Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa
File: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (raw, json)
Hash identifier: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=
Subject key identifier: 89:A8:FB:0A:E3:62:71:0D:13:E9:24:3C:A3:BE:12:40:86:3D:56:E4
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019423D715462EEAC8B0E120189F48D78E00
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.16.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:15:46:2e:ea:c8:b0:e1:20:18:9f:48:d7:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a8fb0ae362710d13e9243ca3be1240863d56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:02:59:3c:b5:05:9f:47:c2:ef:c4:de:74:
50:bb:1e:90:0d:00:98:1c:4e:c7:cb:66:b9:df:dd:
42:fd:f0:7b:3e:20:b9:40:70:a9:e5:41:42:1f:58:
49:fa:f1:3e:86:48:13:26:4b:94:e9:48:10:1a:61:
42:55:96:13:5f:9d:46:05:f0:c7:80:e7:d1:75:95:
d4:c5:ad:df:d3:41:fc:11:32:9b:60:59:f6:2a:2f:
ba:bd:93:cd:e1:eb:89:43:b4:1f:9d:ed:29:b2:6b:
c6:81:11:b5:a6:5a:0f:57:01:62:03:96:6c:d3:ec:
49:98:a7:05:3a:12:69:93:bf:57:95:33:65:54:d5:
bc:b8:52:45:32:db:07:bf:60:72:de:65:96:90:ba:
a9:e7:7d:69:70:e0:ae:f1:cc:f8:89:b5:ca:4b:e3:
11:27:62:4c:78:9f:07:54:a5:49:1d:6f:26:81:be:
cb:29:cb:4f:0d:bc:3a:30:b3:e4:07:81:4c:c6:b0:
3f:22:e0:21:96:c4:20:95:81:17:36:bc:78:a2:b7:
69:20:e7:65:55:f5:14:02:f9:35:1f:dd:d6:a9:83:
40:07:e4:8c:2a:a7:88:de:ce:10:b9:9b:01:57:4c:
5b:37:ca:53:d5:b6:44:7d:14:55:7f:50:7a:92:d8:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:FB:0A:E3:62:71:0D:13:E9:24:3C:A3:BE:12:40:86:3D:56:E4
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.22.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9b:97:1e:14:6b:1a:22:5a:30:5b:ac:c8:04:3f:eb:84:7c:
fa:10:1f:c5:72:4c:78:24:b3:af:f0:e0:b7:45:88:2d:ac:69:
4a:35:cc:b4:8e:4c:c4:05:4a:24:f4:2e:ea:6b:c8:9f:76:59:
01:e2:bb:9e:80:8b:7a:a2:a4:b3:38:16:74:f9:ec:17:96:ec:
9a:41:5e:ea:19:24:5d:90:3e:41:a3:0a:77:47:b9:bd:80:5e:
24:f1:0b:4e:dd:56:aa:50:46:64:a0:1e:61:2b:6d:0a:20:00:
ae:78:b4:37:be:62:13:b9:1c:8b:dd:19:47:f1:b0:21:4d:84:
e8:e3:99:3f:33:5c:27:df:fe:45:e0:e7:4a:20:f5:f9:79:24:
58:98:9e:16:c2:09:94:22:b7:14:aa:b7:2d:98:d8:b0:53:8f:
ad:c7:37:45:ca:bd:73:de:2d:42:bf:df:10:75:80:e1:ef:a7:
21:6c:3a:98:48:c5:61:d2:f7:16:77:71:03:b7:a9:09:fb:0d:
28:61:d2:75:5e:bb:68:e2:cc:79:c4:c4:d6:69:5c:7a:17:73:
e9:09:8f:b8:8a:fb:45:90:62:56:10:c1:38:67:ed:96:52:6b:
fe:8c:fd:ee:39:a2:7f:bd:0c:4f:cc:e1:02:52:59:41:ee:1a:
09:a9:f3:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xVGLurIsOEgGJ9I144AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl
YjA2YmYwHhcNMjUwMTAxMjE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWE4ZmIwYWUzNjI3MTBkMTNlOTI0M2NhM2JlMTI0MDg2M2Q1NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxUCWTy1BZ9Hwu/E3nRQux6QDQCY
HE7Hy2a5391C/fB7PiC5QHCp5UFCH1hJ+vE+hkgTJkuU6UgQGmFCVZYTX51GBfDH
gOfRdZXUxa3f00H8ETKbYFn2Ki+6vZPN4euJQ7Qfne0psmvGgRG1ploPVwFiA5Zs
0+xJmKcFOhJpk79XlTNlVNW8uFJFMtsHv2By3mWWkLqp531pcOCu8cz4ibXKS+MR
J2JMeJ8HVKVJHW8mgb7LKctPDbw6MLPkB4FMxrA/IuAhlsQglYEXNrx4ordpIOdl
VfUUAvk1H93WqYNAB+SMKqeI3s4QuZsBV0xbN8pT1bZEfRRVf1B6ktjV+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImo+wrjYnENE+kkPKO+EkCGPVbkMB8GA1UdIwQY
MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt
MWYyNjJkOWM5YjA3LzEvaWFqN0N1TmljUTBUNlNROG83NFNRSVk5VnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3
LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRAWMA0G
CSqGSIb3DQEBCwUAA4IBAQCWm5ceFGsaIlowW6zIBD/rhHz6EB/Fckx4JLOv8OC3
RYgtrGlKNcy0jkzEBUok9C7qa8ifdlkB4ruegIt6oqSzOBZ0+ewXluyaQV7qGSRd
kD5Bowp3R7m9gF4k8QtO3VaqUEZkoB5hK20KIACueLQ3vmITuRyL3RlH8bAhTYTo
45k/M1wn3/5F4OdKIPX5eSRYmJ4WwgmUIrcUqrctmNiwU4+txzdFyr1z3i1Cv98Q
dYDh76chbDqYSMVh0vcWd3EDt6kJ+w0oYdJ1Xrto4sx5xMTWaVx6F3PpCY+4ivtF
kGJWEME4Z+2WUmv+jP3uOaJ/vQxPzOECUllB7hoJqfPh
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:44 2025 by rpki-client