Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cJPoN2exOlBe0znjDpoyPFBap3g.roa
File: cJPoN2exOlBe0znjDpoyPFBap3g.roa (raw, json)
Hash identifier: IdWhM3Mtm2ghEeTFO8y//1mQv2sMT7OeEz90dNl77TM=
Subject key identifier: 70:93:E8:37:67:B1:3A:50:5E:D3:39:E3:0E:9A:32:3C:50:5A:A7:78
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01958E995E105857A9DE59354EDF624AA373
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cJPoN2exOlBe0znjDpoyPFBap3g.roa
Signing time: Thu 13 Mar 2025 08:22:50 +0000
ROA not before: Thu 13 Mar 2025 08:22:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136557
IP address blocks: 109.61.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:99:5e:10:58:57:a9:de:59:35:4e:df:62:4a:a3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 13 08:22:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7093e83767b13a505ed339e30e9a323c505aa778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:78:aa:eb:53:4b:db:c5:4c:b7:88:54:fd:
ef:d9:57:02:ed:c1:4f:eb:57:b1:82:84:e3:d2:d6:
55:f0:54:6e:5c:79:77:34:55:06:da:6b:66:ce:0f:
26:a8:52:09:6a:94:db:f0:37:33:91:df:7a:83:1a:
0a:86:58:5b:40:68:29:38:eb:7a:0d:25:83:b2:ba:
4d:8c:41:9b:2a:cc:e9:1c:d8:96:d5:63:7c:a4:c0:
3e:d8:8b:5f:d8:59:0a:be:b1:75:8a:c3:db:84:ea:
08:d8:8c:2e:3d:fa:e7:4c:65:7d:41:b3:a7:af:d2:
2c:10:0c:05:34:fa:ca:ab:c7:d1:76:3b:ec:61:b2:
57:41:87:5e:91:5e:ec:bc:c2:df:e7:97:8e:8a:c2:
56:cd:bf:62:c1:be:9b:66:3e:28:72:86:ac:39:3c:
f4:fa:e2:9d:8f:c7:85:d1:ab:06:41:ce:82:80:e8:
4d:f5:4f:65:d7:dc:70:46:51:7c:f2:bf:ba:0e:ed:
7e:29:81:8b:58:da:04:6c:2a:08:dc:1d:76:2d:43:
98:f8:8f:0b:c6:05:a0:4c:76:2e:54:73:83:ce:13:
04:38:3f:d5:2d:06:5a:83:5d:74:a6:7e:9e:7d:96:
27:2e:21:67:c8:61:74:4a:36:c7:2c:92:45:ec:8e:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:E8:37:67:B1:3A:50:5E:D3:39:E3:0E:9A:32:3C:50:5A:A7:78
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cJPoN2exOlBe0znjDpoyPFBap3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b0:f6:39:ef:7d:07:c5:6b:11:1d:c8:f3:9d:e4:d0:57:aa:
8b:d4:9d:34:b4:13:b1:a9:ff:1a:21:c3:f8:a0:18:8a:87:4e:
82:c3:71:ff:6a:f4:b0:82:19:3f:fe:a9:82:09:76:6e:12:2a:
f8:88:bd:8a:b7:14:dd:76:0d:25:f4:8b:4c:40:e8:c5:a4:67:
48:ad:d5:c1:1d:eb:f0:ee:77:e4:51:b4:f7:b5:ce:9c:ea:7b:
e7:2d:16:4f:30:92:da:56:1c:d1:8e:db:df:87:9f:8e:86:ed:
6b:26:98:d0:a1:26:cc:e3:b2:2e:04:7b:f1:fd:72:73:90:69:
d7:b0:e9:d3:f7:e1:8d:6d:2a:a0:f4:b8:1c:1e:62:9e:34:4d:
56:97:3e:a9:a5:a4:02:5d:f1:9e:5a:64:bc:70:c8:99:a4:59:
89:60:e1:e3:54:91:63:0d:e1:79:fc:0d:1c:0f:fa:8f:e2:bf:
b2:a8:cc:fe:3f:04:d6:85:8e:bf:3b:8e:b2:ee:b3:a3:9f:77:
29:69:a8:d9:cb:9a:03:6f:17:c8:6d:52:dd:e7:3d:e6:b2:43:
15:f0:e5:07:55:75:23:cd:06:f5:5f:93:dc:7d:14:ef:15:0d:
fa:f6:ec:72:b5:2b:ff:65:46:31:8e:a8:ca:cf:ff:c8:64:27:
4b:81:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:54:50 2025 by rpki-client