Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/jyQjff39PkjIcb2c4y6sicxo6PU.roa
File: jyQjff39PkjIcb2c4y6sicxo6PU.roa (raw, json)
Hash identifier: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=
Subject key identifier: 8F:24:23:7D:FD:FD:3E:48:C8:71:BD:9C:E3:2E:AC:89:CC:68:E8:F5
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 019423D79F658313F0B19B84BAE22767034A
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/jyQjff39PkjIcb2c4y6sicxo6PU.roa
Signing time: Wed 01 Jan 2025 21:48:41 +0000
ROA not before: Wed 01 Jan 2025 21:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35535
IP address blocks: 80.241.112.0/20 maxlen: 20
80.241.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:9f:65:83:13:f0:b1:9b:84:ba:e2:27:67:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Jan 1 21:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f24237dfdfd3e48c871bd9ce32eac89cc68e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:fe:0a:93:f0:3d:e4:6a:0f:9b:f3:74:eb:
ff:4a:93:e4:f7:54:b5:f5:37:78:45:56:de:70:c0:
be:65:24:07:6c:e4:81:45:cf:6d:c9:e4:a6:4f:e2:
71:58:26:4e:be:4d:ad:a1:d9:4c:08:5e:9d:1a:43:
4b:53:c3:ed:79:46:3d:ba:01:69:bd:a1:04:70:b6:
93:d6:3c:28:ec:ef:f0:36:ca:0d:86:75:94:4c:ca:
26:40:8c:47:ca:db:94:4b:ea:63:d1:1d:d9:63:3d:
1d:cc:b9:15:d4:39:67:be:e5:e6:37:2d:a8:7c:45:
dd:72:54:a4:d4:58:d1:38:49:e5:30:40:9c:05:03:
a6:ea:54:d1:ff:57:73:ae:6e:bf:fe:05:72:98:ea:
38:b1:69:5d:a3:dd:f5:f3:fb:75:6a:60:2c:8a:bd:
69:96:1c:7f:d6:18:ce:8c:e9:df:74:31:3f:ab:30:
17:8e:d0:ae:fb:06:c0:61:4c:36:a3:14:c6:82:f3:
d6:b3:c6:c4:09:b6:e9:9e:3d:07:99:36:81:fa:5d:
57:a6:cf:42:14:dd:4c:e0:4a:01:ca:fc:fd:5d:fe:
98:f9:f0:68:00:e6:3a:94:19:50:6d:12:21:da:e6:
e9:8b:3b:89:c7:3c:4d:3a:3d:9d:1f:ef:2b:ba:f6:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:23:7D:FD:FD:3E:48:C8:71:BD:9C:E3:2E:AC:89:CC:68:E8:F5
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/jyQjff39PkjIcb2c4y6sicxo6PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.112.0/20
Signature Algorithm: sha256WithRSAEncryption
40:3b:ee:06:c8:24:82:05:3d:91:80:34:ab:73:9b:f4:e1:cb:
a7:f8:3e:88:dd:fc:cd:2c:a6:4e:f8:e3:77:a0:8a:7c:a3:75:
a0:2a:e4:94:ed:9e:53:48:68:7a:b8:42:ab:5f:65:19:dd:52:
ef:e8:82:f1:50:6f:87:cf:77:0d:f1:16:0e:42:e4:18:88:38:
14:63:92:11:f0:06:c1:25:4a:55:08:cd:67:b5:e9:6c:23:11:
bc:21:a2:fe:c1:22:2c:85:0b:8d:f9:ee:c2:c3:f4:6e:bd:aa:
e3:7f:c1:08:c9:a8:6b:de:61:65:c3:e4:53:62:f3:72:5b:93:
cb:00:2b:be:cf:9d:83:23:0d:38:b6:b6:ec:52:34:ae:fc:e4:
45:d7:b1:ef:87:3b:ba:5a:88:63:25:d7:e7:b3:6c:c6:42:9b:
7f:4d:67:58:02:58:2b:0b:e1:99:f7:05:2e:ba:62:3e:7b:c6:
74:87:05:3c:61:59:96:7e:01:24:f0:85:d1:89:b2:b8:69:d7:
9c:b3:3f:c3:71:3f:9b:9e:e8:ce:af:e2:bf:0f:93:ef:4e:bf:
7e:56:67:88:a3:1d:5a:2b:e7:b9:2c:41:10:a9:c0:12:a2:07:
fe:89:70:a6:02:27:b7:5f:db:ff:8c:70:bb:18:ea:e0:5a:6b:
f9:d5:da:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj159lgxPwsZuEuuInZwNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyYWJlZDg5MDhmMzI3Zjg2ZTJiMGFmMTVkNDgzMTA0
OWNlYWEwHhcNMjUwMTAxMjE0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjI0MjM3ZGZkZmQzZTQ4Yzg3MWJkOWNlMzJlYWM4OWNjNjhlOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCr+CpPwPeRqD5vzdOv/SpPk91S1
9Td4RVbecMC+ZSQHbOSBRc9tyeSmT+JxWCZOvk2todlMCF6dGkNLU8PteUY9ugFp
vaEEcLaT1jwo7O/wNsoNhnWUTMomQIxHytuUS+pj0R3ZYz0dzLkV1DlnvuXmNy2o
fEXdclSk1FjROEnlMECcBQOm6lTR/1dzrm6//gVymOo4sWldo9318/t1amAsir1p
lhx/1hjOjOnfdDE/qzAXjtCu+wbAYUw2oxTGgvPWs8bECbbpnj0HmTaB+l1Xps9C
FN1M4EoByvz9Xf6Y+fBoAOY6lBlQbRIh2ubpizuJxzxNOj2dH+8ruvZqZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8kI339/T5IyHG9nOMurInMaOj1MB8GA1UdIwQY
MBaAFDbqKr7YkI8yf4bisK8V1IMQSc6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt
N2E2MzU5MGEwNmJkLzEvanlRamZmMzlQa2pJY2IyYzR5NnNpY3hvNlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk
LzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPFwMA0G
CSqGSIb3DQEBCwUAA4IBAQBAO+4GyCSCBT2RgDSrc5v04cun+D6I3fzNLKZO+ON3
oIp8o3WgKuSU7Z5TSGh6uEKrX2UZ3VLv6ILxUG+Hz3cN8RYOQuQYiDgUY5IR8AbB
JUpVCM1ntelsIxG8IaL+wSIshQuN+e7Cw/Ruvarjf8EIyahr3mFlw+RTYvNyW5PL
ACu+z52DIw04trbsUjSu/ORF17Hvhzu6WohjJdfns2zGQpt/TWdYAlgrC+GZ9wUu
umI+e8Z0hwU8YVmWfgEk8IXRibK4adecsz/DcT+bnujOr+K/D5PvTr9+VmeIox1a
K+e5LEEQqcASogf+iXCmAie3X9v/jHC7GOrgWmv51doN
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:33:40 2025 by rpki-client