Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa
File: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (raw, json)
Hash identifier: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=
Subject key identifier: 25:AF:A6:0D:4B:53:98:A4:DC:FF:9C:F7:59:98:A4:13:38:31:9C:ED
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 019425FC5387149010EE801AA5D2544CB1B2
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1813
IP address blocks: 217.31.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:87:14:90:10:ee:80:1a:a5:d2:54:4c:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25afa60d4b5398a4dcff9cf75998a41338319ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:08:ab:5f:65:b4:5e:8c:23:8a:7f:b7:86:
47:3d:c6:02:c1:b8:c7:bf:c5:14:91:5b:5c:28:e4:
a0:9f:78:c1:49:33:f8:8a:2a:e7:2d:28:3b:8f:a4:
aa:5a:e9:f8:4f:b4:9c:6c:f0:f2:49:a3:3a:ce:bc:
33:87:f7:69:c9:e9:6e:34:38:5c:20:5e:e1:77:4a:
0b:5f:58:50:a8:8a:a9:4f:91:d4:15:c8:07:d2:34:
a7:d5:0a:d1:b1:38:33:45:84:76:5a:1c:65:61:2d:
a1:b6:3f:99:ba:46:4f:0d:62:2a:da:72:ba:c3:f9:
70:41:63:f1:fd:82:db:c2:1a:7e:de:eb:47:0f:2f:
a9:17:eb:77:d7:bc:1e:3e:61:76:01:6f:b3:79:0a:
66:ba:0d:a5:4e:bd:f8:0d:cb:e1:bc:23:58:06:b4:
cb:26:4b:0c:f1:dd:88:2d:b6:6d:ec:07:31:be:73:
55:ff:b2:ed:60:6d:cc:5e:ff:d6:65:ed:83:c1:03:
54:74:e5:12:2b:6a:a4:d3:c6:53:bd:c6:1d:8e:76:
ef:4d:f4:90:10:4c:5b:ff:1e:28:ee:6c:2e:19:28:
bc:38:7f:5c:0f:5a:3d:f2:d0:c7:b4:c2:cb:4b:5a:
38:12:8e:9b:a1:04:be:6a:55:07:76:1c:b9:bc:09:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:A6:0D:4B:53:98:A4:DC:FF:9C:F7:59:98:A4:13:38:31:9C:ED
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fb:3c:f4:70:3d:95:50:37:7c:36:40:e7:2f:8b:53:27:cd:
27:ac:4f:c1:30:01:28:6c:de:3a:90:06:0a:ae:e8:b9:85:8a:
e9:bf:8e:26:55:35:f0:38:59:87:82:48:97:7b:e4:a9:be:69:
96:f0:c7:d0:fd:7b:9e:75:1e:0a:2a:40:e8:70:68:9f:5b:89:
f5:83:f7:6d:d7:40:73:bd:5c:5d:d7:54:39:42:cd:3b:2f:e3:
8c:59:ba:7a:34:0f:f3:79:9b:13:49:67:ba:4e:a0:a4:45:79:
66:ad:9c:1b:c1:4e:12:fd:77:44:5a:ba:dc:6d:33:56:7f:73:
82:5a:c1:ac:01:1f:4f:58:18:e5:e5:4d:05:2c:2f:16:66:6d:
b8:54:2d:3a:08:ce:a4:1c:da:02:d2:9f:f7:07:ed:81:32:ba:
7d:67:b2:8f:57:05:e5:65:fd:47:08:f2:e1:e8:19:c2:21:ca:
41:27:47:14:c5:b0:7c:01:21:6b:bd:50:72:11:87:8f:87:7e:
50:e4:d4:f7:0b:13:fc:91:5c:2f:ec:10:d1:cd:48:a0:dd:68:
68:2d:e8:bd:98:f9:d3:6e:c3:c2:66:df:0e:a1:10:7f:44:87:
a1:9d:20:07:11:d6:10:ba:b1:f8:0d:be:86:e4:ba:f4:4f:49:
ab:6c:29:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/FOHFJAQ7oAapdJUTLGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjUwMTAyMDc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFmYTYwZDRiNTM5OGE0ZGNmZjljZjc1OTk4YTQxMzM4MzE5Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqUIq19ltF6MI4p/t4ZHPcYCwbjH
v8UUkVtcKOSgn3jBSTP4iirnLSg7j6SqWun4T7ScbPDySaM6zrwzh/dpyeluNDhc
IF7hd0oLX1hQqIqpT5HUFcgH0jSn1QrRsTgzRYR2WhxlYS2htj+ZukZPDWIq2nK6
w/lwQWPx/YLbwhp+3utHDy+pF+t317wePmF2AW+zeQpmug2lTr34DcvhvCNYBrTL
JksM8d2ILbZt7AcxvnNV/7LtYG3MXv/WZe2DwQNUdOUSK2qk08ZTvcYdjnbvTfSQ
EExb/x4o7mwuGSi8OH9cD1o98tDHtMLLS1o4Eo6boQS+alUHdhy5vAmTIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWvpg1LU5ik3P+c91mYpBM4MZztMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvSmEtbURVdFRtS1RjXzV6M1daaWtFemd4bk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2R8BMA0G
CSqGSIb3DQEBCwUAA4IBAQCq+zz0cD2VUDd8NkDnL4tTJ80nrE/BMAEobN46kAYK
rui5hYrpv44mVTXwOFmHgkiXe+SpvmmW8MfQ/XuedR4KKkDocGifW4n1g/dt10Bz
vVxd11Q5Qs07L+OMWbp6NA/zeZsTSWe6TqCkRXlmrZwbwU4S/XdEWrrcbTNWf3OC
WsGsAR9PWBjl5U0FLC8WZm24VC06CM6kHNoC0p/3B+2BMrp9Z7KPVwXlZf1HCPLh
6BnCIcpBJ0cUxbB8ASFrvVByEYePh35Q5NT3CxP8kVwv7BDRzUig3WhoLei9mPnT
bsPCZt8OoRB/RIehnSAHEdYQurH4Db6G5Lr0T0mrbCl3
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:21 2025 by rpki-client