Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/J9EfRVewePQYGlLe8kNseKQHxJk.roa
File: J9EfRVewePQYGlLe8kNseKQHxJk.roa (raw, json)
Hash identifier: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=
Subject key identifier: 27:D1:1F:45:57:B0:78:F4:18:1A:52:DE:F2:43:6C:78:A4:07:C4:99
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D90EDCCB2661D15EA0134BA5738E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/J9EfRVewePQYGlLe8kNseKQHxJk.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 88.80.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d9:0e:dc:cb:26:61:d1:5e:a0:13:4b:a5:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27d11f4557b078f4181a52def2436c78a407c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:a0:05:1d:67:eb:10:38:4e:af:60:52:57:
a7:84:d0:13:a3:34:67:65:87:a0:75:81:c6:69:e7:
c3:a4:fb:09:e4:28:72:c7:47:d2:22:1d:12:c0:5c:
62:41:10:1e:f7:a9:bf:87:33:60:bd:fd:11:1a:99:
d3:e3:e9:81:1c:e9:6e:76:ca:88:15:93:54:61:52:
87:1d:2d:a7:96:ab:d4:aa:53:91:2a:de:1d:f4:2f:
d3:cd:c4:6c:09:07:b3:4b:af:4b:4a:e5:f5:04:94:
e5:b7:03:85:7e:62:98:5b:59:6b:cb:68:ac:f4:20:
83:1c:a4:02:f5:8a:85:ef:af:01:9b:65:63:6a:d4:
6d:9a:fb:93:28:75:e8:3e:37:24:e7:37:db:e1:02:
ff:b9:26:c8:84:af:e9:95:7b:e5:ab:fb:c1:17:22:
11:17:f4:c1:7b:41:44:d0:85:5a:97:47:b0:ea:07:
7f:c2:eb:93:c8:c7:07:24:e0:91:c4:76:8a:49:63:
fe:28:ea:03:fc:30:24:b6:ef:b5:8d:7f:4b:1b:a4:
b4:d6:e2:9c:25:d7:28:ac:3e:c0:67:b6:97:10:40:
57:8d:77:53:8a:2b:22:fa:dc:54:34:81:d9:f5:01:
d0:e2:6a:48:99:9e:ba:c5:dc:1f:05:0f:13:f5:54:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:1F:45:57:B0:78:F4:18:1A:52:DE:F2:43:6C:78:A4:07:C4:99
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/J9EfRVewePQYGlLe8kNseKQHxJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ff:74:b4:1f:35:eb:78:5d:7b:45:9b:ae:6c:fe:85:a7:15:
81:2f:0b:aa:44:8f:58:69:29:d4:f7:d2:75:37:cf:f4:e1:ad:
1b:af:6c:f2:e9:ba:99:c6:ea:03:9a:fd:40:80:94:9a:79:82:
ae:15:56:f9:57:0a:14:47:c3:eb:34:86:37:be:84:02:69:b3:
1c:3d:ba:10:7a:84:6f:c5:75:a0:b0:b2:0a:5a:d9:4c:1f:18:
98:fd:50:8c:20:aa:7c:e7:38:38:c8:f0:56:5a:06:41:31:af:
1d:18:18:e0:fa:5b:f7:36:96:0b:87:ef:99:c7:c4:a6:f0:2b:
2e:ba:51:bc:4d:91:ce:a9:ba:35:fd:05:df:9b:a5:ab:85:64:
8e:e4:a2:8e:3f:42:5d:37:58:28:94:05:f3:ee:28:41:3b:a9:
ad:ab:51:2f:39:70:c5:60:5b:8f:d5:73:8a:91:60:09:57:fc:
8d:91:8e:0f:a0:e6:20:d6:d3:8b:43:1b:5a:28:42:00:b2:67:
37:fa:5e:c4:50:e9:8c:ac:af:50:de:f0:ab:4f:e7:d8:7c:05:
7b:79:d1:57:7b:db:67:43:eb:16:12:99:7c:34:0f:7c:4a:67:
09:f7:8c:26:73:45:d9:16:cf:3c:cd:c4:06:2f:56:07:d6:58:
92:50:83:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRNkO3MsmYdFeoBNLpXOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMTAxMjM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2QxMWY0NTU3YjA3OGY0MTgxYTUyZGVmMjQzNmM3OGE0MDdjNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS+gBR1n6xA4Tq9gUlenhNATozRn
ZYegdYHGaefDpPsJ5Chyx0fSIh0SwFxiQRAe96m/hzNgvf0RGpnT4+mBHOludsqI
FZNUYVKHHS2nlqvUqlORKt4d9C/TzcRsCQezS69LSuX1BJTltwOFfmKYW1lry2is
9CCDHKQC9YqF768Bm2VjatRtmvuTKHXoPjck5zfb4QL/uSbIhK/plXvlq/vBFyIR
F/TBe0FE0IVal0ew6gd/wuuTyMcHJOCRxHaKSWP+KOoD/DAktu+1jX9LG6S01uKc
JdcorD7AZ7aXEEBXjXdTiisi+txUNIHZ9QHQ4mpImZ66xdwfBQ8T9VRUeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfRH0VXsHj0GBpS3vJDbHikB8SZMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvSjlFZlJWZXdlUFFZR2xMZThrTnNlS1FIeEprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCIMA0G
CSqGSIb3DQEBCwUAA4IBAQAq/3S0HzXreF17RZuubP6FpxWBLwuqRI9YaSnU99J1
N8/04a0br2zy6bqZxuoDmv1AgJSaeYKuFVb5VwoUR8PrNIY3voQCabMcPboQeoRv
xXWgsLIKWtlMHxiY/VCMIKp85zg4yPBWWgZBMa8dGBjg+lv3NpYLh++Zx8Sm8Csu
ulG8TZHOqbo1/QXfm6WrhWSO5KKOP0JdN1golAXz7ihBO6mtq1EvOXDFYFuP1XOK
kWAJV/yNkY4PoOYg1tOLQxtaKEIAsmc3+l7EUOmMrK9Q3vCrT+fYfAV7edFXe9tn
Q+sWEpl8NA98SmcJ94wmc0XZFs88zcQGL1YH1liSUIOr
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:07:56 2025 by rpki-client