Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/J-YNRAfCFPAHCjk40Hz4fv9mdtI.roa
File: J-YNRAfCFPAHCjk40Hz4fv9mdtI.roa (raw, json)
Hash identifier: KMn4A50xEXE3QCT5nZo4r687v4mDj9MorIeO8LzlK2U=
Subject key identifier: 27:E6:0D:44:07:C2:14:F0:07:0A:39:38:D0:7C:F8:7E:FF:66:76:D2
Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial: 01953200B7ED76626A1CEE49D51F71A1E3C4
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/J-YNRAfCFPAHCjk40Hz4fv9mdtI.roa
Signing time: Sun 23 Feb 2025 08:51:02 +0000
ROA not before: Sun 23 Feb 2025 08:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215930
IP address blocks: 81.30.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:00:b7:ed:76:62:6a:1c:ee:49:d5:1f:71:a1:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Validity
Not Before: Feb 23 08:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e60d4407c214f0070a3938d07cf87eff6676d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:62:a5:fa:e8:44:e8:13:67:62:f3:de:dd:
44:18:2c:e6:ed:b3:7e:67:89:dd:ec:c8:14:b6:1e:
83:d3:a3:ad:ff:33:b8:80:e8:f6:b9:63:27:6c:93:
97:34:22:ce:b8:d0:cc:39:b8:cf:80:a5:9c:2c:24:
9a:f8:ea:26:0b:f8:a6:bd:47:ae:0e:f6:cc:ea:43:
25:8c:a3:ad:d8:59:d5:98:25:c4:4a:0b:45:24:96:
7a:4a:97:8b:80:c6:d3:f2:42:7e:63:7c:c6:84:75:
3f:ad:e1:19:8c:f4:76:e3:34:8a:f0:a4:d4:47:f7:
54:a5:c3:8b:58:e5:f8:64:d5:0c:bf:8a:17:ab:ef:
b9:2a:a9:e9:41:20:3d:7f:56:d5:1d:bc:d5:27:66:
5a:38:08:9a:f7:d6:5a:cc:7e:01:57:8c:ca:b1:96:
81:c8:ab:3b:f9:f5:8a:0a:9d:b5:f9:32:82:de:50:
ce:44:1c:2d:61:f4:e9:db:83:00:72:92:4c:1b:39:
d5:78:ae:79:e3:30:90:75:19:4a:6a:7f:40:90:7a:
f6:42:07:17:c7:71:22:86:b7:d1:51:25:d1:11:c0:
d6:59:87:16:40:ad:90:97:29:cd:56:8d:ce:c1:3b:
53:16:1b:52:bb:7c:fd:7e:5e:df:66:0f:54:5c:80:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:0D:44:07:C2:14:F0:07:0A:39:38:D0:7C:F8:7E:FF:66:76:D2
X509v3 Authority Key Identifier:
keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/J-YNRAfCFPAHCjk40Hz4fv9mdtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.107.0/24
Signature Algorithm: sha256WithRSAEncryption
26:40:3f:0e:2d:02:52:51:4d:1d:cd:d9:be:79:e8:c1:cc:b4:
aa:12:0d:a4:4f:b5:fa:95:87:a8:44:36:26:d0:c3:9f:ac:1c:
f2:df:a6:6b:b4:2a:f3:bc:81:e6:bd:cb:1a:dd:7e:3a:70:db:
f3:91:2e:a0:8e:ee:5b:70:28:59:8a:01:95:73:59:a2:e9:4f:
bf:6b:81:29:83:be:00:aa:7c:f4:bb:e1:d5:75:1e:d2:3a:b5:
66:d5:50:cb:8e:29:13:87:24:18:30:9c:4e:e7:55:70:b5:95:
db:80:1c:90:ff:81:41:95:00:d7:20:16:c7:33:ce:94:dc:f4:
30:87:5d:c0:37:03:6a:30:03:94:a0:93:d1:4b:cf:ec:d4:b0:
94:7f:45:d4:54:2d:d0:f6:69:cf:dd:f0:5b:25:c5:5c:5a:6e:
ff:12:2f:48:ae:01:3a:e9:58:65:74:85:65:84:ad:01:e5:1c:
36:34:b2:fe:93:79:ad:1b:61:82:6a:3c:07:68:e6:56:17:4b:
8a:c6:c0:ef:eb:5d:de:1c:2e:95:7a:c2:4f:ea:4f:d9:03:5d:
bf:67:38:3e:58:74:c2:b9:49:78:08:7f:10:14:d7:a4:f7:28:
2e:ca:87:ab:b1:a2:ce:a3:2c:26:59:76:30:03:c5:e3:56:4a:
2c:02:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:34 2025 by rpki-client