Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JHXOEB8afeZqxiMZnvhQ_3XJpt8.roa
File: JHXOEB8afeZqxiMZnvhQ_3XJpt8.roa (raw, json)
Hash identifier: q5rq/+L6EzddY4nSPNb5v3JxaHnbr0ZRDNL+DGkB/PQ=
Subject key identifier: 24:75:CE:10:1F:1A:7D:E6:6A:C6:23:19:9E:F8:50:FF:75:C9:A6:DF
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE179B80199C4B026B990E2F00C73
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JHXOEB8afeZqxiMZnvhQ_3XJpt8.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210311
IP address blocks: 2a0e:aa01:aa00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e1:79:b8:01:99:c4:b0:26:b9:90:e2:f0:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2475ce101f1a7de66ac623199ef850ff75c9a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:7b:0d:d2:7e:21:fc:2e:9d:c7:2c:29:e5:
2d:c1:e0:61:44:34:52:c6:02:09:fa:63:bb:d0:a9:
f6:28:e0:5a:21:d2:2f:17:02:09:c3:2a:83:e7:18:
74:e1:c9:d1:b7:eb:ac:08:65:f0:43:1c:a6:bb:2d:
05:a0:85:8e:3d:6c:4e:b6:4c:27:db:5d:4e:5f:19:
51:6d:14:a4:cd:77:4e:39:0a:a3:96:6f:eb:02:17:
c3:d2:50:12:29:11:b2:87:18:4a:b8:e2:7f:d5:a6:
70:84:d4:6d:60:a7:cd:91:b2:da:fc:ca:b8:e8:84:
09:30:38:8d:3e:aa:01:9d:91:ff:3b:e0:89:1d:31:
d6:29:68:0d:e8:27:a9:ed:30:45:91:11:a0:6e:58:
bb:ed:c8:51:28:05:f9:3d:23:47:6c:7a:41:a6:a1:
5b:df:ab:d9:31:42:3b:fc:6e:a8:f1:2b:87:22:21:
c8:63:13:74:14:b8:6b:f0:c7:c1:eb:ea:4d:17:f7:
e6:51:f5:8b:f5:fa:c0:c5:a4:a7:d9:b5:5e:d7:72:
6c:53:cc:34:4a:5d:1b:9a:17:a1:91:5a:58:df:5a:
c2:ac:ac:96:0a:f4:6c:65:27:01:6d:e4:c7:ab:18:
51:6a:57:6c:48:63:a8:81:37:a8:a9:4d:ff:97:19:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:CE:10:1F:1A:7D:E6:6A:C6:23:19:9E:F8:50:FF:75:C9:A6:DF
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JHXOEB8afeZqxiMZnvhQ_3XJpt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
57:a1:05:aa:66:f8:71:98:b0:21:5c:3e:d8:a9:11:21:8e:11:
29:79:70:e0:d3:60:89:f5:dc:50:d7:7d:2c:e6:ee:26:c2:4d:
f7:57:b6:c5:5a:fb:84:e2:f3:4c:93:1c:66:0b:8a:0a:9a:74:
c9:9a:75:43:7c:be:f5:5c:61:e7:8f:1e:51:7d:6c:a8:bc:65:
53:37:5e:ce:ce:f6:32:7a:9e:13:62:e3:04:41:fa:bc:dd:79:
f7:b6:db:5e:1a:32:07:cd:ce:3f:1b:df:67:c3:ae:60:6e:6f:
43:54:63:83:31:7a:e9:77:fb:5b:f8:6c:8f:25:dc:7c:0c:1f:
fd:a8:07:8f:95:7d:16:1a:fe:a5:df:ae:00:9c:17:33:0f:a1:
f6:c9:63:52:da:d9:db:19:c6:2a:48:af:d5:43:54:c1:3d:96:
73:5c:85:49:ba:16:8e:80:0e:8e:b1:49:70:b8:05:8b:cb:f7:
10:37:7f:3c:a7:22:9a:be:aa:19:0f:1f:84:8d:cd:65:80:50:
d9:dc:90:95:89:1d:ca:3c:54:dc:20:8a:f4:7e:7f:d0:54:6e:
d4:a9:66:1f:3c:70:86:aa:e3:22:97:87:14:5e:d0:ee:b3:0a:
f4:6d:11:da:91:63:b1:32:fa:e4:99:bb:d7:ea:b0:58:28:7c:
66:87:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:11 2025 by rpki-client