Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/JUYGTjAV-mFifkTFgvHweaR5CqE.roa
File: JUYGTjAV-mFifkTFgvHweaR5CqE.roa (raw, json)
Hash identifier: msEGb46vsItHrIzExMxKdR+UQtPGS2Wyol2p3GjXbrk=
Subject key identifier: 25:46:06:4E:30:15:FA:61:62:7E:44:C5:82:F1:F0:79:A4:79:0A:A1
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA314C670EF3F2745C7DCF3FF963C7
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/JUYGTjAV-mFifkTFgvHweaR5CqE.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33977
IP address blocks: 31.14.57.0/24 maxlen: 24
31.14.58.0/23 maxlen: 23
77.81.87.0/24 maxlen: 24
77.81.123.0/24 maxlen: 24
77.81.180.0/24 maxlen: 24
84.247.30.0/24 maxlen: 24
85.204.52.0/23 maxlen: 23
85.204.110.0/23 maxlen: 23
86.104.7.0/24 maxlen: 24
86.104.16.0/24 maxlen: 24
86.105.17.0/24 maxlen: 24
86.105.180.0/24 maxlen: 24
86.106.79.0/24 maxlen: 24
86.106.86.0/24 maxlen: 24
86.107.24.0/23 maxlen: 23
89.33.130.0/23 maxlen: 23
89.39.253.0/24 maxlen: 24
93.113.157.0/24 maxlen: 24
93.114.251.0/24 maxlen: 24
93.118.45.0/24 maxlen: 24
185.244.108.0/22 maxlen: 22
188.214.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:31:4c:67:0e:f3:f2:74:5c:7d:cf:3f:f9:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2546064e3015fa61627e44c582f1f079a4790aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:17:13:35:87:02:ff:63:79:2b:2c:55:8c:
77:e5:1c:47:39:3e:1d:a5:83:16:e5:2d:ab:33:e4:
b2:16:2a:9d:0f:98:02:60:8c:e5:b3:77:c2:db:58:
67:d5:5b:82:7e:1e:a9:bc:32:45:c3:4f:f0:d6:58:
03:3f:82:02:2e:0c:41:b3:ae:f7:0a:66:72:82:96:
83:d7:9b:98:a6:06:29:56:1e:10:33:6d:1d:28:4c:
6a:bd:4c:97:b3:6c:fa:a3:2d:d2:03:ce:b7:09:1e:
b8:f0:c8:27:0f:a5:cb:db:02:1a:88:8b:ad:59:83:
65:f8:03:cc:da:8d:4b:6b:7c:00:e0:9d:ca:0a:77:
98:4e:bf:16:3e:10:e9:d6:de:6d:78:a5:3c:9b:d1:
7f:38:a6:22:7c:a1:03:79:4e:40:9a:b4:8b:98:fb:
25:94:70:06:05:ba:c4:80:02:83:4f:53:4e:13:8b:
df:2a:8f:d5:0e:2c:7b:3b:f1:70:41:c6:1e:60:fa:
19:b0:91:87:09:fa:22:85:db:c3:6c:7a:d5:95:24:
6a:db:04:1e:3e:34:ac:cb:bb:b9:33:2f:91:e9:e9:
32:b7:36:91:e9:6c:27:32:23:31:a9:b1:7a:19:4e:
57:f6:d2:2a:82:24:54:8b:f3:35:33:c0:d7:fe:4b:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:06:4E:30:15:FA:61:62:7E:44:C5:82:F1:F0:79:A4:79:0A:A1
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/JUYGTjAV-mFifkTFgvHweaR5CqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.57.0-31.14.59.255
77.81.87.0/24
77.81.123.0/24
77.81.180.0/24
84.247.30.0/24
85.204.52.0/23
85.204.110.0/23
86.104.7.0/24
