Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jpN0hvuTgqmocPyed3qkYPDHQdk.roa
File: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (raw, json)
Hash identifier: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=
Subject key identifier: 8E:93:74:86:FB:93:82:A9:A8:70:FC:9E:77:7A:A4:60:F0:C7:41:D9
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019427B695B89126F3ABFF44B7AB0A01A535
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jpN0hvuTgqmocPyed3qkYPDHQdk.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206564
IP address blocks: 193.104.9.0/24 maxlen: 32
193.109.236.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:95:b8:91:26:f3:ab:ff:44:b7:ab:0a:01:a5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e937486fb9382a9a870fc9e777aa460f0c741d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:53:3b:3d:9c:41:d0:35:8f:9d:e3:52:7e:
93:97:d3:b4:c7:62:07:58:16:9b:86:ad:f9:4f:f9:
a9:64:99:ef:61:e4:50:06:42:5a:5f:39:61:45:5e:
2a:68:45:59:17:f7:66:79:43:ca:5f:5e:8e:fe:07:
e0:18:dd:1f:a7:4a:46:47:b9:96:59:4f:d8:7e:f8:
71:2c:e4:40:c3:e4:d4:69:b4:67:fa:4b:fc:29:fb:
17:0b:96:09:44:08:9d:f7:55:b0:e0:4e:d3:fb:f8:
bd:32:a3:f2:75:4b:23:d3:87:69:82:01:9a:fc:7c:
42:7f:20:79:a3:0f:5c:d5:6f:a9:5e:45:8c:de:9a:
24:94:a2:7f:4a:61:3d:0b:dd:b2:96:e6:1f:1c:10:
be:c3:24:24:d9:67:8e:a1:de:19:fa:58:23:eb:f0:
4f:2e:19:7e:53:24:53:97:91:61:58:c8:68:80:b5:
c2:47:65:fd:da:fc:80:17:26:f7:50:36:7a:61:1a:
1f:5c:5a:8a:f4:a5:54:98:56:05:bb:80:cc:58:a1:
e6:d3:09:92:70:a5:d0:29:7c:46:b1:fe:6a:49:15:
3c:84:32:88:b2:87:94:e9:10:1b:eb:e7:51:84:38:
c3:04:de:58:59:9c:13:6d:b8:01:4e:50:68:ef:f2:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:74:86:FB:93:82:A9:A8:70:FC:9E:77:7A:A4:60:F0:C7:41:D9
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jpN0hvuTgqmocPyed3qkYPDHQdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c3:b8:e8:55:bf:29:b7:c1:eb:c3:37:5b:6a:aa:f6:9a:da:
3d:0b:df:69:7a:ed:75:1d:3f:b3:c3:10:61:07:2a:88:82:e5:
9c:28:a1:d1:05:37:96:30:bd:31:b3:14:40:77:41:4c:b1:fa:
ab:69:da:38:53:e6:8c:03:95:4e:f0:ed:92:c2:36:4a:cc:51:
38:2e:60:47:23:16:29:89:34:01:eb:47:ea:8c:7e:30:f9:67:
c6:74:9a:39:c4:e1:1b:f1:82:f0:f5:c0:f2:49:36:17:0b:4a:
74:40:11:8d:cb:a9:4b:2f:47:ca:ea:e3:45:bd:25:88:2d:15:
a8:0a:de:58:13:0b:25:0f:d5:e3:5c:15:d7:09:b9:9f:1e:24:
89:c0:c7:5c:85:38:91:11:27:7e:57:5b:78:29:96:c1:a3:0b:
d6:32:01:8e:81:fd:01:48:41:0d:b1:91:93:99:5d:46:1d:e2:
31:2a:6d:d2:d6:0c:83:a6:3e:9c:79:21:9a:fe:f6:d6:3e:f8:
72:53:49:b1:83:eb:0b:96:b9:c9:5a:79:b2:18:5e:24:25:19:
84:64:1d:8d:53:88:2b:d8:46:8c:8f:b2:80:92:a1:ee:58:6f:
49:7c:e5:94:c4:39:5f:54:56:9d:1d:0a:7c:28:60:5c:52:14:
a8:73:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:05 2025 by rpki-client