Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/J7n-Yd5XTH7n67jouruR47yViJQ.roa
File: J7n-Yd5XTH7n67jouruR47yViJQ.roa (raw, json)
Hash identifier: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=
Subject key identifier: 27:B9:FE:61:DE:57:4C:7E:E7:EB:B8:E8:BA:BB:91:E3:BC:95:88:94
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01941F8C09EB93BA5AFA0F76B410AFD8F72B
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/J7n-Yd5XTH7n67jouruR47yViJQ.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55081
IP address blocks: 185.117.196.0/22 maxlen: 22
2a06:8640::/32 maxlen: 32
2a06:8641::/32 maxlen: 32
2a06:8642::/32 maxlen: 32
2a06:8643::/32 maxlen: 32
2a06:8644::/32 maxlen: 32
2a06:8645::/32 maxlen: 32
2a06:8646::/32 maxlen: 32
2a06:8647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:eb:93:ba:5a:fa:0f:76:b4:10:af:d8:f7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b9fe61de574c7ee7ebb8e8babb91e3bc958894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:c7:be:99:27:cd:7f:83:32:48:1c:fe:dd:
b7:4b:58:6c:01:b0:52:8f:f0:ab:82:0a:73:3e:e0:
ed:d0:84:c3:c2:4a:45:ad:93:16:f0:57:e6:88:fd:
f8:4c:31:28:0b:b1:66:c6:4e:a0:f3:54:5f:7f:14:
cb:49:fa:f3:31:a6:5d:7f:ed:d2:4a:40:6f:5e:22:
12:52:2d:f1:bc:24:4f:3b:d3:48:d6:c1:7b:88:f1:
70:64:5b:a1:e2:22:69:82:4f:28:3c:0b:26:73:10:
62:1e:ca:e4:ef:91:7c:a7:92:74:37:a2:a6:f5:13:
59:a5:e2:41:d6:fb:72:7a:9c:db:e4:55:97:9f:10:
de:e7:f0:72:af:86:12:44:fa:04:22:c9:bc:52:15:
4d:b3:d9:0f:e8:a7:9a:3b:49:f1:72:75:4b:d2:55:
be:32:03:73:45:6d:d3:d7:a5:7f:f3:c3:50:4b:8c:
c9:04:4a:f6:f0:5f:1b:b5:3e:6b:97:51:15:f0:9d:
7d:64:ed:42:33:33:b1:a5:91:75:32:b4:6c:58:9e:
40:04:d4:7d:b3:bf:13:b1:34:56:55:53:66:73:59:
f5:a2:59:c8:b9:2f:d9:b7:f5:52:85:a9:b3:0c:ec:
a7:86:a0:e7:21:7f:4a:d1:51:a3:90:7a:1a:13:24:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:FE:61:DE:57:4C:7E:E7:EB:B8:E8:BA:BB:91:E3:BC:95:88:94
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/J7n-Yd5XTH7n67jouruR47yViJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.196.0/22
IPv6:
2a06:8640::/29
Signature Algorithm: sha256WithRSAEncryption
16:87:68:b6:ab:a2:3e:dd:cb:9f:d3:4c:36:7e:c0:dc:78:74:
a4:cc:93:e5:6e:75:0f:3f:cc:78:b3:4e:68:d2:82:2a:cd:7e:
bd:90:f0:f8:99:5a:43:54:55:f3:94:1a:05:d0:94:e3:c0:65:
a8:be:4e:6e:24:e2:74:1c:ea:3d:ea:8d:61:e4:97:7e:76:c8:
96:f8:65:aa:18:69:c1:83:a5:34:fb:80:5a:90:ec:35:4a:66:
aa:1a:2a:90:aa:2c:81:8d:0f:e6:22:8c:0b:04:11:1d:13:e9:
13:5b:83:13:ae:a3:b2:ed:4f:3c:f4:c8:1d:91:fe:76:0f:ab:
84:d1:90:fc:39:a1:e0:6f:1c:f6:31:70:80:fc:83:94:ee:c6:
cc:e4:48:8b:34:84:4b:d5:40:43:31:6f:a1:bd:73:83:dd:6b:
e4:6c:8a:22:79:9c:26:5d:f3:3e:c5:53:ea:ac:2a:e3:8a:e7:
66:75:d3:1e:61:ed:f7:a4:af:e5:54:1f:a0:d9:3c:fc:3d:70:
c8:41:31:de:29:6b:a4:1e:ae:1f:a0:45:12:e3:32:90:a6:5d:
bc:50:60:be:02:ba:47:09:69:1f:6b:00:4e:25:0d:45:62:f2:
3a:53:29:6e:76:8e:66:e1:d1:fb:f5:2c:01:5e:15:9f:5d:c7:
e9:ee:f1:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjAnrk7pa+g92tBCv2PcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy
MTk0ZmEwHhcNMjUwMTAxMDE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2I5ZmU2MWRlNTc0YzdlZTdlYmI4ZThiYWJiOTFlM2JjOTU4ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+LHvpknzX+DMkgc/t23S1hsAbBS
j/CrggpzPuDt0ITDwkpFrZMW8FfmiP34TDEoC7Fmxk6g81RffxTLSfrzMaZdf+3S
SkBvXiISUi3xvCRPO9NI1sF7iPFwZFuh4iJpgk8oPAsmcxBiHsrk75F8p5J0N6Km
9RNZpeJB1vtyepzb5FWXnxDe5/Byr4YSRPoEIsm8UhVNs9kP6KeaO0nxcnVL0lW+
MgNzRW3T16V/88NQS4zJBEr28F8btT5rl1EV8J19ZO1CMzOxpZF1MrRsWJ5ABNR9
s78TsTRWVVNmc1n1olnIuS/Zt/VShamzDOynhqDnIX9K0VGjkHoaEyQnowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCe5/mHeV0x+5+u46Lq7keO8lYiUMB8GA1UdIwQY
MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt
NGNhOTU2YjA4YTQxLzEvSjduLVlkNVhUSDduNjdqb3VydVI0N3lWaUpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx
LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXXEMA0E
AgACMAcDBQMqBoZAMA0GCSqGSIb3DQEBCwUAA4IBAQAWh2i2q6I+3cuf00w2fsDc
eHSkzJPlbnUPP8x4s05o0oIqzX69kPD4mVpDVFXzlBoF0JTjwGWovk5uJOJ0HOo9
6o1h5Jd+dsiW+GWqGGnBg6U0+4BakOw1SmaqGiqQqiyBjQ/mIowLBBEdE+kTW4MT
rqOy7U889Mgdkf52D6uE0ZD8OaHgbxz2MXCA/IOU7sbM5EiLNIRL1UBDMW+hvXOD
3WvkbIoieZwmXfM+xVPqrCrjiudmddMeYe33pK/lVB+g2Tz8PXDIQTHeKWukHq4f
oEUS4zKQpl28UGC+ArpHCWkfawBOJQ1FYvI6Uyludo5m4dH79SwBXhWfXcfp7vFi
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:29 2025 by rpki-client