Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JugFLe6jENz0xFJw2G6fMpeVf-I.roa
File: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (raw, json)
Hash identifier: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=
Subject key identifier: 26:E8:05:2D:EE:A3:10:DC:F4:C4:52:70:D8:6E:9F:32:97:95:7F:E2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0195C1BF39FDC70D6B72D6F9A6DE39B419DA
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JugFLe6jENz0xFJw2G6fMpeVf-I.roa
Signing time: Sun 23 Mar 2025 06:44:49 +0000
ROA not before: Sun 23 Mar 2025 06:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 178.239.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:bf:39:fd:c7:0d:6b:72:d6:f9:a6:de:39:b4:19:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 23 06:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26e8052deea310dcf4c45270d86e9f3297957fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:ca:19:b1:a1:84:17:c3:67:ed:67:3d:89:
eb:aa:ab:9f:8c:bd:bc:4a:d8:98:06:8f:96:6a:cb:
62:c4:44:b5:27:3b:4d:98:ce:de:6b:1b:71:df:36:
ba:bc:1a:06:64:17:92:f3:e8:8a:fd:65:9e:75:fa:
0f:0a:81:77:6f:4b:d5:ca:20:98:33:bb:2c:47:df:
1a:13:44:9d:b4:d2:d8:cc:d6:d2:16:9f:48:94:bf:
2a:89:e0:e9:74:ae:2b:c9:93:dc:6c:e3:07:27:8c:
1d:2a:12:5d:37:9c:c8:79:2b:39:e6:6a:d4:93:fb:
fa:53:a3:2c:f0:d7:84:44:ba:3c:f5:ef:41:23:80:
3f:a8:3c:22:e6:61:9c:5d:7a:bb:b9:67:9c:74:90:
39:c9:dc:60:e7:0f:78:c8:7b:a7:78:9f:c2:d3:53:
9f:be:54:ad:09:12:80:ef:99:9d:23:bc:49:7a:fc:
ec:ff:1b:43:14:dc:be:3c:1a:f2:86:41:5e:7d:b1:
f9:53:f0:dc:00:ea:72:74:1a:65:d0:f7:62:d4:23:
98:d1:41:cc:39:e2:bc:fa:88:4b:43:f7:a1:e5:51:
6c:b8:5d:e3:92:0b:dc:b5:7f:d6:d7:25:d3:d4:e9:
14:82:38:b3:e4:bb:79:2c:58:19:3c:be:b4:5f:d0:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E8:05:2D:EE:A3:10:DC:F4:C4:52:70:D8:6E:9F:32:97:95:7F:E2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JugFLe6jENz0xFJw2G6fMpeVf-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ac:97:6e:97:f6:a6:19:64:4e:a3:1f:7e:df:06:9d:15:26:
e0:5e:27:da:62:93:38:e6:69:ff:09:78:5b:d5:7d:18:b2:22:
55:5b:f2:a5:2e:23:36:19:76:72:f7:04:0b:ed:28:8a:57:50:
ea:17:a0:6f:fc:70:82:7a:d3:71:79:37:79:bb:8b:51:f1:5e:
31:fa:d9:49:38:82:c0:25:38:03:46:b5:78:35:cd:5c:9c:69:
3e:bf:9e:5d:16:0b:f5:e6:d7:74:9e:96:8a:ac:6d:fb:16:5c:
ff:88:0b:97:c1:68:46:e3:06:c0:f1:08:cf:c7:e7:7f:66:5d:
69:ba:77:c2:b8:92:16:da:92:91:16:b2:5f:3c:03:da:3c:ae:
f3:ee:38:ba:43:24:77:62:43:e2:02:19:58:bb:e4:14:5a:5f:
54:bf:83:f1:e0:c2:fc:9a:8b:e4:0f:5f:70:4d:25:2a:36:1d:
b3:da:84:c6:8b:f8:b1:e4:d5:76:6a:08:98:01:b8:0d:48:7c:
d4:97:cc:ec:77:5d:1b:1b:e4:eb:11:5c:b8:e4:7b:1f:97:f7:
16:13:a1:18:ac:9e:32:ba:e2:77:12:45:c5:9f:74:06:66:8a:
56:8c:d6:57:9b:1f:af:05:b0:bf:7d:bf:94:84:da:bd:b1:87:
85:b0:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:12 2025 by rpki-client