Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j-60Smkd34pUp65Reim9QN1pXBY.roa
File: j-60Smkd34pUp65Reim9QN1pXBY.roa (raw, json)
Hash identifier: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=
Subject key identifier: 8F:EE:B4:4A:69:1D:DF:8A:54:A7:AE:51:7A:29:BD:40:DD:69:5C:16
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0194252201A454784927F48A9579065BF907
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j-60Smkd34pUp65Reim9QN1pXBY.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 45.67.0.0/22 maxlen: 32
80.246.28.0/24 maxlen: 24
188.68.0.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:01:a4:54:78:49:27:f4:8a:95:79:06:5b:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8feeb44a691ddf8a54a7ae517a29bd40dd695c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:ff:04:84:1c:f6:4e:2e:99:05:bc:8d:17:
7d:5a:c4:a6:05:44:a1:b0:61:26:43:2d:dc:e2:f3:
17:d5:94:5c:e3:ae:a2:bf:34:37:50:ae:b8:b8:a0:
ec:06:c6:d8:ad:3d:a2:ab:48:a1:d0:7e:2f:dd:24:
5e:0f:ee:dc:e3:22:2d:b2:db:51:8a:da:c7:d1:0f:
37:d0:15:26:79:57:13:73:0e:8f:53:93:4c:5e:50:
53:27:7f:c6:c8:0e:de:08:1e:22:0e:8d:34:fa:a8:
1c:08:a9:58:32:24:3f:e5:ff:28:29:ee:98:4d:42:
aa:fb:4d:8b:ab:32:c2:02:83:33:df:21:30:18:29:
1c:c4:b4:2c:a2:f0:89:af:71:b8:54:98:e4:d0:93:
27:ec:9e:89:20:55:58:c6:e4:a4:28:01:ae:07:ad:
97:e8:16:44:e5:c2:5e:19:e6:64:af:2e:58:35:98:
85:93:93:e0:82:b1:ea:5f:fe:8a:00:68:55:2e:ab:
ec:88:dc:22:eb:67:cd:4e:b1:3a:64:d3:cb:f9:77:
78:2f:34:bc:8a:06:35:5d:e0:a3:43:71:cc:42:78:
d0:a8:6b:0c:fc:8c:da:5b:08:49:55:52:a2:5d:52:
03:02:e8:d1:95:89:fb:bf:c5:f2:68:48:f5:b8:92:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:B4:4A:69:1D:DF:8A:54:A7:AE:51:7A:29:BD:40:DD:69:5C:16
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j-60Smkd34pUp65Reim9QN1pXBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.0.0/22
80.246.28.0/24
188.68.0.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:64:2c:7d:18:bc:cd:3c:dc:fd:32:81:64:85:cb:d3:1e:9c:
bc:36:4e:91:39:b3:dd:cf:8d:e7:e8:82:af:33:5b:ec:45:b3:
7d:72:d6:be:2c:97:bc:9c:0d:2f:54:cd:d9:7d:a1:a5:c6:d3:
bf:51:4f:dd:bd:7c:16:47:7e:c4:10:84:ac:6b:86:3b:7b:06:
20:48:9c:ce:fa:b1:fe:37:a7:9b:68:d5:d9:37:78:35:66:bf:
dd:11:25:5a:0f:2f:00:07:c7:95:a9:72:d6:b6:eb:4c:b7:c2:
8f:1d:70:c7:e3:32:60:1c:8c:e4:44:3d:98:2c:7a:d8:43:55:
87:07:d2:b9:ac:93:e9:9e:3e:b2:7f:48:96:39:dd:e9:ba:f5:
d8:5f:24:2d:6d:74:d4:25:af:f6:47:ee:68:4c:fe:d9:a7:8f:
68:68:81:90:fd:3c:c4:4f:31:96:34:8b:c1:c8:16:43:37:2e:
83:7b:1c:a8:68:d9:68:28:78:df:8d:a0:ac:93:33:e3:1c:a8:
f3:5f:f9:f6:b3:11:54:37:2c:7e:ce:43:a8:f1:73:97:52:e1:
ec:8c:82:ab:e0:25:c1:c3:05:e3:71:92:84:30:79:d1:c0:ac:
26:96:a9:5b:52:c0:fe:4c:da:b3:85:6f:10:11:f4:13:7d:52:
1f:85:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:22 2025 by rpki-client