Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkF-oZCvQjzcIuSjVB6J7txD5Mo.roa
File: jkF-oZCvQjzcIuSjVB6J7txD5Mo.roa (raw, json)
Hash identifier: zEtzB/E5T7r9SIDmw8vhSG5O3RpP3bnZeQAEZHlPY6o=
Subject key identifier: 8E:41:7E:A1:90:AF:42:3C:DC:22:E4:A3:54:1E:89:EE:DC:43:E4:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01956CD0D42D1B39AB8E4782CA34F9FEF252
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkF-oZCvQjzcIuSjVB6J7txD5Mo.roa
Signing time: Thu 06 Mar 2025 18:56:19 +0000
ROA not before: Thu 06 Mar 2025 18:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:d0:d4:2d:1b:39:ab:8e:47:82:ca:34:f9:fe:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 6 18:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e417ea190af423cdc22e4a3541e89eedc43e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:ed:60:f8:db:90:e6:38:0f:1a:c4:b1:9a:
d9:8d:d5:3f:b8:eb:a7:81:95:5d:2d:a0:ee:64:1e:
3c:30:9c:71:a3:9d:45:fc:3e:df:07:b0:a4:75:c2:
c0:9b:89:95:5a:8b:e9:e5:d5:30:c1:22:e9:9b:8d:
12:3d:a5:59:7e:c1:6b:7d:13:3c:f6:30:dc:d1:d7:
2b:73:ee:10:f9:41:a1:18:25:a8:58:b3:2b:e3:85:
88:8f:17:b0:7e:13:b1:9c:c5:1d:e1:6f:b8:eb:c9:
70:d2:fc:15:cd:e8:28:96:d5:97:be:ae:d6:22:df:
a7:6b:e7:c2:02:c0:7e:69:ec:08:f6:6e:9e:53:6c:
bb:5c:e9:dd:4e:3a:38:81:65:53:5d:79:ef:55:af:
65:bd:b4:db:63:3b:47:00:68:e9:24:be:32:c5:15:
8f:6c:6f:03:7d:ae:69:db:84:bd:6a:16:c8:f8:b5:
e1:6f:ee:55:5a:1b:18:3d:5b:74:8b:78:e5:96:c4:
e2:cb:63:fa:1e:07:a3:0e:c4:b7:9d:6d:5c:97:36:
7a:41:a3:a4:73:c7:86:e9:28:58:36:9b:b9:b2:fc:
74:27:3d:c5:e0:85:78:6e:b8:d4:cb:29:6e:c2:2a:
51:32:8a:eb:f1:cf:c6:34:37:cd:8c:b7:90:07:6b:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:7E:A1:90:AF:42:3C:DC:22:E4:A3:54:1E:89:EE:DC:43:E4:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkF-oZCvQjzcIuSjVB6J7txD5Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f1:0f:10:8d:7a:1f:e5:60:6a:ec:93:dc:5a:71:50:ba:4c:
53:23:1d:af:aa:20:53:0f:9c:2f:70:1a:9b:65:0a:41:97:18:
1c:09:75:4d:aa:cc:8c:e1:10:29:5d:19:17:08:8d:70:03:8a:
5c:90:ae:55:82:f3:cf:de:45:7f:37:6c:aa:1e:64:92:53:df:
56:5d:84:e4:ae:29:70:fe:d1:61:e5:05:fd:7b:7d:20:9c:7f:
e0:ed:b4:d8:e4:e7:e6:48:df:ac:f7:08:41:32:99:6b:e5:19:
6f:34:17:53:91:da:62:c4:42:78:2e:fc:81:bd:f7:c0:63:28:
1b:7f:0a:70:7b:a7:06:02:f5:3b:ac:5c:fb:70:b0:d6:38:b7:
4b:9f:cf:70:c6:26:e9:5d:05:42:53:7e:ad:08:49:b4:ee:fb:
9e:1a:04:1c:02:68:ed:61:58:5f:79:71:5a:10:2b:1b:71:32:
c2:c2:f8:58:93:29:05:19:bb:85:f0:ee:f5:ba:24:58:19:2f:
5a:0c:1a:7f:c3:c3:e9:22:be:4a:3e:a7:3e:59:f4:26:a0:24:
53:e2:b4:59:e5:10:5c:52:21:ff:8a:5a:ef:22:60:97:87:d4:
b2:9b:55:3e:c4:c5:3c:45:12:11:00:be:be:75:99:46:ac:03:
02:53:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:26 2025 by rpki-client