Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/JeMCMYiH53cU_3LMDeSKcS3Thhs.roa
File: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (raw, json)
Hash identifier: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=
Subject key identifier: 25:E3:02:31:88:87:E7:77:14:FF:72:CC:0D:E4:8A:71:2D:D3:86:1B
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 01942143D64EDB3FE84C81CF33E277BB9D3F
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/JeMCMYiH53cU_3LMDeSKcS3Thhs.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206130
IP address blocks: 185.110.112.0/22 maxlen: 22
2a06:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d6:4e:db:3f:e8:4c:81:cf:33:e2:77:bb:9d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e302318887e77714ff72cc0de48a712dd3861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:de:b9:fb:95:7c:5b:53:f6:8d:74:27:00:
ce:7b:59:f7:99:e5:3e:ed:ad:54:12:4b:a4:f7:f0:
3c:4d:59:96:2d:12:16:67:83:1b:dc:11:72:71:55:
d7:bc:6e:ba:54:11:ff:d0:f6:96:7f:fa:5a:a6:03:
d6:38:7b:ab:55:91:ce:3a:fd:de:7b:49:c6:72:85:
57:fe:6b:51:17:98:95:e4:f4:25:48:9b:a1:25:c6:
4e:f0:86:91:12:1d:8e:c5:37:44:4a:cb:62:42:fa:
46:cf:e3:85:6f:70:c2:e0:e8:75:5d:39:a0:c6:5a:
d8:a9:1e:1d:67:13:fb:73:dc:86:b0:e7:07:37:52:
1a:4c:c8:79:e3:ff:e3:71:3b:1c:45:20:fb:fb:b4:
88:96:7c:4c:da:e4:a2:e6:82:b0:85:2b:da:cc:b8:
11:ed:20:ee:78:b2:9d:75:68:6f:df:ac:12:46:76:
ac:20:19:93:a1:46:63:7b:3c:3a:d5:f6:64:29:31:
fa:6a:42:8d:2e:55:b8:25:c5:8b:ca:c8:25:6b:d7:
23:ef:7e:32:07:06:33:c4:27:00:17:63:05:0c:47:
46:de:9f:fb:c6:61:f1:a1:c0:ef:ac:db:60:f1:24:
1f:db:cf:1e:a7:b7:73:1b:d5:18:c2:a3:11:b8:4c:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E3:02:31:88:87:E7:77:14:FF:72:CC:0D:E4:8A:71:2D:D3:86:1B
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/JeMCMYiH53cU_3LMDeSKcS3Thhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.112.0/22
IPv6:
2a06:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:90:d6:5c:24:1e:f8:6c:02:c0:61:67:45:21:3f:59:12:40:
7e:53:7d:60:6e:e0:85:5e:c7:38:3b:63:a3:ce:1f:0c:c0:e2:
5c:0b:ec:1d:53:89:bb:50:90:4a:ea:b6:db:51:6c:ae:ee:0f:
31:5b:8e:73:2e:eb:6a:bb:5e:9d:03:e8:0e:43:66:df:09:50:
45:9d:72:e0:bf:8d:b2:ef:5d:eb:f8:8a:a6:1b:95:74:7d:77:
ef:7c:ca:7b:48:88:20:bc:1f:5d:e1:67:9e:3d:8b:43:e0:9a:
9d:d9:79:24:d3:c3:e6:02:d6:ee:d9:8e:e4:61:06:68:df:55:
65:80:55:a7:d0:47:8a:11:92:00:bb:13:68:ac:18:50:50:77:
1a:56:cd:d8:11:23:08:f2:19:81:93:7f:45:61:c7:51:1e:0b:
67:7c:e4:44:4e:b5:55:a8:3d:c9:1e:70:95:fc:b4:3f:35:3e:
e8:31:65:0e:d3:69:c8:a7:64:c4:ae:4a:34:25:64:6c:fb:df:
42:03:cd:47:3f:95:0e:cf:5e:26:dd:3f:52:bc:f6:97:cf:4b:
8a:51:27:11:35:a4:ab:04:25:44:92:6c:53:56:15:32:17:67:
55:74:bb:ed:c8:8a:db:18:1f:16:44:5b:7c:b9:cf:42:cb:b4:
af:c0:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:44:50 2025 by rpki-client