Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/j9XadMW6ycVAh2lr4xw4_AukS1c.roa
File: j9XadMW6ycVAh2lr4xw4_AukS1c.roa (raw, json)
Hash identifier: 5VSuBy4xsSF53wv5aD+VwS2pxC95MP+mEL9/LB0f3Fg=
Subject key identifier: 8F:D5:DA:74:C5:BA:C9:C5:40:87:69:6B:E3:1C:38:FC:0B:A4:4B:57
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3E9F7AEA852D52ABEDAD39FCCADB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/j9XadMW6ycVAh2lr4xw4_AukS1c.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207438
IP address blocks: 62.89.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3e:9f:7a:ea:85:2d:52:ab:ed:ad:39:fc:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fd5da74c5bac9c54087696be31c38fc0ba44b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:cd:b7:d7:72:c1:d4:73:dc:cc:2e:16:65:
d1:8b:8a:82:9f:6f:da:db:ce:55:92:64:f2:18:23:
4d:26:ac:43:52:f3:fc:0c:41:8e:38:5d:62:f2:86:
f2:d7:29:30:bc:82:32:1b:b9:10:71:98:5e:73:01:
6b:b9:0f:a7:b5:5c:30:20:50:40:78:a6:1f:7c:71:
a9:52:71:c1:05:7a:24:1a:05:a5:41:2c:78:f7:5c:
e8:bb:21:4d:06:1c:79:93:20:2f:41:dc:87:1c:00:
aa:8b:ab:90:88:28:81:69:9c:62:2e:89:0e:cc:df:
71:33:86:f6:0f:66:b5:c3:67:c5:c7:44:bf:e9:ca:
33:04:1a:87:a3:eb:1c:c7:00:e8:4a:a5:e6:f4:e0:
20:4b:d1:fd:3f:40:4d:e9:0f:64:be:7b:83:3f:a0:
5b:e7:2f:32:b8:1c:b8:19:65:9e:2b:af:52:d4:23:
84:44:11:bc:6e:8d:98:4a:8a:b0:fe:52:7f:0d:cd:
42:72:5f:ad:5a:ab:79:4a:e9:3e:89:c3:99:72:05:
90:6f:0d:ae:4f:9a:c3:f0:81:4c:ab:19:6e:3d:22:
67:d6:99:b9:cc:d1:a6:c2:31:29:2c:ac:e0:0d:7e:
f7:50:27:83:e9:90:8d:ac:96:3e:53:de:0f:ae:8c:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:DA:74:C5:BA:C9:C5:40:87:69:6B:E3:1C:38:FC:0B:A4:4B:57
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/j9XadMW6ycVAh2lr4xw4_AukS1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0c:f1:01:19:9a:8f:59:ea:35:ff:f3:6d:16:c7:08:51:f1:
1e:cb:a4:ff:c5:b6:5f:4f:96:cd:52:85:17:d7:33:8c:75:43:
a1:af:c5:c9:d7:7a:9e:15:52:30:3e:9c:58:4e:62:2b:62:6e:
d7:65:8c:6f:b3:38:3e:48:d4:91:28:5a:87:f4:ec:7e:e0:c8:
76:5a:85:26:79:37:3b:2a:db:ef:8b:bd:bb:62:8c:f0:b1:52:
69:c4:a5:f4:d7:4b:79:bf:e5:da:62:81:b7:70:25:9f:93:82:
98:ba:6a:f9:ac:a4:0f:f2:86:cc:00:f0:8e:7d:0c:5d:e5:63:
82:e1:d4:18:c8:df:67:ce:54:4f:09:a1:78:40:6a:f8:7e:fa:
62:97:e6:7f:ad:11:cc:c5:49:8e:6c:48:b0:55:00:50:8c:89:
61:11:86:0f:78:42:0a:4f:50:76:31:fe:d6:cf:14:87:ba:ab:
65:53:11:19:4b:4d:5e:dd:0b:e8:2f:24:ed:e6:f7:8d:33:af:
e2:95:1c:d2:7c:ae:2d:90:ed:11:20:89:a0:65:15:0a:e7:db:
8d:f3:bd:88:55:88:4e:36:e8:45:2b:d2:49:3b:4d:37:43:37:
37:f9:96:ec:45:53:95:ef:91:72:bd:ed:ac:4f:cf:60:ad:86:
e6:55:d3:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijT6feuqFLVKr7a05/MrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmQ1ZGE3NGM1YmFjOWM1NDA4NzY5NmJlMzFjMzhmYzBiYTQ0YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqHNt9dywdRz3MwuFmXRi4qCn2/a
285VkmTyGCNNJqxDUvP8DEGOOF1i8oby1ykwvIIyG7kQcZhecwFruQ+ntVwwIFBA
eKYffHGpUnHBBXokGgWlQSx491zouyFNBhx5kyAvQdyHHACqi6uQiCiBaZxiLokO
zN9xM4b2D2a1w2fFx0S/6cozBBqHo+scxwDoSqXm9OAgS9H9P0BN6Q9kvnuDP6Bb
5y8yuBy4GWWeK69S1COERBG8bo2YSoqw/lJ/Dc1Ccl+tWqt5Suk+icOZcgWQbw2u
T5rD8IFMqxluPSJn1pm5zNGmwjEpLKzgDX73UCeD6ZCNrJY+U94ProzuwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/V2nTFusnFQIdpa+McOPwLpEtXMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvajlYYWRNVzZ5Y1ZBaDJscjR4dzRfQXVrUzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnKMA0G
CSqGSIb3DQEBCwUAA4IBAQBvDPEBGZqPWeo1//NtFscIUfEey6T/xbZfT5bNUoUX
1zOMdUOhr8XJ13qeFVIwPpxYTmIrYm7XZYxvszg+SNSRKFqH9Ox+4Mh2WoUmeTc7
Ktvvi727YozwsVJpxKX010t5v+XaYoG3cCWfk4KYumr5rKQP8obMAPCOfQxd5WOC
4dQYyN9nzlRPCaF4QGr4fvpil+Z/rRHMxUmObEiwVQBQjIlhEYYPeEIKT1B2Mf7W
zxSHuqtlUxEZS01e3QvoLyTt5veNM6/ilRzSfK4tkO0RIImgZRUK59uN872IVYhO
NuhFK9JJO003Qzc3+ZbsRVOV75Fyve2sT89grYbmVdPb
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:32 2025 by rpki-client