Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JphQvWlvq3L5QckEh9J2Yif0qCU.roa
File: JphQvWlvq3L5QckEh9J2Yif0qCU.roa (raw, json)
Hash identifier: vK3MNTLgBdaj4wjs8mJuSix0tNPH1K1XcR9hR6qQM0E=
Subject key identifier: 26:98:50:BD:69:6F:AB:72:F9:41:C9:04:87:D2:76:62:27:F4:A8:25
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E2C5AD40DC5B39FF72575D5F0807
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JphQvWlvq3L5QckEh9J2Yif0qCU.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 109.176.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e2:c5:ad:40:dc:5b:39:ff:72:57:5d:5f:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=269850bd696fab72f941c90487d2766227f4a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:02:e1:b4:5c:76:dc:c4:89:70:1b:69:6a:
a4:6d:50:5f:b6:74:4e:4e:64:5f:03:97:e0:5d:05:
5c:38:a3:31:0b:19:88:b0:35:5b:08:9b:2c:aa:04:
7f:96:29:f6:00:6e:47:b4:c8:6c:39:a0:67:02:f3:
fa:bd:cc:3d:73:69:9b:e5:ac:eb:65:8a:ac:a9:ed:
3e:3f:cf:22:a0:b9:da:b6:a4:2d:0a:09:d0:52:17:
b5:d7:78:76:aa:a2:91:48:82:0e:76:cf:df:ff:55:
ca:1f:e4:e2:a0:73:86:b5:f2:bc:36:06:1a:20:84:
34:f3:15:99:cc:02:66:20:fe:cd:7d:9a:f2:75:c7:
5a:66:23:9c:8f:5d:f3:a0:3d:db:54:85:5c:af:2a:
30:86:23:28:da:9a:11:ab:aa:08:dc:dc:29:e8:fd:
40:5f:00:9a:50:a9:69:da:b3:69:09:97:45:4f:78:
61:49:98:ca:1d:cb:b9:81:ec:ad:23:35:05:58:93:
c0:9a:68:09:29:cc:f3:d5:10:8a:34:cc:e6:ab:93:
cc:99:62:41:13:21:74:d0:53:8b:0f:ba:5a:c0:15:
40:90:4d:51:ad:16:6a:99:04:01:17:a2:d2:44:41:
e0:db:b8:0c:73:be:8b:54:de:2e:e0:a0:d4:f0:26:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:50:BD:69:6F:AB:72:F9:41:C9:04:87:D2:76:62:27:F4:A8:25
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JphQvWlvq3L5QckEh9J2Yif0qCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f6:2d:a6:dd:b5:7d:07:fd:81:16:a4:96:f6:7f:9b:b4:81:
ed:c3:85:81:0a:39:fc:05:1a:1e:64:1f:9a:a3:00:64:95:f5:
89:84:9c:9b:57:42:d8:af:ab:29:de:d6:41:d8:6a:19:31:59:
d6:b8:ee:6e:c2:0a:1e:f7:96:17:3f:fc:76:2d:f7:88:04:f2:
66:fc:36:71:17:60:54:37:71:00:09:33:89:01:d6:97:bd:c6:
17:a4:aa:9a:fb:79:f0:b7:80:0c:19:d2:8f:54:27:68:04:68:
97:26:05:d9:8d:ec:e3:8c:4c:db:f8:44:1e:c4:ad:69:15:ee:
8e:e9:56:53:8d:86:ef:e0:fa:3e:95:2c:aa:c5:c7:ff:17:72:
eb:98:03:7c:2d:98:9b:57:23:ae:8c:a5:b7:14:2a:b7:51:76:
05:5d:e9:0f:42:bd:aa:64:9b:0d:35:51:bc:54:f9:d2:76:6d:
a1:dd:25:37:d7:63:c3:cc:e6:94:ac:b1:81:dc:08:7b:bb:4a:
b3:e4:9e:f5:d4:aa:9d:4b:b7:51:3b:b3:57:d9:67:95:e2:bb:
c4:9c:25:3f:94:49:38:1f:3c:fa:9f:d3:ec:54:17:a5:ba:bd:
50:4f:e4:1b:b8:9e:1a:48:5e:85:bc:fd:3d:cd:8a:4c:d7:31:
e3:2c:a6:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+LFrUDcWzn/clddXwgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk4NTBiZDY5NmZhYjcyZjk0MWM5MDQ4N2QyNzY2MjI3ZjRhODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4icC4bRcdtzEiXAbaWqkbVBftnRO
TmRfA5fgXQVcOKMxCxmIsDVbCJssqgR/lin2AG5HtMhsOaBnAvP6vcw9c2mb5azr
ZYqsqe0+P88ioLnatqQtCgnQUhe113h2qqKRSIIOds/f/1XKH+TioHOGtfK8NgYa
IIQ08xWZzAJmIP7NfZrydcdaZiOcj13zoD3bVIVcryowhiMo2poRq6oI3Nwp6P1A
XwCaUKlp2rNpCZdFT3hhSZjKHcu5geytIzUFWJPAmmgJKczz1RCKNMzmq5PMmWJB
EyF00FOLD7pawBVAkE1RrRZqmQQBF6LSREHg27gMc76LVN4u4KDU8Ca1ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaYUL1pb6ty+UHJBIfSdmIn9KglMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSnBoUXZXbHZxM0w1UWNrRWg5SjJZaWYwcUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD6MA0G
CSqGSIb3DQEBCwUAA4IBAQCi9i2m3bV9B/2BFqSW9n+btIHtw4WBCjn8BRoeZB+a
owBklfWJhJybV0LYr6sp3tZB2GoZMVnWuO5uwgoe95YXP/x2LfeIBPJm/DZxF2BU
N3EACTOJAdaXvcYXpKqa+3nwt4AMGdKPVCdoBGiXJgXZjezjjEzb+EQexK1pFe6O
6VZTjYbv4Po+lSyqxcf/F3LrmAN8LZibVyOujKW3FCq3UXYFXekPQr2qZJsNNVG8
VPnSdm2h3SU312PDzOaUrLGB3Ah7u0qz5J711KqdS7dRO7NX2WeV4rvEnCU/lEk4
Hzz6n9PsVBelur1QT+QbuJ4aSF6FvP09zYpM1zHjLKY6
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:59 2025 by rpki-client