Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/Jm_xi_s9C4HueOQpadAteqzC5iI.roa
File: Jm_xi_s9C4HueOQpadAteqzC5iI.roa (raw, json)
Hash identifier: nbZ24fnK71pZ0lURFKjMf67hub71ZiuhlPq0UEHzTVw=
Subject key identifier: 26:6F:F1:8B:FB:3D:0B:81:EE:78:E4:29:69:D0:2D:7A:AC:C2:E6:22
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019420D6217CD68F511C9C7AC7F7E816B92A
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/Jm_xi_s9C4HueOQpadAteqzC5iI.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197885
IP address blocks: 2001:678:388::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:21:7c:d6:8f:51:1c:9c:7a:c7:f7:e8:16:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=266ff18bfb3d0b81ee78e42969d02d7aacc2e622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:0e:e6:2f:a9:0f:7f:a6:c7:65:a3:33:4a:
2d:ca:bb:d3:5b:57:2a:00:f4:36:2a:81:ee:6e:a3:
96:b0:df:10:c7:ba:e0:4b:47:7b:ff:f4:6f:4c:20:
bd:1a:20:4e:f7:e8:ba:29:bf:49:6a:b0:41:e7:57:
60:30:24:f3:fa:73:f7:2e:15:f3:d8:2a:30:4c:a1:
15:fd:2a:64:ab:53:1f:bd:39:bc:76:0c:33:a5:73:
7c:c1:f6:31:89:a3:f3:42:17:04:4c:a7:9c:11:43:
c8:44:b2:63:59:a4:1d:9a:2c:37:4f:69:51:dc:4c:
5f:be:b4:9a:94:e9:6d:25:24:78:1f:d5:6a:5a:10:
c7:66:0c:bc:0c:eb:a2:c2:97:c2:97:7d:9a:a2:50:
14:af:76:20:79:bd:75:61:a5:0f:25:29:80:6b:47:
09:f0:a0:aa:2c:af:c1:57:3e:53:45:81:33:f9:f3:
ed:39:df:7c:c1:90:7e:58:04:a0:24:90:90:ff:c4:
d7:ec:07:05:3c:ab:60:39:15:4b:5c:81:e1:1b:01:
7d:f9:c4:9c:92:ba:48:2a:95:a8:9b:79:ea:62:b2:
25:8c:6d:11:e6:43:9d:47:b0:bd:9b:f0:8a:43:02:
dd:82:e0:5d:ce:47:73:5f:6c:13:46:78:d9:fd:9b:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:F1:8B:FB:3D:0B:81:EE:78:E4:29:69:D0:2D:7A:AC:C2:E6:22
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/Jm_xi_s9C4HueOQpadAteqzC5iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:388::/48
Signature Algorithm: sha256WithRSAEncryption
92:03:0c:f9:43:a2:17:ca:e2:dd:38:8e:0e:49:20:bb:05:50:
1b:b4:d2:55:92:b1:3d:4a:66:08:1a:0f:19:ee:32:e0:7d:77:
2a:ae:a5:df:0f:d2:8b:16:1d:fb:e0:a8:af:c0:4b:23:c2:49:
68:99:8a:f0:3a:01:11:7a:46:e2:df:16:4b:5a:76:f8:63:58:
57:ad:11:32:36:a6:4e:7f:d2:c4:8c:98:9a:a9:7c:5b:0e:37:
0c:43:4b:0e:d4:3c:cd:84:2a:aa:d1:45:42:17:8d:a8:c7:77:
d3:56:dd:06:c8:34:77:94:3a:5f:43:06:b5:16:f0:8f:79:0a:
d0:d2:df:8e:9e:9e:73:d4:db:62:55:5d:9f:d9:b0:96:c2:47:
77:77:88:48:7a:b3:fa:5f:26:e3:d8:d9:b3:5b:27:26:42:8f:
d7:71:23:2a:9d:f6:47:f4:2f:4f:c1:9f:c1:e4:a7:50:ef:e7:
d2:c2:60:cc:fd:15:b6:8f:f9:00:7b:b4:5f:18:42:d7:53:9e:
5b:c0:68:ee:c3:0b:64:a6:b7:38:ff:2d:a2:3c:31:7b:27:39:
f4:e8:4d:72:f8:09:38:15:94:81:58:0e:23:72:85:af:a4:d1:
c7:72:aa:43:2a:70:b1:50:06:a7:19:34:91:9a:89:f4:b1:d8:
ff:aa:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:26 2025 by rpki-client