Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/JGZf0kINrFpmjWepb2PsAYcmWTs.roa
File: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (raw, json)
Hash identifier: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=
Subject key identifier: 24:66:5F:D2:42:0D:AC:5A:66:8D:67:A9:6F:63:EC:01:87:26:59:3B
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 019427471B062D981C971B2AF8A409C95D80
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/JGZf0kINrFpmjWepb2PsAYcmWTs.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215551
IP address blocks: 193.189.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1b:06:2d:98:1c:97:1b:2a:f8:a4:09:c9:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24665fd2420dac5a668d67a96f63ec018726593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:e5:30:d4:72:e9:2b:52:f4:89:19:53:80:
ac:62:74:0e:e2:14:b3:c3:d7:5c:22:84:b6:86:ad:
4d:d4:e8:09:82:cc:8d:0f:5a:3a:53:eb:87:e7:03:
61:e3:21:85:66:ec:83:e4:b8:b1:9b:1a:7d:88:43:
6f:cb:d0:52:fa:6b:e2:ea:b6:eb:5c:e1:ce:85:7f:
1c:77:5e:b0:df:96:f9:b7:6c:41:39:05:19:c9:3b:
e1:5c:ac:1e:fe:59:35:b7:81:fb:58:6c:80:44:29:
17:58:76:72:ff:85:32:43:d7:05:92:1c:49:50:66:
45:c6:2a:e8:fa:f5:e8:79:b2:5c:fc:57:36:05:b1:
b2:76:55:5d:91:09:bf:8d:63:55:03:4d:d3:9c:51:
ff:b9:9b:1d:75:5b:40:79:54:ae:56:fd:b1:26:83:
22:d4:30:e3:42:1a:c4:86:c1:06:cd:b1:5a:84:80:
bc:5f:74:09:e9:45:65:a3:a2:e0:e7:47:e4:ca:5a:
6f:06:cb:4d:1b:4a:f2:3e:49:3b:9c:fb:27:ca:ac:
66:f1:1e:1c:2a:fc:dd:fa:c7:4a:a4:a3:be:b1:91:
c9:a6:dd:86:ce:d5:3e:49:22:70:b1:2b:a6:21:fe:
9d:b8:37:c9:76:a9:c8:69:7a:cb:5a:53:54:c8:27:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:5F:D2:42:0D:AC:5A:66:8D:67:A9:6F:63:EC:01:87:26:59:3B
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/JGZf0kINrFpmjWepb2PsAYcmWTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.101.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:8a:fa:15:38:f6:d2:19:27:3c:89:4b:ce:45:b6:ec:88:
5d:3b:cb:40:05:80:bb:c0:62:45:8c:17:65:7d:cd:3a:1c:9c:
25:68:63:1c:9d:e3:9e:73:1d:fb:db:73:cf:55:88:80:53:f1:
d6:1f:43:ed:12:11:5a:88:29:e9:b7:44:a3:4c:17:54:67:1c:
45:ff:37:27:ef:66:e7:7b:df:8f:15:67:11:b1:56:c8:c8:c5:
a5:28:bf:cb:46:37:eb:60:70:d9:30:ed:01:11:dc:36:a2:ba:
9d:cf:80:94:43:33:e2:aa:3f:ce:67:03:79:d5:29:2e:c3:53:
cc:13:35:e7:99:d6:ad:28:92:bf:33:d7:bd:b7:70:0a:d8:69:
53:e2:a9:a4:38:e7:c4:d8:36:a3:8f:c8:e6:89:c3:72:52:a5:
8e:34:92:d7:f0:b9:a9:45:f0:3e:8d:2e:c0:31:0a:f9:05:32:
ea:c9:5c:0e:22:27:af:c0:c0:1b:90:56:23:cb:cf:ac:97:14:
e0:00:93:bd:95:cd:b0:f8:f5:04:7c:73:d2:e5:9d:f3:00:35:
7e:4a:17:58:40:68:f2:d7:44:1a:7e:83:92:12:52:1e:c5:b2:
fd:93:35:ae:74:ec:9e:78:10:e7:33:70:70:4f:66:a2:09:66:
e5:05:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:49:00 2025 by rpki-client