Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJJ4pIW0eVR279P-iH1Pd01Qrt8.roa
File: JJJ4pIW0eVR279P-iH1Pd01Qrt8.roa (raw, json)
Hash identifier: f85h5+Ty/NI7qu9aQUB2z5nUojiAoAaS6yy4nyWnlnQ=
Subject key identifier: 24:92:78:A4:85:B4:79:54:76:EF:D3:FE:88:7D:4F:77:4D:50:AE:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282466CDDF5B07CB9A1D966D719C4B55
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJJ4pIW0eVR279P-iH1Pd01Qrt8.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22356
IP address blocks: 185.219.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:66:cd:df:5b:07:cb:9a:1d:96:6d:71:9c:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=249278a485b4795476efd3fe887d4f774d50aedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:7b:1a:19:4f:f7:6d:73:d1:37:b5:0d:42:
ad:49:a4:45:a6:1d:79:29:6d:fb:5b:59:82:16:b4:
26:de:12:45:9f:13:3c:7b:4b:b2:b4:99:3a:8b:a6:
6f:de:e7:c2:14:6d:12:00:27:86:39:8d:2a:ff:9c:
4a:c7:0e:e6:e5:3a:10:c8:19:f5:92:68:3e:51:5f:
2e:0a:68:6f:d3:3a:62:a9:73:2d:76:eb:46:75:06:
52:e0:90:5f:89:b5:83:25:a2:62:87:af:9e:05:39:
28:7b:bb:36:30:d1:34:f1:c8:c5:ba:b7:d4:d8:2e:
0c:b1:61:be:1e:61:13:d5:72:3b:f8:ab:96:a0:c5:
f4:90:74:10:12:fb:0c:2a:87:6a:3f:ce:92:78:95:
85:da:e4:a6:fa:d3:b9:80:24:30:3f:9e:fd:43:35:
bb:5e:f6:ec:e7:49:17:a1:87:ad:15:9d:8c:ae:92:
ba:07:4c:2b:07:f0:53:b5:52:3f:32:ff:67:01:89:
28:01:26:f2:6a:86:0e:ce:f9:08:db:91:d0:da:da:
9b:59:a0:59:33:b9:0c:3d:0b:7c:45:3b:94:07:5e:
85:5d:b9:a7:04:e6:ba:94:f4:81:fd:c5:73:56:a0:
32:6f:38:c1:37:16:a1:75:39:b3:22:bc:3e:7f:c0:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:78:A4:85:B4:79:54:76:EF:D3:FE:88:7D:4F:77:4D:50:AE:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJJ4pIW0eVR279P-iH1Pd01Qrt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.124.0/24
Signature Algorithm: sha256WithRSAEncryption
24:23:b1:71:49:d4:1c:82:c9:9c:d2:48:02:aa:f6:0f:ea:c9:
7b:2e:48:31:cb:98:ab:15:c8:c2:4d:e5:5c:d3:1b:42:41:b6:
dd:67:dc:c2:21:e9:84:74:d8:e8:46:eb:b2:9b:51:b6:31:7a:
91:a4:15:d3:90:d3:cb:1d:25:a4:1b:d7:f2:11:90:aa:5f:ad:
dd:22:9b:b5:4c:ee:23:26:74:f0:9f:96:87:d1:f9:d2:81:ee:
7e:92:c1:b5:2f:ac:ae:2f:51:8b:d0:e2:9c:1f:4d:9a:98:d5:
09:2e:df:63:8c:c9:d6:0a:5e:e6:37:0a:ac:6b:7f:ac:27:73:
e5:57:35:e9:86:8d:48:fd:a2:53:e6:91:ab:92:5b:73:55:92:
14:f3:5d:8b:b1:a7:7e:3d:08:3f:25:1c:43:b9:f6:43:a1:c0:
07:7d:dc:20:82:31:f5:cb:75:0b:82:ed:04:94:d2:46:43:21:
53:3b:b8:a8:f2:53:0c:a5:09:06:5d:60:37:7d:3c:5d:a6:94:
17:aa:55:ec:a4:a4:ef:5f:b4:e2:7b:96:96:33:40:07:60:79:
d1:74:0c:bb:57:4e:3d:37:ca:78:30:b7:75:70:5c:bd:b5:89:
ed:61:cf:5e:51:d0:db:a3:a6:a7:3e:8f:a3:db:fc:4a:9c:f1:
3f:74:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client