Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa
File: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (raw, json)
Hash identifier: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=
Subject key identifier: 24:76:5E:42:86:5F:01:B6:8B:52:5A:D9:98:2C:6D:67:50:29:91:6A
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0194266B308AF5B0B9FC5FAB8C46B3B53903
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52468
IP address blocks: 158.172.220.0/23 maxlen: 23
158.172.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:30:8a:f5:b0:b9:fc:5f:ab:8c:46:b3:b5:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24765e42865f01b68b525ad9982c6d675029916a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:63:44:65:5a:4b:f1:57:a6:d4:58:6c:9d:
66:df:10:ea:0a:fb:33:4c:34:57:6f:82:75:07:f6:
73:26:27:82:d4:72:73:93:58:e1:ea:11:da:9b:c7:
b7:94:9d:04:b1:6a:80:29:5c:36:aa:1a:b7:89:ad:
44:aa:0b:e5:6a:3d:98:1b:a4:23:0b:7c:9f:52:72:
e3:d6:d5:f4:50:02:d4:45:19:25:e0:6b:a2:89:f9:
e9:36:7b:47:ca:92:37:5a:2b:4c:85:9d:48:65:9a:
ee:5a:14:3f:de:19:1e:b6:a6:c2:a9:d5:e3:82:20:
c3:3b:7c:6c:70:82:c8:a4:3e:f4:9d:5b:77:54:dc:
88:a3:0d:05:7d:48:a7:67:13:76:fe:89:88:d7:b6:
ef:9d:71:cd:1c:3d:76:85:4e:76:7f:49:04:f1:7a:
68:cf:3d:c5:1c:ff:84:3a:52:cb:91:b5:26:9e:03:
04:7a:9b:07:57:8c:bf:c4:0a:aa:d6:9c:25:9d:07:
57:08:29:4f:f2:8f:32:c9:e8:cd:a0:dc:17:e1:c8:
4b:d9:f5:ad:e5:f6:25:34:4d:03:c5:82:94:87:68:
82:b0:9b:74:22:ec:61:2e:83:5e:52:1d:48:08:16:
5d:31:fb:85:f1:d7:31:e9:83:24:88:01:8b:3b:5f:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:5E:42:86:5F:01:B6:8B:52:5A:D9:98:2C:6D:67:50:29:91:6A
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.220.0-158.172.222.255
Signature Algorithm: sha256WithRSAEncryption
51:ff:88:2b:3b:17:09:0c:60:94:d9:85:5b:8c:c4:97:d1:17:
57:45:56:5f:1e:a5:97:1d:ed:78:3c:21:a7:6c:df:99:8d:3e:
7a:7e:4f:2b:38:d4:83:14:6c:24:d1:50:27:a0:7e:00:ef:d6:
75:22:84:43:72:fd:8c:a0:a0:fd:40:0e:e4:14:1b:2e:6f:01:
6a:3e:6b:1e:2e:a2:d9:0e:71:de:b5:6c:4c:13:89:1c:f5:90:
d5:fe:fb:f3:b2:81:a4:06:20:ac:53:a0:c5:29:7f:63:28:1f:
3e:eb:02:21:cd:ee:7e:75:3a:34:97:6b:82:eb:5b:48:39:bb:
a5:2c:b3:9f:38:c7:4f:4c:55:af:f9:51:0c:9d:14:ab:2f:5c:
6e:05:a2:e1:15:91:65:39:4d:2c:66:fb:af:31:0d:92:e4:3a:
b7:c4:2b:dc:a9:bb:20:99:61:81:d7:dd:40:7b:d5:4e:07:11:
af:35:78:4f:92:c9:a9:b4:a0:5c:2a:da:68:d3:97:44:d5:35:
e3:b2:08:31:f9:73:2d:b7:44:66:15:33:5c:b7:e1:58:64:d0:
5b:f4:77:c9:49:77:ca:a6:1c:fb:a0:8e:7f:9d:62:6a:0f:fd:
f8:15:96:ed:e7:22:e4:fc:7a:dd:d6:ab:43:10:d8:a5:46:b7:
17:f1:72:b1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmazCK9bC5/F+rjEaztTkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjUwMTAyMDk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDc2NWU0Mjg2NWYwMWI2OGI1MjVhZDk5ODJjNmQ2NzUwMjk5MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zdjRGVaS/FXptRYbJ1m3xDqCvsz
TDRXb4J1B/ZzJieC1HJzk1jh6hHam8e3lJ0EsWqAKVw2qhq3ia1Eqgvlaj2YG6Qj
C3yfUnLj1tX0UALURRkl4GuiifnpNntHypI3WitMhZ1IZZruWhQ/3hketqbCqdXj
giDDO3xscILIpD70nVt3VNyIow0FfUinZxN2/omI17bvnXHNHD12hU52f0kE8Xpo
zz3FHP+EOlLLkbUmngMEepsHV4y/xAqq1pwlnQdXCClP8o8yyejNoNwX4chL2fWt
5fYlNE0DxYKUh2iCsJt0IuxhLoNeUh1ICBZdMfuF8dcx6YMkiAGLO1/5RwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCR2XkKGXwG2i1Ja2ZgsbWdQKZFqMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvSkhaZVFvWmZBYmFMVWxyWm1DeHRaMUFwa1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKerNwD
BACerN4wDQYJKoZIhvcNAQELBQADggEBAFH/iCs7FwkMYJTZhVuMxJfRF1dFVl8e
pZcd7Xg8Iads35mNPnp+Tys41IMUbCTRUCegfgDv1nUihENy/YygoP1ADuQUGy5v
AWo+ax4uotkOcd61bEwTiRz1kNX++/OygaQGIKxToMUpf2MoHz7rAiHN7n51OjSX
a4LrW0g5u6Uss584x09MVa/5UQydFKsvXG4FouEVkWU5TSxm+68xDZLkOrfEK9yp
uyCZYYHX3UB71U4HEa81eE+Syam0oFwq2mjTl0TVNeOyCDH5cy23RGYVM1y34Vhk
0Fv0d8lJd8qmHPugjn+dYmoP/fgVlu3nIuT8et3Wq0MQ2KVGtxfxcrE=
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:43:13 2025 by rpki-client