Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/JCdeVSQVLryQs_floRfjIOg1IdA.roa
File: JCdeVSQVLryQs_floRfjIOg1IdA.roa (raw, json)
Hash identifier: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=
Subject key identifier: 24:27:5E:55:24:15:2E:BC:90:B3:F7:E5:A1:17:E3:20:E8:35:21:D0
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D66249E74A9BFE2F0C32D6C9262C01
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/JCdeVSQVLryQs_floRfjIOg1IdA.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214823
IP address blocks: 84.247.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:49:e7:4a:9b:fe:2f:0c:32:d6:c9:26:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24275e5524152ebc90b3f7e5a117e320e83521d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:5a:55:28:65:d3:9d:d5:d3:45:60:e4:cd:
fe:02:7f:85:7d:b1:1a:ac:89:69:89:bc:a5:42:6f:
5d:76:24:84:55:10:a3:77:8a:da:b8:81:ba:b1:91:
cc:62:6e:4f:a1:3a:10:2d:ce:03:96:4f:b6:d8:f6:
18:bc:9a:28:9d:4d:73:90:cd:0b:8c:62:70:53:6d:
10:75:64:e9:21:d6:46:31:3e:aa:56:8b:00:00:c2:
92:d6:7c:8b:4f:1b:c6:7f:57:39:af:78:64:df:be:
d7:38:d1:f1:fa:90:aa:1d:64:4b:3d:27:a5:27:12:
20:54:87:4a:36:46:26:fd:d0:a6:ff:40:bf:8c:45:
f7:7c:68:ae:e9:44:a7:8a:d6:50:73:3b:68:13:9c:
c1:f8:b7:4f:c7:fc:82:d3:e1:2d:75:f4:d5:a1:62:
aa:37:ee:51:61:2a:32:7a:57:7e:34:cf:b8:13:21:
69:b9:53:87:16:29:8a:c4:eb:4a:c8:a3:62:6d:2d:
54:73:61:15:39:aa:ef:71:f3:38:a7:0e:87:66:a1:
0c:f3:f1:23:e0:28:6c:d0:f0:c4:fc:a9:48:8e:7e:
87:20:11:10:9b:93:91:82:07:27:8f:f7:40:60:28:
e0:cc:76:91:de:6f:1a:dc:6f:7e:cb:4f:52:5a:b0:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:5E:55:24:15:2E:BC:90:B3:F7:E5:A1:17:E3:20:E8:35:21:D0
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/JCdeVSQVLryQs_floRfjIOg1IdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
18:22:90:91:59:51:d1:db:ad:f6:42:83:98:85:88:d5:ee:d4:
f9:2f:89:07:d5:e5:14:2a:a3:f8:ec:56:1b:2f:3b:74:c2:59:
13:29:8b:1e:7e:3d:eb:5c:5a:37:4f:0c:0c:5b:7f:32:81:41:
3d:b2:0a:15:1f:f8:94:cf:96:66:66:6b:a1:5c:4e:a0:c3:86:
0f:9c:04:63:68:6f:8e:54:b9:99:0d:8b:9f:5f:46:d2:9c:50:
ba:6d:37:58:20:61:97:6f:78:ae:d4:de:ee:a1:e6:1b:9e:c6:
01:05:7a:0c:82:f7:bc:3f:bc:08:82:00:31:5e:c3:9d:e6:ec:
61:35:bf:c2:2d:a0:d9:3d:8f:4d:64:45:4b:40:8d:cd:39:04:
e7:e2:c3:61:3d:10:4a:cc:b4:84:00:1c:8e:6d:5a:fc:49:94:
a7:cd:27:89:bf:f5:cc:fd:79:37:2c:69:d8:10:ec:79:d8:05:
0d:22:69:bb:df:9d:87:a0:92:9d:ae:e0:a7:f6:bb:09:4c:03:
5e:7d:80:c8:b6:aa:09:28:79:a6:e9:73:af:40:7c:5e:b8:55:
c4:c8:85:20:3c:23:7b:65:8c:8e:f2:35:c3:c6:93:fc:62:cb:
0f:27:3a:b8:d1:b8:ca:6a:14:e8:8b:cd:67:2a:56:b4:9a:77:
89:dc:d1:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1mJJ50qb/i8MMtbJJiwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI3NWU1NTI0MTUyZWJjOTBiM2Y3ZTVhMTE3ZTMyMGU4MzUyMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygFaVShl053V00Vg5M3+An+FfbEa
rIlpibylQm9ddiSEVRCjd4rauIG6sZHMYm5PoToQLc4Dlk+22PYYvJoonU1zkM0L
jGJwU20QdWTpIdZGMT6qVosAAMKS1nyLTxvGf1c5r3hk377XONHx+pCqHWRLPSel
JxIgVIdKNkYm/dCm/0C/jEX3fGiu6USnitZQcztoE5zB+LdPx/yC0+EtdfTVoWKq
N+5RYSoyeld+NM+4EyFpuVOHFimKxOtKyKNibS1Uc2EVOarvcfM4pw6HZqEM8/Ej
4Chs0PDE/KlIjn6HIBEQm5ORggcnj/dAYCjgzHaR3m8a3G9+y09SWrBpKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQnXlUkFS68kLP35aEX4yDoNSHQMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvSkNkZVZTUVZMcnlRc19mbG9SZmpJT2cxSWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPcUMA0G
CSqGSIb3DQEBCwUAA4IBAQAYIpCRWVHR2632QoOYhYjV7tT5L4kH1eUUKqP47FYb
Lzt0wlkTKYsefj3rXFo3TwwMW38ygUE9sgoVH/iUz5ZmZmuhXE6gw4YPnARjaG+O
VLmZDYufX0bSnFC6bTdYIGGXb3iu1N7uoeYbnsYBBXoMgve8P7wIggAxXsOd5uxh
Nb/CLaDZPY9NZEVLQI3NOQTn4sNhPRBKzLSEAByObVr8SZSnzSeJv/XM/Xk3LGnY
EOx52AUNImm7352HoJKdruCn9rsJTANefYDItqoJKHmm6XOvQHxeuFXEyIUgPCN7
ZYyO8jXDxpP8YssPJzq40bjKahToi81nKla0mneJ3NHo
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:02:20 2025 by rpki-client