Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwl5tBkH_e_d2gT8BkNAC996Ado.roa
File: jwl5tBkH_e_d2gT8BkNAC996Ado.roa (raw, json)
Hash identifier: qsRp91wAleuzLXiIRB6lgIa2gH5GoA41iMKeFtwL+Y8=
Subject key identifier: 8F:09:79:B4:19:07:FD:EF:DD:DA:04:FC:06:43:40:0B:DF:7A:01:DA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC3D7C840086EC2559686ED624739
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwl5tBkH_e_d2gT8BkNAC996Ado.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214305
IP address blocks: 45.9.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c3:d7:c8:40:08:6e:c2:55:96:86:ed:62:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f0979b41907fdefddda04fc0643400bdf7a01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:45:3e:3e:c3:6b:88:c5:41:a2:f8:85:fe:
14:1d:3f:27:6f:d2:e6:78:bb:fd:20:5d:b6:d0:22:
dd:62:f3:b3:7d:bf:df:88:95:52:c4:aa:df:05:3e:
df:94:0e:ca:9f:5d:6a:c8:38:43:11:12:ab:19:4f:
cd:09:65:63:e4:40:43:44:2c:1b:56:63:cd:d7:12:
2e:29:ef:bc:1d:eb:23:3f:3d:7d:f6:2b:d9:dc:51:
29:db:64:66:1a:b7:7f:eb:74:c4:c6:57:30:79:49:
5a:0b:00:30:91:fa:db:6c:5e:f1:8c:d2:4f:1c:79:
b9:30:95:66:bf:f4:11:8f:d2:76:78:7f:d9:20:97:
d3:30:73:d3:1d:ba:62:3e:eb:5b:99:9f:04:9b:45:
d0:16:c8:34:0f:68:9c:53:7c:d5:66:5b:1d:2f:71:
ee:c0:3b:eb:94:fc:02:28:06:5f:8e:ac:b0:28:92:
7d:77:0f:56:ee:12:86:13:85:13:25:16:57:5f:de:
89:67:00:a2:4a:ac:f3:a2:43:db:5d:20:c8:71:28:
f0:c2:f3:bd:9b:39:27:fb:74:f3:c8:53:3c:9a:e9:
4f:e6:0d:b5:9a:d7:f5:ef:7d:fe:91:b0:76:ab:15:
c3:5b:99:3e:ba:ea:0b:67:64:35:9a:a6:af:ca:c5:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:79:B4:19:07:FD:EF:DD:DA:04:FC:06:43:40:0B:DF:7A:01:DA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwl5tBkH_e_d2gT8BkNAC996Ado.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a3:82:71:ad:87:95:bd:1e:9a:30:0f:59:53:8d:4b:fc:64:
c0:31:d6:7f:97:ab:74:da:53:a7:5e:c2:ff:6f:bf:c0:59:99:
00:42:8e:1d:08:8f:d7:ce:f1:05:fd:75:64:6d:82:6b:02:cb:
02:8b:f5:68:6d:3c:ba:12:a8:10:36:37:c0:c3:a3:eb:ac:24:
59:65:39:3b:2c:86:df:af:8f:c4:26:fd:df:87:a6:f6:7b:6d:
52:7c:66:ce:6e:39:8e:a0:ac:c4:0c:dd:f4:3c:a2:80:47:8b:
7d:1e:e1:16:b8:1b:5d:3b:2a:86:2a:72:bd:d9:56:58:86:5f:
4e:af:a7:b4:49:be:92:00:cc:53:ed:cb:8a:33:79:6b:3b:42:
e0:78:c6:04:50:58:9f:54:c7:b1:64:25:6c:1c:3a:8f:bc:53:
7a:d7:b1:8e:13:17:d8:24:50:51:f4:61:68:b9:ef:c4:18:ba:
e9:cd:2b:79:fd:3e:25:5a:1e:1d:de:a7:7b:54:ad:25:69:67:
7e:06:70:ab:36:1b:72:be:0e:43:35:5f:42:df:b5:d8:c6:5c:
f6:17:66:ce:db:9e:6b:94:ce:15:34:67:7f:b7:d3:79:84:f3:
aa:38:d5:2f:bd:a0:bc:f8:48:cf:78:bb:f3:b1:cc:45:9e:79:
3e:cc:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:20 2025 by rpki-client