Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/j1-fP3sdEayV1bR9GGOFSeW4cN0.roa
File: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (raw, json)
Hash identifier: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=
Subject key identifier: 8F:5F:9F:3F:7B:1D:11:AC:95:D5:B4:7D:18:63:85:49:E5:B8:70:DD
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019421B2327777AAFCF0837002719E3D9F88
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/j1-fP3sdEayV1bR9GGOFSeW4cN0.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64475
IP address blocks: 45.157.8.0/23 maxlen: 24
2a0f:3785::/32 maxlen: 48
2a0f:3786::/40 maxlen: 40
2a0f:3786:10::/44 maxlen: 44
2a0f:3786:20::/44 maxlen: 44
2a0f:3786:80::/41 maxlen: 48
2a0f:3786:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:77:77:aa:fc:f0:83:70:02:71:9e:3d:9f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5f9f3f7b1d11ac95d5b47d18638549e5b870dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:ca:30:77:90:06:e2:ee:26:ca:0d:49:e9:
08:a1:55:f0:59:85:50:16:29:19:2b:ef:9f:ce:fe:
79:67:3a:db:d9:a5:c0:4b:9c:87:a4:42:ac:af:ee:
02:96:c0:87:c3:9d:e0:cb:43:95:1a:ab:77:14:c2:
48:a9:8d:a4:1d:99:d6:09:80:a7:28:2f:10:6f:bb:
b1:67:4b:9d:12:3f:b4:c5:a8:43:17:51:a3:22:3b:
fd:b9:87:f9:cb:f1:9b:31:8f:f2:28:30:c2:ad:76:
07:5a:22:51:2b:40:85:1c:ea:14:a1:87:f6:8a:78:
2e:e6:39:e9:7e:24:7c:ec:83:21:69:ce:a4:b8:5b:
43:32:b0:f9:cf:aa:91:b4:b5:2f:f8:1e:5a:20:0d:
48:35:12:05:63:e5:32:9f:64:95:25:ab:71:4c:86:
3b:6a:fb:e4:b0:6d:2e:c4:d9:35:05:73:a1:9e:9a:
18:a9:70:93:d2:d7:12:cd:e5:6a:ae:c1:96:4a:f4:
2b:5a:08:c7:2f:b2:b9:78:9a:94:0e:8d:34:25:d0:
4a:7a:9c:c7:b5:c1:24:ae:f7:26:3c:d2:19:c5:f0:
59:75:d9:2e:9b:22:0c:d1:5e:b6:66:96:35:c0:17:
24:e7:b6:ec:56:b1:b8:ef:6a:55:5c:c0:d4:70:72:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5F:9F:3F:7B:1D:11:AC:95:D5:B4:7D:18:63:85:49:E5:B8:70:DD
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/j1-fP3sdEayV1bR9GGOFSeW4cN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.8.0/23
IPv6:
2a0f:3785::-2a0f:3786:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:a5:b5:9c:d2:54:0d:52:4f:7f:9a:c2:44:48:76:44:e5:72:
1e:d1:f4:27:3d:09:8e:ee:48:ab:bd:a7:19:06:9a:03:86:2f:
3a:0d:d0:6a:52:9a:3c:29:52:7a:6e:a0:41:77:40:c8:44:c8:
e8:92:41:aa:e0:54:4e:8a:ea:52:36:07:c8:0b:10:da:65:a3:
df:0e:e9:31:b8:58:59:97:7d:a8:28:10:a2:b5:a3:67:79:f5:
a8:5a:be:03:73:e3:10:09:ce:e8:90:ae:b1:93:cb:ed:75:74:
32:18:f4:87:46:29:d8:6c:38:07:98:fb:a4:ef:1c:84:9c:e5:
a7:51:3c:c0:06:5c:b9:91:2b:d7:44:59:61:72:24:1f:89:db:
d9:9f:1e:6f:a3:82:65:09:48:3d:fc:6a:f8:8d:70:e1:48:2c:
b3:a9:ff:16:d7:78:3f:43:94:24:d5:d4:30:55:1b:6f:36:40:
d7:0e:63:30:bf:6f:b1:34:d8:65:e9:fa:f4:37:e3:d2:a7:16:
db:84:ea:d7:53:2d:5a:0a:63:f4:7b:73:33:5d:34:4c:f8:2a:
98:73:c6:3f:bc:04:19:7f:37:a7:ff:dc:02:35:d9:a5:af:cb:
3b:34:32:45:5c:fc:e7:80:88:18:03:68:9c:35:8d:8f:21:d0:
52:81:65:93
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQhsjJ3d6r88INwAnGePZ+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3
ZmRkNDgwHhcNMjUwMTAxMTE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjVmOWYzZjdiMWQxMWFjOTVkNWI0N2QxODYzODU0OWU1Yjg3MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2fKMHeQBuLuJsoNSekIoVXwWYVQ
FikZK++fzv55Zzrb2aXAS5yHpEKsr+4ClsCHw53gy0OVGqt3FMJIqY2kHZnWCYCn
KC8Qb7uxZ0udEj+0xahDF1GjIjv9uYf5y/GbMY/yKDDCrXYHWiJRK0CFHOoUoYf2
ingu5jnpfiR87IMhac6kuFtDMrD5z6qRtLUv+B5aIA1INRIFY+Uyn2SVJatxTIY7
avvksG0uxNk1BXOhnpoYqXCT0tcSzeVqrsGWSvQrWgjHL7K5eJqUDo00JdBKepzH
tcEkrvcmPNIZxfBZddkumyIM0V62ZpY1wBck57bsVrG472pVXMDUcHKvFQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI9fnz97HRGsldW0fRhjhUnluHDdMB8GA1UdIwQY
MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt
YzVmZWJlNDg3YzQwLzEvajEtZlAzc2RFYXlWMWJSOUdHT0ZTZVc0Y04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw
LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBLZ0IMBgE
AgACMBIwEAMFACoPN4UDBwAqDzeGAQAwDQYJKoZIhvcNAQELBQADggEBABWltZzS
VA1ST3+awkRIdkTlch7R9Cc9CY7uSKu9pxkGmgOGLzoN0GpSmjwpUnpuoEF3QMhE
yOiSQargVE6K6lI2B8gLENplo98O6TG4WFmXfagoEKK1o2d59ahavgNz4xAJzuiQ
rrGTy+11dDIY9IdGKdhsOAeY+6TvHISc5adRPMAGXLmRK9dEWWFyJB+J29mfHm+j
gmUJSD38aviNcOFILLOp/xbXeD9DlCTV1DBVG282QNcOYzC/b7E02GXp+vQ349Kn
FtuE6tdTLVoKY/R7czNdNEz4Kphzxj+8BBl/N6f/3AI12aWvyzs0MkVc/OeAiBgD
aJw1jY8h0FKBZZM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:51 2025 by rpki-client