Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JZvyn9etRbXjoocBllh7CNIOWtQ.roa
File: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (raw, json)
Hash identifier: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=
Subject key identifier: 25:9B:F2:9F:D7:AD:45:B5:E3:A2:87:01:96:58:7B:08:D2:0E:5A:D4
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0194221F956AFAC2D53B93605B186F1340E9
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JZvyn9etRbXjoocBllh7CNIOWtQ.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200333
IP address blocks: 194.156.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:95:6a:fa:c2:d5:3b:93:60:5b:18:6f:13:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=259bf29fd7ad45b5e3a2870196587b08d20e5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:4b:36:d4:9e:88:50:42:e1:32:02:25:31:
e8:6a:ef:8e:11:aa:af:05:f2:21:7b:8f:c8:78:f8:
9c:52:08:f9:28:49:2b:35:6f:3f:c6:5d:46:ab:01:
ee:06:21:2e:c1:a0:51:a0:e3:1f:df:d2:ac:56:33:
6b:84:c5:4c:46:e9:14:08:65:9f:47:04:2d:fd:98:
3c:7a:2f:a6:e0:26:ee:b8:be:0e:65:f3:c6:49:cd:
50:cf:c2:af:13:55:ec:d3:66:ff:a8:88:89:8f:ba:
fd:75:a0:59:6a:d2:8f:4e:51:c3:25:5b:c1:1c:a0:
65:da:97:09:04:de:28:b5:4b:6b:4f:f9:5c:ab:8d:
97:ca:e4:9c:00:4d:aa:12:9c:32:f6:bf:f1:64:db:
31:da:29:7e:fa:20:38:b9:2d:cd:e7:92:6b:aa:1e:
7c:20:10:f8:71:59:2a:3d:5b:63:de:e8:78:76:5e:
42:f6:be:61:80:9a:83:dd:93:6b:77:b3:e3:40:52:
6d:01:cc:73:61:5d:3f:d2:b7:31:7c:fe:4e:2e:63:
cd:34:1f:61:38:31:c0:0a:60:35:ff:54:bd:0d:d6:
74:8f:83:94:d5:92:f2:dc:a6:17:80:de:27:ac:d4:
9e:6d:60:61:fa:2f:c1:c3:c5:71:28:9d:6f:50:2b:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:F2:9F:D7:AD:45:B5:E3:A2:87:01:96:58:7B:08:D2:0E:5A:D4
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JZvyn9etRbXjoocBllh7CNIOWtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:95:b3:72:77:0c:4d:1d:f4:a4:24:26:ed:eb:d6:8b:39:fe:
db:87:69:bf:58:f0:a0:4a:1f:d2:65:0c:74:84:2a:19:f1:d5:
e6:12:83:c9:6d:14:71:31:60:dd:d7:69:a5:43:cf:f0:15:e0:
27:5b:c5:b8:0c:2b:04:b2:18:81:1e:67:33:58:5e:e2:e6:94:
41:8f:36:d1:9b:37:3d:7c:4b:79:52:c2:51:9d:fe:4f:29:77:
cb:fc:f0:56:70:54:c7:d3:b6:50:c6:3e:dd:66:e4:34:fe:6f:
9c:e0:aa:8d:62:a2:e1:75:b5:6f:17:c6:02:94:b9:80:b8:70:
57:2b:3f:76:d7:29:bd:5f:4b:91:dd:9a:96:0b:14:88:78:42:
84:9c:01:9f:cb:3b:6c:28:ff:00:c1:39:1c:6c:ef:df:e8:dd:
85:17:ad:6a:ae:19:48:25:87:de:11:92:fb:a6:ac:f0:43:2a:
c8:95:3e:f0:21:51:73:35:67:ec:59:d4:36:38:30:61:9b:2b:
6d:20:e8:45:e4:b9:44:81:e4:a6:c4:1c:3e:c1:e6:38:b5:56:
f3:6e:97:8f:d2:f1:5a:ac:49:79:0a:a9:eb:5d:4f:8b:ba:57:
e5:f2:2d:ff:95:da:6b:96:a1:8c:a3:01:fe:69:b2:73:67:8b:
5c:f9:c3:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH5Vq+sLVO5NgWxhvE0DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4
ZWNkY2IwHhcNMjUwMTAxMTM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTliZjI5ZmQ3YWQ0NWI1ZTNhMjg3MDE5NjU4N2IwOGQyMGU1YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFZLNtSeiFBC4TICJTHoau+OEaqv
BfIhe4/IePicUgj5KEkrNW8/xl1GqwHuBiEuwaBRoOMf39KsVjNrhMVMRukUCGWf
RwQt/Zg8ei+m4CbuuL4OZfPGSc1Qz8KvE1Xs02b/qIiJj7r9daBZatKPTlHDJVvB
HKBl2pcJBN4otUtrT/lcq42XyuScAE2qEpwy9r/xZNsx2il++iA4uS3N55Jrqh58
IBD4cVkqPVtj3uh4dl5C9r5hgJqD3ZNrd7PjQFJtAcxzYV0/0rcxfP5OLmPNNB9h
ODHACmA1/1S9DdZ0j4OU1ZLy3KYXgN4nrNSebWBh+i/Bw8VxKJ1vUCtP7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWb8p/XrUW146KHAZZYewjSDlrUMB8GA1UdIwQY
MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt
NDAxYmRhNDQ3N2I1LzEvSlp2eW45ZXRSYlhqb29jQmxsaDdDTklPV3RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1
LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpz4MA0G
CSqGSIb3DQEBCwUAA4IBAQDGlbNydwxNHfSkJCbt69aLOf7bh2m/WPCgSh/SZQx0
hCoZ8dXmEoPJbRRxMWDd12mlQ8/wFeAnW8W4DCsEshiBHmczWF7i5pRBjzbRmzc9
fEt5UsJRnf5PKXfL/PBWcFTH07ZQxj7dZuQ0/m+c4KqNYqLhdbVvF8YClLmAuHBX
Kz921ym9X0uR3ZqWCxSIeEKEnAGfyztsKP8AwTkcbO/f6N2FF61qrhlIJYfeEZL7
pqzwQyrIlT7wIVFzNWfsWdQ2ODBhmyttIOhF5LlEgeSmxBw+weY4tVbzbpeP0vFa
rEl5CqnrXU+Lulfl8i3/ldprlqGMowH+abJzZ4tc+cOi
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:04 2025 by rpki-client