Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TJ_T11Afazhf3X-XRb_MTGkgqHs.roa
File: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (raw, json)
Hash identifier: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=
Subject key identifier: 4C:9F:D3:D7:50:1F:6B:38:5F:DD:7F:97:45:BF:CC:4C:69:20:A8:7B
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01966386562626A38FC79F1E9C8D7AF1EC80
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TJ_T11Afazhf3X-XRb_MTGkgqHs.roa
Signing time: Wed 23 Apr 2025 16:41:10 +0000
ROA not before: Wed 23 Apr 2025 16:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62113
IP address blocks: 185.38.24.0/23 maxlen: 23
2a00:fbe0::/32 maxlen: 32
2a00:fbe1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:86:56:26:26:a3:8f:c7:9f:1e:9c:8d:7a:f1:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Apr 23 16:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c9fd3d7501f6b385fdd7f9745bfcc4c6920a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d1:ed:cd:89:80:27:6e:45:6c:db:7e:2c:4d:
85:bc:0d:31:52:86:1a:78:4e:f9:70:4e:a7:3d:eb:
b2:5e:02:94:16:6e:1e:f5:41:2e:c4:8f:41:97:10:
2f:72:b2:c0:4a:23:ba:23:f2:9a:03:56:e2:60:b8:
78:2f:35:08:29:ed:8a:70:bd:fb:a7:2d:a9:ed:31:
11:68:51:58:51:b7:2f:eb:a8:4d:70:76:73:80:18:
09:e3:7b:a9:15:88:40:29:86:43:7a:01:cc:a9:f9:
b3:56:4e:57:e7:03:50:5c:97:c9:9c:1b:a1:f6:07:
08:0f:89:f7:03:1b:7e:73:f9:36:00:51:25:cd:37:
0a:b3:98:fc:49:87:be:2a:5a:fa:9f:7f:60:21:e4:
b1:8d:2c:ce:00:d5:20:dd:2c:55:80:ca:e2:b5:ea:
78:e8:93:88:c2:c6:37:13:f4:c4:5d:b9:32:f3:7a:
92:51:89:c5:4f:44:f1:09:32:87:7d:cd:f8:9a:0e:
00:ad:d0:fe:60:cc:2f:d5:10:ae:7e:83:d4:39:09:
37:46:2d:02:d1:0d:47:a3:59:4d:b7:fa:7e:ae:30:
0a:3e:3d:86:80:95:d1:8b:62:e2:37:18:12:47:44:
a7:0b:3d:20:df:76:cd:37:0a:84:19:3b:f5:78:1d:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:D3:D7:50:1F:6B:38:5F:DD:7F:97:45:BF:CC:4C:69:20:A8:7B
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TJ_T11Afazhf3X-XRb_MTGkgqHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.24.0/23
IPv6:
2a00:fbe0::/31
Signature Algorithm: sha256WithRSAEncryption
ba:d8:d0:cc:21:c1:33:14:8e:b2:4a:01:e6:03:56:5b:38:2f:
1e:f6:8a:2e:02:89:a4:b0:04:45:23:0f:96:6b:40:5a:12:2f:
7b:f5:9f:06:bd:a0:e4:cc:ee:5f:24:23:e8:e0:0c:02:ec:37:
93:05:5f:02:d0:80:42:33:f9:f5:23:c7:77:aa:19:f5:d2:3e:
df:8a:67:1e:28:ea:5f:92:d6:65:ab:b1:0f:d7:d5:90:3c:81:
6e:76:8e:ea:8e:bc:21:b3:30:3d:a1:0b:1e:e0:68:19:14:cb:
37:96:e0:eb:1f:2b:2f:e4:0f:0d:9e:b2:bb:bf:04:7c:91:b0:
66:1e:fa:53:56:be:f1:74:91:a1:3f:eb:e8:c4:09:d3:fa:31:
9a:1f:a4:bb:0d:7d:44:50:29:81:1d:aa:32:f7:27:ec:f0:c6:
ed:52:83:c6:da:6a:c5:0c:11:3f:34:ce:4c:5a:3d:30:21:f1:
5a:52:61:3f:98:65:f7:79:6d:14:0d:17:1b:80:4a:50:5e:0a:
8c:01:cb:55:b4:74:d4:ad:fd:7a:ea:46:a8:28:5a:0d:f8:f8:
78:34:a4:2e:75:c0:97:3a:49:d8:bd:a2:b1:10:c0:4c:95:85:
95:a9:d1:53:73:16:00:58:a0:e0:5e:2c:7d:3a:11:89:7f:86:
16:12:ee:43
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZZjhlYmJqOPx58enI168eyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNDIzMTY0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzlmZDNkNzUwMWY2YjM4NWZkZDdmOTc0NWJmY2M0YzY5MjBhODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9HtzYmAJ25FbNt+LE2FvA0xUoYa
eE75cE6nPeuyXgKUFm4e9UEuxI9BlxAvcrLASiO6I/KaA1biYLh4LzUIKe2KcL37
py2p7TERaFFYUbcv66hNcHZzgBgJ43upFYhAKYZDegHMqfmzVk5X5wNQXJfJnBuh
9gcID4n3Axt+c/k2AFElzTcKs5j8SYe+Klr6n39gIeSxjSzOANUg3SxVgMritep4
6JOIwsY3E/TEXbky83qSUYnFT0TxCTKHfc34mg4ArdD+YMwv1RCufoPUOQk3Ri0C
0Q1Ho1lNt/p+rjAKPj2GgJXRi2LiNxgSR0SnCz0g33bNNwqEGTv1eB2MvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEyf09dQH2s4X91/l0W/zExpIKh7MB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvVEpfVDExQWZhemhmM1gtWFJiX01UR2tncUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuSYYMA0E
AgACMAcDBQEqAPvgMA0GCSqGSIb3DQEBCwUAA4IBAQC62NDMIcEzFI6ySgHmA1Zb
OC8e9oouAomksARFIw+Wa0BaEi979Z8GvaDkzO5fJCPo4AwC7DeTBV8C0IBCM/n1
I8d3qhn10j7fimceKOpfktZlq7EP19WQPIFudo7qjrwhszA9oQse4GgZFMs3luDr
Hysv5A8NnrK7vwR8kbBmHvpTVr7xdJGhP+voxAnT+jGaH6S7DX1EUCmBHaoy9yfs
8MbtUoPG2mrFDBE/NM5MWj0wIfFaUmE/mGX3eW0UDRcbgEpQXgqMActVtHTUrf16
6kaoKFoN+Ph4NKQudcCXOknYvaKxEMBMlYWVqdFTcxYAWKDgXix9OhGJf4YWEu5D
-----END CERTIFICATE-----
Generated at Fri May 2 01:39:05 2025 by rpki-client