Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa
File: 2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa (raw, json)
Hash identifier: sJo6COvD7U5zSVoX5aZ2ujJN+R6hvJF0qpAtUrijnZ0=
Subject key identifier: D8:93:51:A3:E7:6D:18:D1:89:72:9E:E4:30:3A:64:E5:5A:54:70:5E
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0194236947569437686C582B7F0DE11E82B5
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa
Signing time: Wed 01 Jan 2025 19:48:09 +0000
ROA not before: Wed 01 Jan 2025 19:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12628
IP address blocks: 194.153.117.0/24 maxlen: 24
2001:67c:2738::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:47:56:94:37:68:6c:58:2b:7f:0d:e1:1e:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Jan 1 19:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d89351a3e76d18d189729ee4303a64e55a54705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:b1:cf:0b:2f:1d:fd:1f:b2:72:2a:76:d4:
5a:76:47:3c:b5:8a:11:36:78:76:f8:41:d1:17:b5:
57:71:30:cb:cf:ba:f3:10:68:85:16:46:93:c2:9a:
a8:38:a5:29:07:a8:fd:06:c8:6f:2d:9e:3a:20:f8:
c3:ea:90:ff:72:54:fb:5c:66:0b:bb:67:54:c1:f3:
48:13:88:9d:1d:2d:f1:e6:74:bf:37:dd:22:c7:05:
1c:b8:89:78:79:cf:d6:14:6f:7b:2a:6d:ba:82:cb:
2e:1c:28:2f:8e:2c:50:7d:ec:0f:d4:b2:33:4e:a1:
b4:2c:2b:04:a3:58:5a:3d:ad:44:72:0c:ce:0b:b0:
60:80:7d:7a:b3:a1:58:6b:8d:fc:e7:55:e7:ef:9e:
9f:96:b4:0f:df:2b:95:9c:de:5c:71:57:87:e0:4a:
bc:74:e8:3e:df:cb:b7:86:f7:6a:e7:b9:c0:32:1e:
c4:fe:0a:64:9e:eb:73:57:2a:7f:30:32:6b:08:b3:
53:ca:85:42:2b:dd:1b:bd:c3:12:16:68:9e:9e:1e:
6c:3b:39:cf:e4:99:36:69:4e:bc:d9:9a:46:64:6c:
f6:37:b5:8a:68:46:45:85:70:8e:19:ac:8e:df:33:
e7:02:29:d7:01:fd:83:7a:44:10:b2:39:ea:0f:1e:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:51:A3:E7:6D:18:D1:89:72:9E:E4:30:3A:64:E5:5A:54:70:5E
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.117.0/24
IPv6:
2001:67c:2738::/48
Signature Algorithm: sha256WithRSAEncryption
36:b8:18:f3:c3:4b:04:d3:a2:0a:26:e7:54:0f:ec:6a:9a:44:
34:1a:78:ae:5b:1c:1c:20:ed:0d:89:89:ab:0a:d8:37:0e:fb:
c7:4c:f9:4e:c7:1d:4e:1a:d2:4f:70:59:87:35:57:57:e0:97:
7e:b8:12:0d:ad:ee:39:ad:4b:49:64:0e:dc:5a:24:38:a1:3e:
8e:2a:77:b6:c7:39:a2:2d:3e:0b:5d:3e:b5:62:92:33:ce:4e:
3f:61:82:3a:c4:87:62:c7:dc:52:24:95:86:76:0b:45:b4:07:
70:87:26:3d:26:c9:27:c7:d1:bf:ed:ec:14:08:b0:4b:6f:58:
f3:79:a7:05:89:f4:a7:37:51:00:0f:4c:b4:0c:97:40:ba:0f:
44:67:2d:89:ea:54:6b:de:fa:72:db:ae:7a:e4:c5:9e:a8:6c:
2a:b7:6d:9b:66:45:60:d5:43:a8:48:05:e7:fe:10:34:66:a7:
e8:71:66:a7:00:63:8f:41:fa:23:75:3c:de:3a:68:80:55:38:
8c:05:a1:10:c1:fe:df:28:28:60:b8:d9:4a:07:cf:1a:8e:07:
cf:ab:8f:a1:d5:c2:a6:a7:6f:2a:43:6b:d9:05:85:58:e6:50:
5f:0b:e0:ad:78:6d:37:09:eb:d5:25:de:3d:52:88:8d:3f:12:
77:5e:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:53 2025 by rpki-client