Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/JpI0mKHoKJGb5HpwhqpgQJ-989w.roa
File: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (raw, json)
Hash identifier: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=
Subject key identifier: 26:92:34:98:A1:E8:28:91:9B:E4:7A:70:86:AA:60:40:9F:BD:F3:DC
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 019420683FE2A45FC64E382014919274B6FE
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/JpI0mKHoKJGb5HpwhqpgQJ-989w.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207134
IP address blocks: 2a00:8860:500::/40 maxlen: 64
2a00:8861:500::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3f:e2:a4:5f:c6:4e:38:20:14:91:92:74:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26923498a1e828919be47a7086aa60409fbdf3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:0d:69:86:19:cc:94:7a:86:46:38:5b:95:
54:1c:4b:87:26:d9:a3:5e:bc:6a:7f:0a:29:88:27:
b3:29:67:0f:db:a9:4a:a7:5b:24:26:99:73:dc:d4:
33:36:6c:ea:2b:e0:4a:f3:e8:16:9b:cc:54:2a:36:
4c:bd:8c:99:db:8e:e9:f9:d8:19:13:5d:a6:e0:78:
3a:55:dc:6f:d3:c4:c4:69:1f:83:cd:06:14:fd:2f:
34:e5:53:a3:fb:50:7a:15:e7:48:d0:1c:7d:c8:0e:
a8:9c:b4:7a:19:7f:d3:63:f8:ed:f5:4c:14:2f:41:
28:ef:79:80:c6:e2:72:14:4d:6c:35:32:5a:11:43:
59:ac:77:46:08:33:91:6b:79:84:37:77:25:40:b9:
5a:35:e0:2c:73:81:18:ed:f8:b3:a1:b0:b5:66:01:
a4:41:b0:f0:6d:31:6c:0a:b9:b0:5d:87:20:07:2f:
bf:46:c7:f4:13:68:ed:ed:d2:fc:2b:c3:c1:10:29:
23:37:4e:0b:30:92:ab:4f:57:26:3b:e2:30:20:ca:
e1:dd:bd:42:96:1b:81:81:dd:6d:e0:16:5b:de:6f:
6a:cc:d0:62:66:e5:79:7b:27:a7:a3:0f:89:86:41:
e5:7b:53:98:7f:07:16:53:f0:3d:f0:03:8f:9d:95:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:34:98:A1:E8:28:91:9B:E4:7A:70:86:AA:60:40:9F:BD:F3:DC
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/JpI0mKHoKJGb5HpwhqpgQJ-989w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8860:500::/40
2a00:8861:500::/40
Signature Algorithm: sha256WithRSAEncryption
58:f4:fa:72:b7:69:98:b6:02:da:71:50:37:17:10:6e:c3:24:
5d:8b:37:5d:e1:cd:c0:08:7a:1d:23:e1:f2:88:82:79:18:98:
ce:63:5f:9a:ce:4d:f7:c2:17:78:86:48:3c:53:0a:6a:6d:60:
23:98:60:24:32:87:b1:99:b1:61:59:c1:ea:c7:58:a1:57:8d:
66:b6:2d:13:f8:4b:12:5a:ab:4f:ba:4e:65:65:e0:ba:eb:48:
e7:6d:aa:77:49:13:ab:9a:1b:ab:08:c9:62:ad:c0:46:8d:d8:
25:c7:c5:48:9d:1a:ad:da:9c:31:6d:60:8f:f1:28:dc:09:23:
9d:be:f2:69:f1:ab:ab:13:30:45:f5:1f:dc:a5:40:3a:67:b1:
eb:17:09:88:53:13:79:23:7b:d0:93:b1:13:de:73:1c:4f:ae:
3e:da:97:f8:54:4f:d0:c0:39:ec:7b:33:f3:99:c3:c8:3c:fd:
98:39:94:0e:3d:c8:09:42:39:f4:7c:a3:d7:8e:49:db:cf:1b:
14:10:e1:a2:4a:3d:ad:aa:83:8e:24:a7:94:70:33:e3:52:23:
02:7a:b5:c8:4c:d5:30:53:af:52:5e:98:85:03:c9:d8:bd:e4:
70:0c:cd:06:4a:e5:cc:48:5e:26:61:e1:2f:27:ce:b4:8d:60:
e4:db:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:59:50 2025 by rpki-client