Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1jJgRYb9W4sURCICTmoLplbZHfs.roa
File: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (raw, json)
Hash identifier: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=
Subject key identifier: D6:32:60:45:86:FD:5B:8B:14:44:22:02:4E:6A:0B:A6:56:D9:1D:FB
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019425222C0E38B2150460DA575FEC79B87E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1jJgRYb9W4sURCICTmoLplbZHfs.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 84.55.19.0/24 maxlen: 24
84.55.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:0e:38:b2:15:04:60:da:57:5f:ec:79:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d632604586fd5b8b144422024e6a0ba656d91dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:ad:4a:2f:d5:f6:c2:6c:fe:fc:55:21:7d:
39:c0:a5:59:4c:86:7a:7a:26:87:fc:ad:86:7d:31:
55:29:c7:18:76:53:a2:c3:1d:b3:36:ae:c1:c4:a0:
39:cf:78:d1:ae:78:af:f9:ba:23:ea:99:bd:26:9d:
c5:4b:e4:41:b7:02:9e:8c:f6:0d:6b:b8:5f:b4:18:
36:8d:e5:e1:99:2e:0d:72:f3:81:af:e1:50:1a:c0:
0e:5b:ec:f4:0e:b8:61:9f:91:b9:19:3b:3f:a2:fa:
cf:56:b0:1a:a9:6d:b7:e6:b0:61:b6:7d:07:ec:8b:
3d:9c:08:fd:43:21:cf:a5:e5:91:f2:70:4a:ea:82:
8b:fd:0f:f2:03:08:fa:bc:b1:91:24:4b:38:f2:64:
27:58:39:39:3e:90:12:9d:03:ed:0b:13:48:66:98:
13:2f:56:f9:bf:9b:a6:f8:3d:19:f9:85:75:b1:bd:
5f:58:aa:54:23:69:4f:2d:f0:f1:76:eb:14:47:8a:
2e:eb:54:cd:43:8d:00:06:00:3b:32:52:96:da:84:
f7:90:bc:64:81:67:6b:04:c1:08:a9:ef:52:96:10:
46:70:dd:a0:f7:58:b8:19:e1:81:4d:36:b1:00:51:
02:11:8a:26:d8:c6:ef:d8:d8:0b:e2:85:51:e5:9c:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:60:45:86:FD:5B:8B:14:44:22:02:4E:6A:0B:A6:56:D9:1D:FB
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1jJgRYb9W4sURCICTmoLplbZHfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.19.0/24
84.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
86:12:88:4e:fc:71:ac:98:cc:6e:92:0b:85:a6:30:c7:bf:2a:
aa:93:f3:23:d3:b6:72:a4:d0:a9:2f:8b:05:56:be:64:4e:80:
d5:7a:fc:d8:c0:19:f5:0a:b3:da:85:51:ec:78:a5:9f:49:b4:
f9:f4:19:f5:fb:31:41:a2:17:6f:72:b0:88:06:20:9a:66:f3:
46:4c:ee:35:b3:66:d6:ad:38:f9:c0:e2:ff:f7:a1:86:cd:c4:
9a:25:29:49:c3:83:ad:a2:27:51:6e:3a:9f:b2:90:98:6d:4e:
67:c0:ca:f8:7c:09:4f:0f:d0:7c:20:20:76:f3:02:49:27:b8:
72:6b:20:7b:da:77:f6:5e:86:eb:bb:63:f5:37:88:1d:cc:ec:
76:da:5e:39:82:bb:47:79:17:48:23:0d:93:bf:42:e6:64:c9:
20:c6:f6:63:c2:7f:f4:8f:08:4b:13:e0:5f:34:e1:6d:94:17:
ad:d0:af:45:1c:fe:72:ec:0b:f9:d2:40:e4:b5:6a:87:da:10:
59:18:ff:eb:47:fb:0f:3f:9f:75:8f:d7:54:39:84:d1:3a:c3:
61:ac:37:cb:80:d4:8f:c3:95:ec:22:77:c7:25:29:ce:fd:80:
95:20:b3:47:ee:db:ea:3f:b7:0f:9f:cb:a3:b3:a2:0c:97:f7:
27:68:f6:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIiwOOLIVBGDaV1/sebh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwMTAyMDM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjMyNjA0NTg2ZmQ1YjhiMTQ0NDIyMDI0ZTZhMGJhNjU2ZDkxZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHCtSi/V9sJs/vxVIX05wKVZTIZ6
eiaH/K2GfTFVKccYdlOiwx2zNq7BxKA5z3jRrniv+boj6pm9Jp3FS+RBtwKejPYN
a7hftBg2jeXhmS4NcvOBr+FQGsAOW+z0Drhhn5G5GTs/ovrPVrAaqW235rBhtn0H
7Is9nAj9QyHPpeWR8nBK6oKL/Q/yAwj6vLGRJEs48mQnWDk5PpASnQPtCxNIZpgT
L1b5v5um+D0Z+YV1sb1fWKpUI2lPLfDxdusUR4ou61TNQ40ABgA7MlKW2oT3kLxk
gWdrBMEIqe9SlhBGcN2g91i4GeGBTTaxAFECEYom2Mbv2NgL4oVR5ZxYpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNYyYEWG/VuLFEQiAk5qC6ZW2R37MB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvMWpKZ1JZYjlXNHNVUkNJQ1Rtb0xwbGJaSGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDcTAwQA
VDcXMA0GCSqGSIb3DQEBCwUAA4IBAQCGEohO/HGsmMxukguFpjDHvyqqk/Mj07Zy
pNCpL4sFVr5kToDVevzYwBn1CrPahVHseKWfSbT59Bn1+zFBohdvcrCIBiCaZvNG
TO41s2bWrTj5wOL/96GGzcSaJSlJw4OtoidRbjqfspCYbU5nwMr4fAlPD9B8ICB2
8wJJJ7hyayB72nf2Xobru2P1N4gdzOx22l45grtHeRdIIw2Tv0LmZMkgxvZjwn/0
jwhLE+BfNOFtlBet0K9FHP5y7Av50kDktWqH2hBZGP/rR/sPP591j9dUOYTROsNh
rDfLgNSPw5XsInfHJSnO/YCVILNH7tvqP7cPn8ujs6IMl/cnaPZG
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:50 2025 by rpki-client