Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/Jw977rRbSBm1vkOFCP_ZwqthNts.roa
File: Jw977rRbSBm1vkOFCP_ZwqthNts.roa (raw, json)
Hash identifier: pZc4mT999KgIePYxSGeV1dkG1LyeuUgVh98eZi0P55s=
Subject key identifier: 27:0F:7B:EE:B4:5B:48:19:B5:BE:43:85:08:FF:D9:C2:AB:61:36:DB
Certificate issuer: /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial: 0194258E7D73813356903852B4B9C5050E21
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/Jw977rRbSBm1vkOFCP_ZwqthNts.roa
Signing time: Thu 02 Jan 2025 05:48:02 +0000
ROA not before: Thu 02 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41038
IP address blocks: 185.187.124.0/22 maxlen: 22
2a0b:a180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:7d:73:81:33:56:90:38:52:b4:b9:c5:05:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Validity
Not Before: Jan 2 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270f7beeb45b4819b5be438508ffd9c2ab6136db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:23:02:3b:bb:95:27:33:8e:00:3c:1c:f9:
2f:ba:40:fb:c8:6a:6c:12:62:bf:7d:25:e0:40:04:
cf:a1:b8:95:35:52:d1:8a:92:63:ba:19:d6:56:5f:
73:b1:c4:a8:e6:a7:f3:97:2c:6b:eb:f5:90:c3:6e:
55:3a:87:4b:24:04:c7:01:12:78:56:2a:00:58:33:
62:3b:ad:df:ed:1d:85:20:50:96:65:5f:8a:04:bc:
bc:72:f1:7a:9d:83:53:c8:c4:0a:1e:53:67:a1:09:
5d:e4:4f:03:ef:00:6e:81:50:ef:84:30:e4:01:75:
94:d8:29:3d:d0:16:d5:c9:5a:6b:e8:99:48:3c:28:
8d:bd:28:1b:f3:67:35:eb:79:77:58:6a:6a:84:34:
32:ff:52:7c:00:3d:ee:8d:ea:48:93:1a:52:8a:3c:
7c:74:32:7e:d8:b0:77:94:b3:40:a9:40:42:cc:9c:
cb:2d:b1:3b:19:9a:7d:f5:50:39:c4:e8:36:a5:94:
e6:a8:25:f0:ab:82:5d:e7:ed:c6:6c:a5:8d:cc:36:
ee:d8:0f:4f:02:58:67:c3:c5:fe:66:5f:92:38:bf:
bc:ff:20:ca:3b:6f:55:33:ae:91:a5:38:60:42:8c:
ae:01:0e:3c:ee:14:ab:75:48:34:af:c2:3d:ba:8d:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:7B:EE:B4:5B:48:19:B5:BE:43:85:08:FF:D9:C2:AB:61:36:DB
X509v3 Authority Key Identifier:
keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/Jw977rRbSBm1vkOFCP_ZwqthNts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.124.0/22
IPv6:
2a0b:a180::/29
Signature Algorithm: sha256WithRSAEncryption
4b:19:f7:bc:4e:0d:26:16:59:fe:fb:19:89:73:ef:86:a9:93:
4c:7a:a1:92:14:42:72:3c:89:03:0d:53:80:6f:7d:a2:2a:2e:
c3:be:3f:9a:55:aa:64:36:3d:c2:2c:be:ee:fc:6e:dd:f5:b0:
d8:f6:46:3f:c6:3f:1a:14:d7:69:f9:99:36:3c:5a:90:02:c7:
91:a8:8b:98:47:e4:64:2c:33:96:19:2c:35:17:5a:eb:a3:53:
bd:78:ca:67:48:0f:1b:71:b3:a0:27:24:65:0c:7f:6c:3b:66:
70:7c:d3:60:80:e8:33:96:0d:52:89:71:1f:31:ff:3d:ad:ea:
bd:78:d9:2a:79:98:2b:89:21:12:84:d0:21:46:10:5b:76:a5:
f1:4e:56:37:28:7d:04:47:76:1e:e1:96:29:93:48:d3:c0:ca:
e4:59:00:59:cd:4d:35:f1:27:03:ed:dc:72:f7:61:7a:0d:21:
38:0b:7a:38:c0:db:52:89:73:e7:e4:8f:f4:11:31:94:88:18:
fd:c4:8c:3c:66:26:bf:9e:90:6c:68:b4:1b:c4:b4:03:90:45:
36:0c:3a:0e:8d:92:96:3a:f2:4b:9a:a8:2f:80:e5:a9:7b:0d:
0e:95:b6:2f:01:6f:e1:3a:e8:cf:53:09:fd:a7:4d:79:df:eb:
92:35:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:51 2025 by rpki-client