Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa
File: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (raw, json)
Hash identifier: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=
Subject key identifier: 8D:60:11:84:EB:D0:9E:14:50:5E:4C:71:50:5D:51:09:9F:17:AF:98
Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial: 019715F56C1D2CCCF451C45BA3C2AA631FD0
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa
Signing time: Wed 28 May 2025 08:14:54 +0000
ROA not before: Wed 28 May 2025 08:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214202
IP address blocks: 193.17.67.0/24 maxlen: 24
2001:678:3ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:f5:6c:1d:2c:cc:f4:51:c4:5b:a3:c2:aa:63:1f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Validity
Not Before: May 28 08:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d601184ebd09e14505e4c71505d51099f17af98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:6c:5a:b1:b9:2e:82:43:bc:cc:48:d2:b1:
dc:45:c3:01:35:05:fd:04:6a:91:94:0b:d8:ea:a6:
4e:a1:93:57:43:9a:91:34:19:06:11:5d:71:fb:05:
03:d7:a4:c5:4f:7a:18:45:69:d0:a8:d7:74:e8:a4:
fc:ee:c6:66:3c:36:a7:e4:a5:a7:da:75:4c:98:c0:
72:c7:8c:e1:56:c8:87:4d:e1:9c:2d:63:f2:0f:0a:
b7:8c:da:dc:1f:88:57:02:06:00:32:1d:36:69:13:
23:6d:7a:17:6b:41:c2:35:35:13:07:14:ce:2a:22:
7a:13:e3:d0:a2:59:07:43:c3:2d:b7:51:b9:e8:05:
c6:fd:1e:2d:08:0a:a2:e3:4a:3c:c4:1a:0e:5e:b7:
33:25:c1:9c:0a:7c:22:54:aa:1a:50:ad:31:7a:ac:
24:1b:05:a5:84:da:35:9d:a6:0b:12:3b:9a:63:1a:
28:30:45:74:36:4f:43:79:a0:43:53:fa:dc:41:50:
cb:5e:d6:a1:ff:80:8d:d1:37:ed:29:87:21:63:67:
96:df:b6:2e:35:b7:d9:b0:03:4d:79:dc:7d:c3:13:
f7:54:97:ca:6d:ce:01:f4:44:e3:71:3c:67:fe:a2:
15:b8:b4:95:74:c6:6e:9c:85:4c:20:9c:30:af:9d:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:60:11:84:EB:D0:9E:14:50:5E:4C:71:50:5D:51:09:9F:17:AF:98
X509v3 Authority Key Identifier:
keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.67.0/24
IPv6:
2001:678:3ec::/48
Signature Algorithm: sha256WithRSAEncryption
46:03:60:c0:6c:d6:a3:12:6a:5a:70:1b:bf:76:e3:de:de:78:
c1:83:7f:b6:83:95:8f:41:bb:b9:84:b8:49:39:c1:70:17:a7:
a7:5e:3c:ef:b2:df:75:dc:aa:6f:21:a9:61:f1:6e:62:78:21:
fd:a9:b7:1c:94:fb:bb:62:b3:60:c7:39:f7:03:2f:5c:30:b1:
62:ea:21:2c:f0:9e:0c:64:9b:08:51:17:5a:50:f4:6a:99:47:
84:df:26:e7:64:15:b8:b1:de:ab:1e:b3:d1:b1:e1:6b:00:8c:
31:32:f7:04:07:37:eb:c0:93:68:4e:ac:02:6c:56:80:14:d3:
a1:7d:24:b7:27:32:b5:34:8e:91:04:8a:31:de:ce:7f:f1:bd:
0f:33:49:11:99:df:b7:f6:8e:75:77:d8:f2:3d:eb:be:57:fc:
66:ad:28:69:8a:f6:77:f2:51:c6:16:a8:b3:84:8c:48:7c:5d:
c2:b3:c5:40:20:c8:5c:3d:bd:c2:08:21:14:71:b1:50:4f:55:
d8:7a:8a:b9:33:f2:d1:3f:64:e6:01:4f:63:64:13:eb:9a:5b:
91:ad:34:3a:b6:5e:9b:ea:8e:1d:b8:bc:0d:1d:85:63:c2:28:
07:b7:bd:79:0c:10:4a:fc:70:36:5a:f1:c4:d4:11:4c:b6:d5:
ee:e5:0d:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZcV9WwdLMz0UcRbo8KqYx/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm
YThiZjcwHhcNMjUwNTI4MDgxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDYwMTE4NGViZDA5ZTE0NTA1ZTRjNzE1MDVkNTEwOTlmMTdhZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJsWrG5LoJDvMxI0rHcRcMBNQX9
BGqRlAvY6qZOoZNXQ5qRNBkGEV1x+wUD16TFT3oYRWnQqNd06KT87sZmPDan5KWn
2nVMmMByx4zhVsiHTeGcLWPyDwq3jNrcH4hXAgYAMh02aRMjbXoXa0HCNTUTBxTO
KiJ6E+PQolkHQ8Mtt1G56AXG/R4tCAqi40o8xBoOXrczJcGcCnwiVKoaUK0xeqwk
GwWlhNo1naYLEjuaYxooMEV0Nk9DeaBDU/rcQVDLXtah/4CN0TftKYchY2eW37Yu
NbfZsANNedx9wxP3VJfKbc4B9ETjcTxn/qIVuLSVdMZunIVMIJwwr52c2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI1gEYTr0J4UUF5McVBdUQmfF6+YMB8GA1UdIwQY
MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt
MjE2NGQ5OTk1MTk4LzEvaldBUmhPdlFuaFJRWGt4eFVGMVJDWjhYcjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4
LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRFDMA8E
AgACMAkDBwAgAQZ4A+wwDQYJKoZIhvcNAQELBQADggEBAEYDYMBs1qMSalpwG792
497eeMGDf7aDlY9Bu7mEuEk5wXAXp6dePO+y33Xcqm8hqWHxbmJ4If2ptxyU+7ti
s2DHOfcDL1wwsWLqISzwngxkmwhRF1pQ9GqZR4TfJudkFbix3qses9Gx4WsAjDEy
9wQHN+vAk2hOrAJsVoAU06F9JLcnMrU0jpEEijHezn/xvQ8zSRGZ37f2jnV32PI9
675X/GatKGmK9nfyUcYWqLOEjEh8XcKzxUAgyFw9vcIIIRRxsVBPVdh6irkz8tE/
ZOYBT2NkE+uaW5GtNDq2Xpvqjh24vA0dhWPCKAe3vXkMEEr8cDZa8cTUEUy21e7l
DeA=
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:06:45 2025 by rpki-client