Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/5J9wJGQ0taRuLtnFbImmMo45f_4.roa
File: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (raw, json)
Hash identifier: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=
Subject key identifier: E4:9F:70:24:64:34:B5:A4:6E:2E:D9:C5:6C:89:A6:32:8E:39:7F:FE
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 019425219EB62ED1307E1A533465D6E77D1D
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/5J9wJGQ0taRuLtnFbImmMo45f_4.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198629
IP address blocks: 194.150.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:b6:2e:d1:30:7e:1a:53:34:65:d6:e7:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49f70246434b5a46e2ed9c56c89a6328e397ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:d0:4e:88:49:89:d5:c6:71:59:85:2a:77:
11:0f:60:71:64:68:87:8f:fb:83:ee:2f:47:e4:23:
4e:6c:b9:8a:2c:fd:14:f5:17:08:65:8d:24:62:b0:
27:46:be:ed:36:a6:7d:27:d1:d8:ef:3c:c4:d3:51:
61:38:c6:20:d6:17:66:88:49:26:59:24:87:a3:48:
ca:a5:5b:95:3f:55:d8:58:48:29:78:59:d0:03:17:
f7:1c:d1:d6:70:72:c8:97:7d:4f:7c:b7:e3:05:40:
6b:4a:15:1f:a7:64:55:cc:d4:ee:b7:36:25:02:8f:
2d:67:c5:81:bd:07:b4:16:f3:3a:cc:a6:d5:7a:85:
a4:cf:15:36:e9:a5:a2:67:73:21:b5:a1:8c:06:8b:
86:62:e5:99:ee:87:72:d9:4d:f3:25:0d:6c:0a:a5:
1b:b3:36:2a:9b:5b:21:6b:a3:d4:e7:28:31:c4:3b:
03:3e:3c:4e:13:8f:54:5c:b9:ed:2e:e7:4a:5e:b5:
50:34:0f:14:c0:a8:90:05:8f:cf:6d:2f:64:7e:d6:
b6:42:04:04:8f:21:2e:b2:a7:86:8b:c2:5d:19:1b:
7d:3d:8c:3d:74:65:13:f8:43:f5:01:6e:97:1c:80:
c7:92:20:19:82:91:bb:4c:f4:00:5a:77:34:20:ca:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:70:24:64:34:B5:A4:6E:2E:D9:C5:6C:89:A6:32:8E:39:7F:FE
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/5J9wJGQ0taRuLtnFbImmMo45f_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:df:03:82:df:51:bd:19:be:3d:89:10:9e:50:7b:b0:51:b6:
ba:3e:63:7d:87:af:23:26:e1:45:5e:fd:0e:db:64:4d:0b:a3:
fb:3d:0f:c9:63:3c:f3:56:a9:f3:b6:bd:ee:ae:2b:2d:dc:8d:
ae:90:3d:a9:5e:d3:69:07:fe:cc:46:4d:3e:6f:7f:8b:f4:08:
97:10:67:1a:f4:31:0e:fb:0e:27:83:a5:3f:72:1e:94:cf:9f:
2d:35:4a:12:41:5a:0e:39:5c:62:e2:36:57:98:78:66:ac:d0:
00:18:52:1b:10:71:67:6b:35:69:30:a6:9f:72:d4:02:e2:d7:
38:1b:6e:eb:d3:62:b3:aa:bf:c5:19:ea:16:8a:dc:6c:bd:64:
8c:ad:d1:d9:22:d9:31:22:75:96:ae:4f:c4:3b:9e:df:34:a8:
05:95:38:6d:cf:a5:fc:28:38:75:08:27:8c:9f:eb:1a:a5:c9:
47:be:10:21:c0:5e:89:44:9c:2d:dc:e4:79:0e:5e:02:b5:cc:
0a:d6:b5:79:26:db:2a:8e:f1:74:f7:23:f4:d7:d6:bc:09:ff:
f8:91:5a:b0:98:8f:87:9a:b0:46:2d:e6:bd:d1:c4:5c:55:2a:
d6:df:8f:e9:1b:29:cd:98:55:21:21:4b:d2:7e:e9:79:85:e2:
59:1f:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:25 2025 by rpki-client