Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa
File: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (raw, json)
Hash identifier: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=
Subject key identifier: 27:5C:E0:12:02:4D:38:AD:B5:0B:F3:B8:FA:96:78:12:AC:CB:99:63
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019616198136AD40EF5EF013EAA3C39BE692
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa
Signing time: Tue 08 Apr 2025 15:51:32 +0000
ROA not before: Tue 08 Apr 2025 15:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215542
IP address blocks: 195.26.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:19:81:36:ad:40:ef:5e:f0:13:ea:a3:c3:9b:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Apr 8 15:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275ce012024d38adb50bf3b8fa967812accb9963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:3e:a1:b6:c4:d1:53:24:1c:ac:21:09:69:
05:e9:f5:c6:1a:d8:b0:07:32:74:04:f0:c5:ff:1a:
d0:08:86:6e:73:2e:82:3c:20:ae:4e:5a:e1:71:44:
da:0d:4d:76:f3:bb:c4:e2:67:c4:26:e8:6a:0c:eb:
f8:37:23:41:4e:05:d4:e2:d3:a4:bc:d4:dc:2a:2f:
4e:a3:78:34:54:ad:64:ac:68:4d:51:13:f9:c8:0c:
cc:01:7c:67:d0:aa:4f:ab:fa:af:14:b8:fc:59:b9:
f5:d0:75:a4:53:c2:49:f4:99:fc:63:1d:c5:05:ff:
66:7d:ff:4f:01:d8:33:12:65:df:b6:66:9b:27:94:
ce:66:ae:f7:76:a2:37:d5:ac:94:fd:34:2d:31:da:
dc:b9:84:d5:8c:3d:3e:a1:2c:89:4c:f8:f2:1d:94:
2c:31:88:79:94:52:78:8d:6a:28:c3:8e:0c:2a:77:
b9:f4:fa:7d:cf:d7:30:81:f2:80:4f:f4:40:31:25:
66:75:38:64:c0:4e:3d:29:15:69:a6:a0:51:46:7b:
27:b7:25:2a:68:6e:b9:e4:c8:63:0e:52:ee:1f:f8:
3f:7b:48:dd:01:ab:f6:ac:0a:58:ad:81:03:6e:b5:
ed:7a:69:77:f4:45:6b:66:fd:d7:ca:7e:87:2a:02:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:E0:12:02:4D:38:AD:B5:0B:F3:B8:FA:96:78:12:AC:CB:99:63
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b7:dc:32:47:16:09:ff:30:02:05:7b:29:f4:1f:04:c7:25:
7c:4d:c1:92:31:a9:86:2e:91:04:04:8c:5a:f4:49:2e:e4:6e:
e5:0e:e9:69:0d:c9:a0:27:a8:85:ee:b8:58:10:e1:3a:72:d1:
d8:e5:7d:da:7f:24:8d:c8:bb:ff:66:8f:91:c3:b4:06:de:f3:
f7:a1:24:b9:aa:8a:36:ea:d5:a7:09:77:3a:4a:eb:c4:1f:6a:
11:bb:f2:b1:95:6b:0b:7c:71:14:cb:a4:1b:8e:15:b5:e3:bf:
18:db:2b:16:90:b5:02:cc:db:c0:35:12:b2:e9:1c:c0:e1:af:
b2:81:8f:8d:e0:58:df:c4:13:2c:92:2e:cc:fb:2e:8a:bf:37:
3d:a6:54:e9:d5:6b:98:8b:59:bf:2a:0f:b8:8e:b8:4d:c5:37:
76:85:7e:f8:2a:41:ff:41:40:57:bf:ff:06:81:6c:3f:14:bb:
9d:e9:60:ba:b0:b7:58:0d:a1:c6:88:b5:d1:50:96:4f:a3:fd:
d5:00:74:5d:4c:9f:a0:cf:a5:12:32:71:92:6b:ba:67:93:b7:
26:6b:8e:e9:ef:fd:28:93:19:70:88:a7:6b:08:b2:70:db:2a:
8e:e8:00:41:e4:87:5e:17:bc:db:16:f8:a0:50:43:7d:06:fd:
fa:e4:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:19 2025 by rpki-client