Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa
File: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (raw, json)
Hash identifier: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=
Subject key identifier: 8D:9D:51:01:F4:73:9C:AB:E8:38:1D:7F:8E:7B:D4:D6:9F:65:BD:79
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 019424B3FC390D9ED07518C15991EE5E5035
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211109
IP address blocks: 85.209.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fc:39:0d:9e:d0:75:18:c1:59:91:ee:5e:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d9d5101f4739cabe8381d7f8e7bd4d69f65bd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:18:fe:6a:b8:68:7f:87:c9:eb:a4:e4:26:
1f:48:dd:2c:c7:50:ed:4b:6c:c9:78:67:a1:ef:b3:
a8:f9:a6:a4:e7:ca:15:3c:57:88:dd:b7:84:78:ae:
39:6b:ea:de:ff:ad:16:f6:e8:2c:b9:12:0b:0e:ec:
43:44:82:fa:7b:74:c2:63:e1:00:df:e0:80:85:7e:
a7:94:e0:e7:e5:14:42:54:99:22:30:ef:e2:06:b6:
ac:c4:b5:e6:70:77:00:31:13:02:dd:74:01:49:2a:
e5:1d:d5:4e:96:25:35:f7:35:7d:7d:9a:40:db:18:
da:91:10:13:7c:2e:f4:25:91:93:4b:13:c9:4b:67:
2f:bf:77:0a:5f:07:e1:0f:d9:02:d0:df:21:a8:c2:
0e:99:30:f1:68:60:fc:2c:46:08:99:57:14:45:c3:
a0:cc:01:80:89:b1:45:b6:09:9d:8f:72:98:be:b7:
c5:51:45:c8:b7:fd:26:cb:d1:35:f0:d9:cf:0b:56:
17:37:2b:fc:2e:d1:04:6c:2a:4d:08:5d:a5:cf:2d:
2a:5f:68:88:c6:cb:08:b3:43:15:23:46:30:52:83:
8f:dc:f0:52:4d:7f:0a:03:86:75:07:2d:b5:53:79:
c6:af:e5:33:da:92:6c:56:59:e7:56:87:21:70:6d:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:51:01:F4:73:9C:AB:E8:38:1D:7F:8E:7B:D4:D6:9F:65:BD:79
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.236.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b0:d1:63:f4:f4:86:f7:ea:b6:f5:9b:71:bb:10:c6:a9:d7:
3a:07:16:75:0d:3b:2d:0d:26:e1:40:e6:7c:2b:de:da:e3:a5:
da:05:6f:59:fc:eb:d0:96:83:43:44:4d:60:a1:9b:97:b6:0d:
67:a6:11:e3:d6:b8:72:02:d2:ed:07:f9:ca:f5:0a:fd:d4:31:
a8:b9:c8:12:d6:11:48:df:1e:ad:c7:68:70:f2:78:0f:86:28:
4f:22:fb:8b:28:40:08:c9:da:fd:9f:d6:d1:27:50:00:76:d1:
b7:b7:23:38:b7:64:2b:1c:1e:1e:d0:6d:c6:24:ca:45:9c:4c:
87:04:dc:35:9a:72:4b:a9:6d:2f:8e:37:55:c7:4f:e8:87:4c:
a1:0c:b5:71:dc:f7:a3:31:a5:79:b2:e5:5d:d0:c9:0c:9a:90:
47:ef:d5:0e:25:30:62:db:d4:1d:21:80:60:b9:fb:d9:81:06:
75:81:f2:97:43:b6:82:cf:f5:20:ca:94:bc:da:c5:5c:cd:70:
f2:78:6b:2e:8e:3e:83:c7:6f:1d:eb:5b:2b:f4:49:52:4a:06:
73:de:61:cf:db:07:12:b7:3c:37:b0:e1:d4:d7:61:0d:1e:b1:
b7:ca:ed:be:3d:56:70:9b:82:e9:27:97:19:51:8d:e3:ef:f0:
fa:53:63:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks/w5DZ7QdRjBWZHuXlA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDUwYjk4MDcxNTBkYTM5NjMyMmI5ZDRkY2ZjMGQyZmIy
YjY1MjAwHhcNMjUwMTAyMDE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDlkNTEwMWY0NzM5Y2FiZTgzODFkN2Y4ZTdiZDRkNjlmNjViZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvsY/mq4aH+Hyeuk5CYfSN0sx1Dt
S2zJeGeh77Oo+aak58oVPFeI3beEeK45a+re/60W9ugsuRILDuxDRIL6e3TCY+EA
3+CAhX6nlODn5RRCVJkiMO/iBrasxLXmcHcAMRMC3XQBSSrlHdVOliU19zV9fZpA
2xjakRATfC70JZGTSxPJS2cvv3cKXwfhD9kC0N8hqMIOmTDxaGD8LEYImVcURcOg
zAGAibFFtgmdj3KYvrfFUUXIt/0my9E18NnPC1YXNyv8LtEEbCpNCF2lzy0qX2iI
xssIs0MVI0YwUoOP3PBSTX8KA4Z1By21U3nGr+Uz2pJsVlnnVochcG3VyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2dUQH0c5yr6Dgdf4571NafZb15MB8GA1UdIwQY
MBaAFAHVC5gHFQ2jljIrnU3PwNL7K2UgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODkt
ODEyNGJkOTQ5YjBlLzEvaloxUkFmUnpuS3ZvT0IxX2pudlUxcDlsdlhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODktODEyNGJkOTQ5YjBl
LzEvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdHsMA0G
CSqGSIb3DQEBCwUAA4IBAQCGsNFj9PSG9+q29ZtxuxDGqdc6BxZ1DTstDSbhQOZ8
K97a46XaBW9Z/OvQloNDRE1goZuXtg1nphHj1rhyAtLtB/nK9Qr91DGoucgS1hFI
3x6tx2hw8ngPhihPIvuLKEAIydr9n9bRJ1AAdtG3tyM4t2QrHB4e0G3GJMpFnEyH
BNw1mnJLqW0vjjdVx0/oh0yhDLVx3PejMaV5suVd0MkMmpBH79UOJTBi29QdIYBg
ufvZgQZ1gfKXQ7aCz/UgypS82sVczXDyeGsujj6Dx28d61sr9ElSSgZz3mHP2wcS
tzw3sOHU12ENHrG3yu2+PVZwm4LpJ5cZUY3j7/D6U2OM
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:32 2025 by rpki-client