Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jdJ_5UDaXpGfnrvwwcWy3cojdWc.roa
File: jdJ_5UDaXpGfnrvwwcWy3cojdWc.roa (raw, json)
Hash identifier: +SY8noecZEbgE5Tvqa5LLis0YvOZcKSpP+fimUlJhgY=
Subject key identifier: 8D:D2:7F:E5:40:DA:5E:91:9F:9E:BB:F0:C1:C5:B2:DD:CA:23:75:67
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F881C0D34AD172BCA1A7D88A5D215
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jdJ_5UDaXpGfnrvwwcWy3cojdWc.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 45.91.161.0/24 maxlen: 24
45.92.174.0/24 maxlen: 24
77.83.72.0/24 maxlen: 24
193.32.190.0/24 maxlen: 24
194.156.1.0/24 maxlen: 24
194.156.26.0/24 maxlen: 24
194.156.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:1c:0d:34:ad:17:2b:ca:1a:7d:88:a5:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dd27fe540da5e919f9ebbf0c1c5b2ddca237567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:bc:a8:be:97:34:ef:94:75:5c:b9:16:77:
67:b5:fe:38:04:f8:e7:8e:93:cb:a1:6c:1f:48:70:
17:9b:78:36:5d:a7:b8:f6:e1:0c:15:ee:73:80:5b:
a3:25:ae:b6:92:05:6b:14:24:8b:ac:9d:9c:ac:38:
09:4a:31:7f:2c:0d:38:b0:f2:cf:2c:23:fb:9b:3f:
5b:63:c7:9a:14:a9:db:fa:9f:1c:6a:bc:3b:d5:30:
4b:66:65:b6:2d:12:ce:ac:73:db:4c:45:bb:2b:2a:
a9:9f:30:7a:11:43:c0:da:7e:50:d2:39:58:87:30:
8f:6d:dc:fc:09:fe:3a:a6:c4:c9:4c:44:aa:21:42:
da:b6:92:7b:82:90:8e:8a:50:0e:70:7a:c8:d2:9b:
8e:43:7c:81:51:4e:95:90:cc:08:e4:02:74:42:7d:
a0:b7:0c:a0:a6:92:87:4d:4a:9f:e8:ef:36:c9:eb:
50:5d:e0:71:7d:1a:d4:cf:be:54:81:bf:66:36:a8:
62:ba:d4:4c:ae:01:41:e2:95:0c:97:7b:24:9c:d2:
4c:ce:95:a0:a8:6f:96:f6:45:25:ea:52:a9:50:57:
8d:86:fb:f6:6a:a8:26:d7:97:0d:bf:5f:bf:58:fd:
83:c9:09:bc:01:3b:f2:06:50:06:63:7c:77:7d:e0:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D2:7F:E5:40:DA:5E:91:9F:9E:BB:F0:C1:C5:B2:DD:CA:23:75:67
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jdJ_5UDaXpGfnrvwwcWy3cojdWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.161.0/24
45.92.174.0/24
77.83.72.0/24
193.32.190.0/24
194.156.1.0/24
194.156.26.0/24
194.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:39:84:67:d8:c6:9c:26:4b:36:ac:1c:0e:d7:5a:87:16:de:
02:e2:9c:ad:fe:0c:6b:58:28:44:99:e8:16:3e:3f:9b:5c:39:
13:7f:76:4b:30:a1:73:0b:1a:bb:e7:79:c8:6d:e6:7d:7f:02:
bf:4d:ed:06:60:a1:bb:ef:c1:85:b4:41:87:9d:51:74:dd:d7:
7f:89:d1:80:0f:de:36:86:58:7c:b1:0e:b8:a9:af:e5:18:37:
03:32:48:7c:05:1b:de:37:27:29:11:36:73:c3:b6:2c:87:20:
f4:37:8b:68:55:b8:d6:ef:e9:dc:7a:81:ad:31:e8:8a:31:69:
95:25:e3:95:0f:e8:aa:fc:0a:27:e5:62:15:67:09:f3:22:8d:
13:e1:a2:c2:a3:ac:00:45:a5:46:2c:50:7a:62:00:f7:15:21:
ca:bb:c4:10:ff:c2:bf:77:44:6b:f2:1b:6a:8c:8a:62:03:d9:
24:51:ec:23:44:1b:0e:b2:28:9f:bd:31:c3:f8:f0:ae:46:6c:
0a:07:71:76:16:9b:2a:14:74:62:05:8f:e5:2c:22:2b:4b:31:
15:a5:21:7b:c2:d1:bc:29:70:c5:42:e5:01:bc:ed:fd:a8:18:
ee:c2:f2:11:16:81:8e:bd:90:0e:c5:1f:4f:a9:08:cf:9a:ff:
ae:9b:c3:43
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQlj4gcDTStFyvKGn2IpdIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGQyN2ZlNTQwZGE1ZTkxOWY5ZWJiZjBjMWM1YjJkZGNhMjM3NTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVS8qL6XNO+UdVy5Fndntf44BPjn
jpPLoWwfSHAXm3g2Xae49uEMFe5zgFujJa62kgVrFCSLrJ2crDgJSjF/LA04sPLP
LCP7mz9bY8eaFKnb+p8carw71TBLZmW2LRLOrHPbTEW7KyqpnzB6EUPA2n5Q0jlY
hzCPbdz8Cf46psTJTESqIULatpJ7gpCOilAOcHrI0puOQ3yBUU6VkMwI5AJ0Qn2g
twygppKHTUqf6O82yetQXeBxfRrUz75Ugb9mNqhiutRMrgFB4pUMl3sknNJMzpWg
qG+W9kUl6lKpUFeNhvv2aqgm15cNv1+/WP2DyQm8ATvyBlAGY3x3feCliQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFI3Sf+VA2l6Rn5678MHFst3KI3VnMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvamRKXzVVRGFYcEdmbnJ2d3djV3kzY29qZFdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALVuhAwQA
LVyuAwQATVNIAwQAwSC+AwQAwpwBAwQAwpwaAwQAwpx6MA0GCSqGSIb3DQEBCwUA
A4IBAQBWOYRn2MacJks2rBwO11qHFt4C4pyt/gxrWChEmegWPj+bXDkTf3ZLMKFz
Cxq753nIbeZ9fwK/Te0GYKG778GFtEGHnVF03dd/idGAD942hlh8sQ64qa/lGDcD
Mkh8BRveNycpETZzw7YshyD0N4toVbjW7+nceoGtMeiKMWmVJeOVD+iq/Aon5WIV
ZwnzIo0T4aLCo6wARaVGLFB6YgD3FSHKu8QQ/8K/d0Rr8htqjIpiA9kkUewjRBsO
siifvTHD+PCuRmwKB3F2FpsqFHRiBY/lLCIrSzEVpSF7wtG8KXDFQuUBvO39qBju
wvIRFoGOvZAOxR9PqQjPmv+um8ND
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:24:49 2025 by rpki-client