Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ljJz9wYEHMVOjse0IjyDBl8945o.roa
File: ljJz9wYEHMVOjse0IjyDBl8945o.roa (raw, json)
Hash identifier: 6JCqS4PahNUGBES62YC6kksBISgf6juLml+95B1UnHs=
Subject key identifier: 96:32:73:F7:06:04:1C:C5:4E:8E:C7:B4:22:3C:83:06:5F:3D:E3:9A
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCBA85AA662E4E49F7098F74554846
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ljJz9wYEHMVOjse0IjyDBl8945o.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215875
IP address blocks: 195.167.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ba:85:aa:66:2e:4e:49:f7:09:8f:74:55:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=963273f706041cc54e8ec7b4223c83065f3de39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:a2:fa:1e:da:c3:1e:54:88:be:2a:91:e6:
23:77:73:aa:0b:a7:5b:68:ba:15:0a:e6:fa:bd:03:
83:64:ec:3d:1a:0a:89:69:fb:4d:e2:6d:d1:27:c8:
9f:40:42:c8:12:20:03:b2:f1:22:10:77:53:67:f7:
31:38:fb:11:53:ea:44:98:b0:55:98:fd:71:84:93:
f5:e7:c1:6b:d4:21:c6:e4:d9:4d:1e:bc:a4:97:c3:
4b:0c:39:9b:ab:2b:33:93:c4:d6:de:b5:86:15:4f:
17:80:83:bd:da:b9:4a:8b:cd:15:11:0c:a9:a6:b1:
07:fc:be:81:b6:66:22:3d:89:d9:be:0d:78:b2:57:
12:59:ad:ec:a5:a6:c6:f7:17:4d:28:69:e3:a6:25:
fd:a6:a6:fc:7e:97:c1:4a:b3:e7:59:e4:70:a6:49:
39:97:49:cb:51:db:fa:ad:6b:c0:6e:9e:9b:4d:7f:
e1:99:17:cb:ec:65:4c:52:91:55:92:8a:09:18:e8:
d3:80:f0:fc:80:0b:55:5e:23:64:c0:c0:39:d4:5c:
a9:e0:b8:08:50:e2:4e:9b:4b:0b:d5:b4:00:45:bc:
8c:c1:b7:b0:4c:eb:d0:d1:4d:5d:fc:29:42:0f:d9:
76:dd:c5:2d:e4:c1:e7:7c:50:9b:cc:82:41:33:ac:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:73:F7:06:04:1C:C5:4E:8E:C7:B4:22:3C:83:06:5F:3D:E3:9A
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ljJz9wYEHMVOjse0IjyDBl8945o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.154.0/23
Signature Algorithm: sha256WithRSAEncryption
01:17:9e:9c:93:db:a7:0d:7a:85:e5:4c:f1:ac:49:ea:84:bf:
bd:30:33:12:da:40:86:00:3d:c0:41:af:d8:77:8c:0d:4c:79:
72:ff:25:06:d1:28:ce:5c:24:b8:5b:0f:d4:62:d4:4f:2d:b7:
6f:6d:b4:d8:76:e3:e3:22:f6:3a:7a:19:85:71:8e:21:82:ac:
7b:d1:1b:5b:9a:a5:e6:26:f7:54:08:3d:47:b9:8b:e3:d9:b7:
2b:b5:2d:3d:99:3a:12:ec:5e:5e:48:79:58:bf:0c:f9:a5:17:
48:3c:0d:d7:25:f8:59:3c:91:54:20:56:e3:63:9c:30:26:b2:
aa:db:38:a3:7f:cf:17:4d:79:62:0c:c4:b8:92:dd:a5:af:ce:
6b:0f:d2:2b:f3:0e:58:6f:50:a2:ff:a9:c6:73:a2:d3:13:f4:
a9:f1:70:2b:02:df:ba:e4:d4:85:b9:e4:bd:25:cf:98:bf:f2:
43:90:c9:2d:9e:f4:ab:d8:5a:05:b9:c0:1a:7b:17:98:2b:b3:
8b:47:a1:98:cc:2e:ef:1e:e7:d8:76:4a:e2:ea:3d:13:5c:fc:
3f:6e:1f:43:66:e3:0d:9e:29:e9:05:2a:f7:9f:e0:a3:11:b6:
93:d4:a7:8f:a6:8b:a8:08:da:e6:01:50:c3:f0:53:ca:d8:47:
b1:31:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:34 2025 by rpki-client