Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/_TJtE7-5a5UX2DefIW3iB1z5iGY.roa
File: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (raw, json)
Hash identifier: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=
Subject key identifier: FD:32:6D:13:BF:B9:6B:95:17:D8:37:9F:21:6D:E2:07:5C:F9:88:66
Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial: 0194258EEFE4F876811B86F555613FD600F5
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/_TJtE7-5a5UX2DefIW3iB1z5iGY.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11170
IP address blocks: 185.38.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ef:e4:f8:76:81:1b:86:f5:55:61:3f:d6:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd326d13bfb96b9517d8379f216de2075cf98866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:2e:8d:73:c6:ed:64:16:b5:3c:d5:df:3c:
7a:ea:16:b7:c2:4e:f6:8f:50:8b:6a:91:12:6d:bf:
96:43:ff:d5:e7:b8:52:d8:24:d7:79:34:01:50:f6:
24:15:b4:0a:7a:b0:04:3b:b4:bc:cc:2a:4c:23:13:
fc:d6:d3:f5:ad:67:33:22:83:13:67:49:b7:23:bf:
e6:01:21:02:ce:f2:3c:1e:a0:cf:77:16:33:74:7a:
33:2e:2c:44:38:94:d6:5d:dc:9f:e8:49:bd:75:7d:
89:5f:7f:f1:5c:bb:d6:49:6a:67:69:e7:ea:59:56:
51:0b:92:7e:0a:06:e5:9a:16:72:35:0e:98:c9:60:
9e:fc:fc:0e:f6:cc:6f:06:b3:b5:1e:be:82:53:cc:
a5:a3:8b:c9:c4:6a:67:5a:cd:78:89:1e:b3:57:1c:
86:16:4f:33:bf:c0:26:ee:53:24:15:c5:5a:8d:7a:
9b:b2:a6:7b:af:a0:d1:1b:d7:65:ce:d1:c8:1f:36:
dd:2a:3c:67:05:ef:36:98:67:06:99:e2:71:f0:c0:
2a:d4:44:7e:5a:cf:81:ea:06:fa:0b:4c:f4:0f:74:
87:b1:c3:ef:5c:29:6f:4d:02:55:c2:f1:70:4c:70:
b1:7c:fa:de:ac:35:a0:c1:21:2d:c6:65:2b:76:16:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:6D:13:BF:B9:6B:95:17:D8:37:9F:21:6D:E2:07:5C:F9:88:66
X509v3 Authority Key Identifier:
keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/_TJtE7-5a5UX2DefIW3iB1z5iGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.242.0/23
Signature Algorithm: sha256WithRSAEncryption
12:0e:00:14:7f:12:f2:08:78:cd:36:bd:87:f8:56:11:c8:91:
49:96:cb:4b:ab:e1:65:0a:36:07:68:c0:31:3d:80:6e:09:f8:
b9:68:c1:6b:12:18:92:2e:32:c4:21:b2:94:d0:5b:98:f9:a4:
0b:be:f1:b1:ef:65:2e:6c:d5:d7:c8:6f:f7:38:35:a8:d3:5a:
ca:eb:cc:73:d0:de:10:56:f6:22:f6:fc:3f:9e:86:2d:72:b2:
ad:81:cd:4e:b8:b4:68:38:fc:d9:46:bb:71:8c:68:50:f3:d5:
5f:21:6a:fe:92:eb:f6:af:0e:09:99:e3:55:9a:91:04:3d:84:
68:72:45:ad:88:f3:95:5f:bd:a3:06:cf:41:72:4a:31:0a:bd:
75:fa:9a:00:f2:81:06:3b:cd:58:d0:5c:10:6b:5e:3b:1e:8c:
57:1f:57:e4:51:c0:6d:03:3e:4f:1a:1c:2d:dd:84:ad:de:7f:
5a:4f:0c:ec:e2:da:1b:65:23:fa:30:62:cd:75:2b:d1:6e:1e:
90:c1:89:6e:f9:33:35:6d:9b:7d:42:5d:07:dd:e6:61:2e:d2:
1b:92:ca:28:e3:41:c6:ad:1b:b9:90:43:d0:ae:c1:24:41:0f:
a8:64:cc:b4:6a:11:28:68:c7:33:6f:f0:b7:36:1b:d6:82:d0:
01:c8:37:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlju/k+HaBG4b1VWE/1gD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx
Zjk2NzYwHhcNMjUwMTAyMDU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDMyNmQxM2JmYjk2Yjk1MTdkODM3OWYyMTZkZTIwNzVjZjk4ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV4ujXPG7WQWtTzV3zx66ha3wk72
j1CLapESbb+WQ//V57hS2CTXeTQBUPYkFbQKerAEO7S8zCpMIxP81tP1rWczIoMT
Z0m3I7/mASECzvI8HqDPdxYzdHozLixEOJTWXdyf6Em9dX2JX3/xXLvWSWpnaefq
WVZRC5J+CgblmhZyNQ6YyWCe/PwO9sxvBrO1Hr6CU8ylo4vJxGpnWs14iR6zVxyG
Fk8zv8Am7lMkFcVajXqbsqZ7r6DRG9dlztHIHzbdKjxnBe82mGcGmeJx8MAq1ER+
Ws+B6gb6C0z0D3SHscPvXClvTQJVwvFwTHCxfPrerDWgwSEtxmUrdhbUHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0ybRO/uWuVF9g3nyFt4gdc+YhmMB8GA1UdIwQY
MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt
YWVlYzdhODU5YzU5LzEvX1RKdEU3LTVhNVVYMkRlZklXM2lCMXo1aUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5
LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSbyMA0G
CSqGSIb3DQEBCwUAA4IBAQASDgAUfxLyCHjNNr2H+FYRyJFJlstLq+FlCjYHaMAx
PYBuCfi5aMFrEhiSLjLEIbKU0FuY+aQLvvGx72UubNXXyG/3ODWo01rK68xz0N4Q
VvYi9vw/noYtcrKtgc1OuLRoOPzZRrtxjGhQ89VfIWr+kuv2rw4JmeNVmpEEPYRo
ckWtiPOVX72jBs9BckoxCr11+poA8oEGO81Y0FwQa147HoxXH1fkUcBtAz5PGhwt
3YSt3n9aTwzs4tobZSP6MGLNdSvRbh6QwYlu+TM1bZt9Ql0H3eZhLtIbksoo40HG
rRu5kEPQrsEkQQ+oZMy0ahEoaMczb/C3NhvWgtAByDc6
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:01:55 2025 by rpki-client