:1d:65:4c:4f:84:0f:47:e4:dd:80:b0:31:d4:67:b4:be:e8:
a5:55:fc:32:79:40:b1:71:8e:d5:b7:45:51:67:72:85:2c:15:
84:50:5d:27:8b:39:72:a0:16:2a:29:35:94:97:6e:1d:ed:fa:
b3:d5:63:c0:ae:67:38:c8:a7:b5:9f:23:67:ea:74:37:ee:08:
16:e1:f0:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijR/dTvhpp08V3HU/GcE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjUwMTAxMTU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjViNzJiZGZmNmY4NGI4MWU2MjkxMDU5ZTI5ODk1NGQ2NjIyZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpdS5o7L8JY0rBA3zqoi000qRNJd
yYi3mU6tu+G5o+ddF9QMzzppXG8y3rl8tnf2U1FNhtgG8q/OwIe0ulURuOKYjAD0
h39QpgjEh8d74g9Ugru5BpZs2Vofp4y9TA/9ZyvnrreR2qeEIrx7egce2iGry56W
qfcN7NGnvmWh/z7EQICEw/uQQXCnd8gEYP0NAhtR+3mFONUPZy+iPzwj2fwBd7Pd
5kzWhWUIfncLc9JKCKqPwfmJc06BIsnIOD5VgE16PdqmjvqWBC6ILffSrn5jS0pP
ILd2kelVEV0Et0QH7OWp7UX2o3bi/rVvHy5tCEkPre7oCbruvbiA9TuVCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI9bcr3/b4S4HmKRBZ4piVTWYi2pMB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvajF0eXZmOXZoTGdlWXBFRm5pbUpWTlppTGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf8/AwQA
W1xwMA0GCSqGSIb3DQEBCwUAA4IBAQAtZ5o3pNQCY6A38sc2g1qmEW4/ZY8MsPuz
V1Gtx+WV0E8/wTm9ye0kg7RpjQ4BPa3E2HasQnKkoNcO1tDlFxNe+xHYVWRVL3JK
jOuE4PYX7mxr+b6iPBA0iAKSgysPqTldQvPwn9K0pEihQhEVFowSgNsq4aGZEibW
qyK71J5NWf/jbHvntaOdH8lzCa7jYfKi2+Di0g4qlUNa8d4AxwDjfWzkPIzkAFPT
frRMAsRN5UY3MjM0HWVMT4QPR+TdgLAx1Ge0vuilVfwyeUCxcY7Vt0VRZ3KFLBWE
UF0nizlyoBYqKTWUl24d7fqz1WPArmc4yKe1nyNn6nQ37ggW4fDP
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:02 2025 by rpki-client