Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/JhwNwII4YOfneNhA5yI11PtA4Rk.roa
File: JhwNwII4YOfneNhA5yI11PtA4Rk.roa (raw, json)
Hash identifier: xDvSQcwSJJU3/GnqEWqCRE4KK2ZXksvwiDHhnfKzQ7A=
Subject key identifier: 26:1C:0D:C0:82:38:60:E7:E7:78:D8:40:E7:22:35:D4:FB:40:E1:19
Certificate issuer: /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial: 01955C56FDE3FBA4C4D64455B10845D4AB18
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/JhwNwII4YOfneNhA5yI11PtA4Rk.roa
Signing time: Mon 03 Mar 2025 14:09:19 +0000
ROA not before: Mon 03 Mar 2025 14:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211500
IP address blocks: 45.136.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:56:fd:e3:fb:a4:c4:d6:44:55:b1:08:45:d4:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Validity
Not Before: Mar 3 14:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=261c0dc0823860e7e778d840e72235d4fb40e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:25:df:f5:17:9d:05:c7:a4:ef:6d:8c:04:
cc:6f:51:8a:41:e2:26:0b:14:7c:8c:e4:2e:08:b0:
0c:24:af:18:9f:e0:9c:2f:96:25:69:e4:6b:9c:1f:
f1:32:03:09:fa:40:78:d6:90:79:0d:1f:ed:08:61:
15:c3:85:3c:75:ed:b1:f4:fa:d2:da:c8:b8:ae:53:
a7:a2:56:6f:1d:7f:b0:f3:13:d0:5e:ff:53:01:1e:
17:c6:98:1e:24:06:6f:54:07:c5:bd:61:85:27:04:
17:e2:0c:34:ec:1f:15:97:30:3e:5b:7e:e1:5d:d4:
bb:f7:70:30:90:56:0a:86:13:51:a1:07:81:cb:6c:
ab:8d:80:ab:d0:0e:08:99:6b:d0:58:75:ff:b6:ed:
b7:ad:4c:4f:74:97:ed:40:16:bc:bf:cb:fb:c6:56:
24:9c:fa:14:d4:88:ef:3c:15:61:9e:68:13:00:39:
55:5a:71:84:80:68:c8:8f:06:b0:f6:e8:2c:3f:dd:
3a:ab:f5:ff:a0:90:e2:67:e6:e0:c4:05:8b:2e:de:
de:8b:48:5c:75:6a:0a:21:ce:4b:ea:78:27:c7:dc:
11:5e:cc:c2:54:7e:1c:80:f5:75:57:ff:b6:f8:23:
cd:70:f2:db:fa:68:60:02:59:a3:5a:6d:48:be:78:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1C:0D:C0:82:38:60:E7:E7:78:D8:40:E7:22:35:D4:FB:40:E1:19
X509v3 Authority Key Identifier:
keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/JhwNwII4YOfneNhA5yI11PtA4Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bf:0b:7e:10:33:6a:85:c0:fa:d8:fe:94:a2:3d:e8:a8:17:
57:36:71:18:89:3e:ec:22:be:4a:2c:ac:9e:0f:67:d5:7c:a9:
f9:84:48:23:16:3d:ee:5b:b4:97:c5:07:86:8e:45:2b:c5:71:
14:35:c4:0f:d6:c3:67:61:2e:08:3d:1c:cc:74:67:b1:ee:7d:
0d:e8:b6:f8:0c:0f:9b:ce:53:20:79:fb:7e:c6:36:58:f3:32:
56:40:f1:20:97:ea:11:f9:e9:ea:0b:e4:0f:2a:63:d4:b3:e5:
66:e9:e7:a8:d3:8a:42:34:ec:2e:71:1c:82:e1:54:8c:31:3e:
2d:52:00:43:c9:54:d9:0d:cf:88:1a:97:b1:b4:a8:c1:80:d8:
d4:6b:d7:e8:5b:19:43:ac:7a:d5:e1:3e:f7:70:73:da:06:6d:
b5:70:33:b5:1e:3f:d8:7b:5a:60:74:79:27:f7:a0:48:ef:3f:
5f:cd:90:ee:9a:6e:80:06:dc:2d:1c:c3:d4:d5:61:1b:0a:ef:
d3:18:d1:e5:27:68:97:76:a3:fe:e5:b2:b8:93:c9:1e:7d:70:
9f:72:eb:b9:b9:b6:23:40:7d:d1:31:e7:11:22:36:27:6a:bc:
8a:67:42:62:e2:dd:1d:3f:50:0b:b8:18:d2:e5:c6:59:ed:2e:
10:b4:52:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVcVv3j+6TE1kRVsQhF1KsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTY1OTFkMWEwNGQ2YWZlMWVkNWY0ZWQwMWQzOTRhZTUx
NDg1ODkwHhcNMjUwMzAzMTQwOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjFjMGRjMDgyMzg2MGU3ZTc3OGQ4NDBlNzIyMzVkNGZiNDBlMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYl3/UXnQXHpO9tjATMb1GKQeIm
CxR8jOQuCLAMJK8Yn+CcL5YlaeRrnB/xMgMJ+kB41pB5DR/tCGEVw4U8de2x9PrS
2si4rlOnolZvHX+w8xPQXv9TAR4XxpgeJAZvVAfFvWGFJwQX4gw07B8VlzA+W37h
XdS793AwkFYKhhNRoQeBy2yrjYCr0A4ImWvQWHX/tu23rUxPdJftQBa8v8v7xlYk
nPoU1IjvPBVhnmgTADlVWnGEgGjIjwaw9ugsP906q/X/oJDiZ+bgxAWLLt7ei0hc
dWoKIc5L6ngnx9wRXszCVH4cgPV1V/+2+CPNcPLb+mhgAlmjWm1IvnjjowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYcDcCCOGDn53jYQOciNdT7QOEZMB8GA1UdIwQY
MBaAFDHmWR0aBNav4e1fTtAdOUrlFIWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVaWkhSb0UxcV9oN1Y5TzBCMDVTdVVVaFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NGE4NWUtYWQ0OS00YzYzLWFiNTkt
YWI3YjBhYTFjM2Q0LzEvSmh3TndJSTRZT2ZuZU5oQTV5STExUHRBNFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NGE4NWUtYWQ0OS00YzYzLWFiNTktYWI3YjBhYTFjM2Q0
LzEvTWVaWkhSb0UxcV9oN1Y5TzBCMDVTdVVVaFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYhtMA0G
CSqGSIb3DQEBCwUAA4IBAQCyvwt+EDNqhcD62P6Uoj3oqBdXNnEYiT7sIr5KLKye
D2fVfKn5hEgjFj3uW7SXxQeGjkUrxXEUNcQP1sNnYS4IPRzMdGex7n0N6Lb4DA+b
zlMgeft+xjZY8zJWQPEgl+oR+enqC+QPKmPUs+Vm6eeo04pCNOwucRyC4VSMMT4t
UgBDyVTZDc+IGpextKjBgNjUa9foWxlDrHrV4T73cHPaBm21cDO1Hj/Ye1pgdHkn
96BI7z9fzZDumm6ABtwtHMPU1WEbCu/TGNHlJ2iXdqP+5bK4k8kefXCfcuu5ubYj
QH3RMecRIjYnaryKZ0Ji4t0dP1ALuBjS5cZZ7S4QtFJ4
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:39 2025 by rpki-client