Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/j9-kjL9aqCEGEPsMmVJtf8aJKX8.roa
File: j9-kjL9aqCEGEPsMmVJtf8aJKX8.roa (raw, json)
Hash identifier: A4oPwTnbquV31GYynJHNNbrNFHHisTQaY0GAqGYb3gE=
Subject key identifier: 8F:DF:A4:8C:BF:5A:A8:21:06:10:FB:0C:99:52:6D:7F:C6:89:29:7F
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196464BBC76E9DD46A6536D0A26A049B560
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/j9-kjL9aqCEGEPsMmVJtf8aJKX8.roa
Signing time: Fri 18 Apr 2025 00:28:10 +0000
ROA not before: Fri 18 Apr 2025 00:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210732
IP address blocks: 185.162.176.0/24 maxlen: 24
188.94.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:4b:bc:76:e9:dd:46:a6:53:6d:0a:26:a0:49:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 18 00:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fdfa48cbf5aa8210610fb0c99526d7fc689297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:49:1a:36:33:e9:66:a8:35:6b:64:66:92:
c1:ad:a4:de:4e:19:a3:fb:e1:0f:09:90:25:34:00:
f4:38:6f:5f:a4:e2:59:c7:f3:fb:41:8f:d5:78:17:
0e:26:4e:3c:99:dc:3e:58:15:ea:51:7d:bc:6b:8f:
0d:84:55:6a:c3:df:b6:9a:79:1f:32:6b:1f:e7:d7:
07:26:6e:18:07:a9:bf:2f:48:7f:36:9c:e7:f1:70:
ea:67:e7:bc:99:fa:5a:53:35:75:0f:84:98:1b:a0:
8d:33:51:bf:33:66:f7:b5:fe:97:4f:8f:ba:0c:68:
df:09:72:e5:8a:ad:6e:e5:bf:0f:50:2a:73:c6:4f:
69:5a:5e:c4:59:d9:6e:3d:c2:b8:f0:7a:e6:52:b9:
97:fa:c0:b9:7e:10:29:a0:aa:d1:e3:0f:8f:c4:27:
e4:57:94:c5:5b:6c:6c:9a:1e:b4:a7:92:2d:fe:b9:
53:95:d5:da:79:21:df:59:b6:04:6e:5d:d7:d1:bf:
4d:33:81:75:3a:41:71:11:fd:b4:1e:db:75:83:c4:
dd:69:f1:f8:26:0a:25:eb:73:d5:a8:20:5b:1c:9f:
05:74:7e:d4:5f:37:54:52:91:f6:32:4c:73:4d:2c:
49:48:7d:d3:ff:43:3a:4c:84:a1:3b:d6:91:e7:9b:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:A4:8C:BF:5A:A8:21:06:10:FB:0C:99:52:6D:7F:C6:89:29:7F
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/j9-kjL9aqCEGEPsMmVJtf8aJKX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0c:55:f1:b0:9d:0b:9f:17:3c:79:1c:6d:56:b0:e5:aa:98:
46:1f:86:05:91:e5:af:8e:cb:34:ca:ca:fd:ad:81:24:e5:ee:
ae:c8:0c:13:4b:72:07:2c:f6:1e:3e:05:76:b9:50:7d:bf:73:
df:41:b4:50:eb:06:49:ed:ab:cb:5f:2e:13:ad:7e:33:7f:a6:
d1:e5:e5:09:19:2c:57:52:a7:a1:2f:eb:54:8d:3a:99:fb:2c:
ca:c5:c7:20:ee:1e:06:4e:00:27:84:27:e9:b6:63:e8:a1:e0:
f2:a7:2d:bc:c1:de:d9:03:f8:71:94:57:dc:8a:0f:71:71:c1:
0e:9a:82:e5:b7:1b:a8:9d:83:cd:41:73:be:0b:53:2a:d4:d5:
58:f7:48:02:b0:8e:84:4e:1f:c9:46:4e:ca:e6:03:62:20:1a:
7a:8d:da:33:97:3a:80:c1:b1:cb:01:d7:7c:06:4c:9f:9c:c1:
74:88:2c:a2:92:a8:29:d4:4c:65:11:39:99:5f:9a:6c:d0:1e:
4d:7e:25:e4:02:b0:ba:e9:30:6f:dc:c2:fc:f0:b4:ce:c2:5f:
61:eb:ed:5b:50:df:25:b6:e5:bf:2a:9e:16:12:1a:1a:8b:09:
2c:30:c5:57:b3:f8:9f:db:08:d8:39:33:95:37:3f:99:ac:85:
2a:51:d4:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZGS7x26d1GplNtCiagSbVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwNDE4MDAyODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmRmYTQ4Y2JmNWFhODIxMDYxMGZiMGM5OTUyNmQ3ZmM2ODkyOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXBJGjYz6WaoNWtkZpLBraTeThmj
++EPCZAlNAD0OG9fpOJZx/P7QY/VeBcOJk48mdw+WBXqUX28a48NhFVqw9+2mnkf
Mmsf59cHJm4YB6m/L0h/Npzn8XDqZ+e8mfpaUzV1D4SYG6CNM1G/M2b3tf6XT4+6
DGjfCXLliq1u5b8PUCpzxk9pWl7EWdluPcK48HrmUrmX+sC5fhApoKrR4w+PxCfk
V5TFW2xsmh60p5It/rlTldXaeSHfWbYEbl3X0b9NM4F1OkFxEf20Htt1g8TdafH4
Jgol63PVqCBbHJ8FdH7UXzdUUpH2MkxzTSxJSH3T/0M6TIShO9aR55u4ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI/fpIy/WqghBhD7DJlSbX/GiSl/MB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvajkta2pMOWFxQ0VHRVBzTW1WSnRmOGFKS1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaKwAwQA
vF6/MA0GCSqGSIb3DQEBCwUAA4IBAQCDDFXxsJ0Lnxc8eRxtVrDlqphGH4YFkeWv
jss0ysr9rYEk5e6uyAwTS3IHLPYePgV2uVB9v3PfQbRQ6wZJ7avLXy4TrX4zf6bR
5eUJGSxXUqehL+tUjTqZ+yzKxccg7h4GTgAnhCfptmPooeDypy28wd7ZA/hxlFfc
ig9xccEOmoLltxuonYPNQXO+C1Mq1NVY90gCsI6ETh/JRk7K5gNiIBp6jdozlzqA
wbHLAdd8BkyfnMF0iCyikqgp1ExlETmZX5ps0B5NfiXkArC66TBv3ML88LTOwl9h
6+1bUN8ltuW/Kp4WEhoaiwksMMVXs/if2wjYOTOVNz+ZrIUqUdSB
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:21 2025 by rpki-client