Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa
File: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (raw, json)
Hash identifier: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=
Subject key identifier: 8C:9F:F5:B8:72:D6:2A:24:24:17:58:95:61:C3:BF:E1:B5:C8:B2:4C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B578D10367764C510340606941C3
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49926
IP address blocks: 195.187.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b5:78:d1:03:67:76:4c:51:03:40:60:69:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9ff5b872d62a242417589561c3bfe1b5c8b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:b3:76:08:84:78:35:09:34:4e:e3:bc:25:
a1:cb:ec:04:97:3b:f1:e7:76:30:60:86:d7:7d:15:
8d:3a:45:a2:59:2c:7f:88:f4:d5:67:1c:53:80:ad:
c7:21:d3:9e:6b:d7:0c:79:9b:c9:3f:f3:64:4c:66:
ed:3c:c7:35:1e:a9:4b:db:de:f7:4b:40:4a:96:f4:
05:97:fe:e7:45:83:c8:5f:b6:3c:a3:5f:55:84:ff:
8f:62:63:6e:6f:d1:bc:de:63:22:bd:54:5c:a0:ec:
10:27:0d:bb:53:ac:3a:1d:e4:92:a2:a0:0b:40:20:
42:91:6e:69:ca:8a:92:0c:76:11:ae:e5:14:53:b9:
96:f4:90:5b:b2:55:a4:cf:1c:4e:48:17:f3:7e:42:
f7:65:7d:ff:3b:85:38:1c:f8:4c:d2:af:96:e8:b4:
c0:24:85:91:bc:27:af:a1:55:af:e5:67:bc:35:70:
7f:f9:ca:67:19:c8:3c:ab:23:5c:3a:eb:23:62:02:
d8:a9:b1:81:98:6f:60:9a:75:a7:0d:c6:c8:fb:7c:
db:fd:6b:53:8b:cb:01:d6:25:4e:d1:19:c4:9d:73:
19:f5:02:42:69:30:88:fa:2d:44:ef:b8:5b:1f:98:
82:a8:70:08:58:67:1c:8e:21:4a:3f:6e:ef:a2:e6:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9F:F5:B8:72:D6:2A:24:24:17:58:95:61:C3:BF:E1:B5:C8:B2:4C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a5:85:c1:82:7b:cd:e8:c8:d8:58:25:e4:c7:db:f8:ca:ff:
35:05:52:49:66:b0:78:ed:dc:73:ee:29:b6:a6:a8:20:d0:d2:
1a:f2:3b:68:25:12:34:14:c5:71:8e:8b:cb:e5:ce:47:b6:47:
b3:33:3a:e4:02:e0:6e:37:2a:59:3f:30:2a:77:55:f2:cb:b3:
93:b5:38:a4:d5:05:38:e4:85:ec:9c:58:a5:5f:18:ab:88:33:
b0:89:ec:ad:34:4a:4f:ce:ad:61:83:eb:d7:8e:63:5a:54:23:
c2:b2:8c:3e:8e:e3:b8:87:42:a5:26:5a:2b:34:d3:55:07:3a:
c4:72:dd:c7:35:27:a5:d9:2a:3e:2b:56:53:68:aa:f3:e1:36:
48:20:bc:55:e9:31:de:c1:ef:02:15:f4:7d:b8:69:5d:25:00:
5d:1b:cb:d1:94:18:9d:c6:23:8b:6f:0f:d4:42:75:86:8c:f5:
c0:e6:d2:12:2a:08:53:7b:0d:03:d6:b8:ed:91:97:1b:bb:d2:
3c:7a:1b:2e:37:6e:b1:54:2e:b3:76:c6:0e:f7:96:86:86:67:
de:95:43:17:bc:d9:17:4c:0c:b0:a9:eb:2e:46:ef:b7:69:5b:
6a:db:af:3a:e3:5c:10:88:70:62:48:48:99:aa:02:1b:7f:97:
c1:b4:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:26:56 2025 by rpki-client