Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J1i1oW9ojIkHTT-QNpmlt5khDYU.roa
File: J1i1oW9ojIkHTT-QNpmlt5khDYU.roa (raw, json)
Hash identifier: lBmiOfhhGD3ObQeP/PKuhssEkhyEAEQd/oOfDgATIyc=
Subject key identifier: 27:58:B5:A1:6F:68:8C:89:07:4D:3F:90:36:99:A5:B7:99:21:0D:85
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBF340CACC73C382F2CCE190D770D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J1i1oW9ojIkHTT-QNpmlt5khDYU.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bf:34:0c:ac:c7:3c:38:2f:2c:ce:19:0d:77:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2758b5a16f688c89074d3f903699a5b799210d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:18:3a:66:36:17:05:bf:f1:50:25:48:77:
99:3e:61:40:40:a4:a1:84:ea:af:82:a2:7f:e0:25:
a5:8a:46:d5:ac:a9:53:d3:40:c3:56:30:cf:ad:c4:
63:27:f5:2c:3b:1a:1a:5c:30:6a:81:40:6f:c4:61:
fc:13:cd:45:d7:f1:ac:3d:a9:6f:de:f9:36:ef:b4:
cd:69:75:9a:dd:7f:d1:6a:ca:11:0e:03:9b:41:c4:
79:1b:7a:d0:d6:1a:a2:bc:44:9d:66:f1:ac:62:55:
ba:c1:b1:ad:67:e8:23:13:a0:10:c2:f3:af:92:8b:
df:61:38:b6:1d:62:e6:c9:d3:2f:bf:12:19:2b:48:
af:4b:77:82:e6:99:e8:a8:57:f9:98:df:ce:86:a7:
63:cb:6d:6a:f1:8b:f6:a6:18:21:2a:a1:2b:fd:89:
67:99:0b:a0:9b:1c:5c:97:18:f2:16:3f:1e:2f:a3:
75:fe:3f:6c:20:f2:e4:f2:98:22:2b:5d:13:f8:3c:
c2:74:37:b7:2b:95:b7:f8:c7:a2:55:f0:fd:b6:f5:
20:55:c9:b7:37:76:e0:46:8e:44:c8:55:6c:8b:33:
41:3e:d6:75:3e:58:cf:5a:64:78:9c:11:5a:0f:24:
b3:21:16:ab:aa:f9:4d:93:84:b6:17:8b:f0:94:22:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:B5:A1:6F:68:8C:89:07:4D:3F:90:36:99:A5:B7:99:21:0D:85
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J1i1oW9ojIkHTT-QNpmlt5khDYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
74:91:4a:df:e8:73:aa:44:28:7e:5d:5d:ff:dc:90:ec:6f:44:
a5:61:0c:a5:b4:7b:e6:60:fa:81:df:a8:c9:39:c9:34:6a:23:
a2:c4:b2:ec:4a:14:19:5a:e6:a1:23:63:6f:83:1d:35:dc:b1:
b3:3f:97:62:68:75:3a:4f:fa:8c:69:50:8b:68:ff:91:06:03:
d0:b6:7d:7a:6d:16:6f:5f:23:d8:96:03:3e:a0:7a:db:a2:c5:
ba:f3:50:7b:a3:4d:7f:33:95:40:ae:5c:38:76:4b:de:d6:e4:
fd:15:b5:2e:15:11:38:74:3b:78:86:6b:b6:e1:ca:c6:69:3d:
7e:3d:9b:8a:50:e0:73:e5:da:06:5b:2a:2c:97:52:03:b9:b5:
08:94:b8:8c:05:a4:2e:ec:88:b8:89:0a:f0:e4:b0:0f:b6:e0:
80:33:ad:cf:7d:c5:10:f7:2f:d8:84:e9:de:04:97:47:d0:36:
fd:72:5b:09:3b:cb:5e:16:55:96:d0:9d:9d:f6:26:16:27:e9:
e3:32:56:ff:0a:79:92:24:ab:95:18:4b:02:bf:a1:76:be:8a:
16:9b:c6:b4:c9:5e:8e:29:e4:1d:dc:1a:69:22:d4:53:38:ca:
1c:8a:88:f2:5e:d9:7c:21:5a:d4:1c:ff:f9:af:b8:79:f4:f0:
e9:d3:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:39 2025 by rpki-client