86.104.16.0/24
86.105.17.0/24
86.105.180.0/24
86.106.79.0/24
86.106.86.0/24
86.107.24.0/23
89.33.130.0/23
89.39.253.0/24
93.113.157.0/24
93.114.251.0/24
93.118.45.0/24
185.244.108.0/22
188.214.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:19:c8:c2:dc:6e:98:df:79:ff:43:58:78:44:b3:9f:9f:24:
a1:8e:91:03:20:fd:f8:15:81:79:81:55:42:3c:73:15:57:91:
e8:00:1d:12:2a:1b:c1:4e:ee:81:bc:84:ce:26:a7:91:0d:f7:
de:13:8c:7e:54:e5:9a:11:1b:5b:11:03:a9:55:6b:f2:91:e6:
91:5b:f8:87:33:91:ab:ff:a1:bc:82:cc:d2:d0:9a:4d:3d:76:
58:51:7e:53:82:b4:97:34:6d:f5:f9:c3:a6:d9:31:69:7b:f0:
4e:17:11:9c:6a:a5:33:92:b3:12:74:3f:14:81:56:a2:4f:95:
fa:1a:52:be:8e:3c:2f:53:eb:4f:38:88:80:10:cc:9b:71:aa:
b3:31:a4:f2:a8:3a:c9:24:0a:d2:04:c9:9a:2e:cd:27:03:26:
a4:04:ab:c4:a4:11:66:ca:29:0e:20:18:de:54:6b:c2:65:8f:
09:5b:92:d7:13:1c:2d:e9:20:d0:fb:07:b1:d2:e2:b5:19:3d:
8a:06:b3:5c:b6:7c:9d:c2:5f:9d:fa:5f:49:b4:35:79:c8:82:
f3:bc:f3:50:79:64:4f:36:1b:ac:41:47:8d:7c:81:11:c0:f9:
c9:e5:81:09:2f:4f:bf:60:48:86:8c:ff:55:09:6b:f0:e6:4d:
69:d7:30:d8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZQf+jFMZw7z8nRcfc8/+WPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQ2MDY0ZTMwMTVmYTYxNjI3ZTQ0YzU4MmYxZjA3OWE0NzkwYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hIXEzWHAv9jeSssVYx35RxHOT4d
pYMW5S2rM+SyFiqdD5gCYIzls3fC21hn1VuCfh6pvDJFw0/w1lgDP4ICLgxBs673
CmZygpaD15uYpgYpVh4QM20dKExqvUyXs2z6oy3SA863CR648MgnD6XL2wIaiIut
WYNl+APM2o1La3wA4J3KCneYTr8WPhDp1t5teKU8m9F/OKYifKEDeU5AmrSLmPsl
lHAGBbrEgAKDT1NOE4vfKo/VDix7O/FwQcYeYPoZsJGHCfoihdvDbHrVlSRq2wQe
PjSsy7u5My+R6ekytzaR6WwnMiMxqbF6GU5X9tIqgiRUi/M1M8DX/kuHxQIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFCVGBk4wFfphYn5ExYLx8HmkeQqhMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvSlVZR1RqQVYtbUZpZmtURmd2SHdlYVI1Q3FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYwDAME
AB8OOQMEAh8OOAMEAE1RVwMEAE1RewMEAE1RtAMEAFT3HgMEAVXMNAMEAVXMbgME
AFZoBwMEAFZoEAMEAFZpEQMEAFZptAMEAFZqTwMEAFZqVgMEAVZrGAMEAVkhggME
AFkn/QMEAF1xnQMEAF1y+wMEAF12LQMEArn0bAMEALzWfjANBgkqhkiG9w0BAQsF
AAOCAQEASRnIwtxumN95/0NYeESzn58koY6RAyD9+BWBeYFVQjxzFVeR6AAdEiob
wU7ugbyEziankQ333hOMflTlmhEbWxEDqVVr8pHmkVv4hzORq/+hvILM0tCaTT12
WFF+U4K0lzRt9fnDptkxaXvwThcRnGqlM5KzEnQ/FIFWok+V+hpSvo48L1PrTziI
gBDMm3GqszGk8qg6ySQK0gTJmi7NJwMmpASrxKQRZsopDiAY3lRrwmWPCVuS1xMc
Lekg0PsHsdLitRk9igazXLZ8ncJfnfpfSbQ1eciC87zzUHlkTzYbrEFHjXyBEcD5
yeWBCS9Pv2BIhoz/VQlr8OZNadcw2A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:07 2025 by rpki-client