Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JPQcLRXCUA1un-RAIAFE5RgmHNQ.roa
File: JPQcLRXCUA1un-RAIAFE5RgmHNQ.roa (raw, json)
Hash identifier: 9mmcC109z0SZ+/moI3k2gaEvQXIEQwAlcMFxJGHODpI=
Subject key identifier: 24:F4:1C:2D:15:C2:50:0D:6E:9F:E4:40:20:01:44:E5:18:26:1C:D4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197BFCC8B76C2A57941911239FA6596B0CB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JPQcLRXCUA1un-RAIAFE5RgmHNQ.roa
Signing time: Mon 30 Jun 2025 07:45:42 +0000
ROA not before: Mon 30 Jun 2025 07:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:cc:8b:76:c2:a5:79:41:91:12:39:fa:65:96:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 30 07:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f41c2d15c2500d6e9fe440200144e518261cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:45:45:ab:b2:f8:83:73:85:6f:71:40:73:
c8:d2:8d:5c:67:c3:a9:11:87:cd:81:07:45:3e:6a:
cd:56:0e:a6:e8:e6:5e:98:5f:23:d7:61:08:0e:59:
25:9b:d7:c3:68:6f:5f:e2:e5:b2:8e:34:40:b2:b3:
5d:bb:0d:31:3c:82:37:e2:ec:db:dd:b2:c3:8b:07:
89:5f:98:69:1b:d5:17:6e:e7:3f:67:d2:5a:a7:f9:
88:6b:e9:d0:72:f3:25:db:a7:1f:9f:ba:9e:bf:52:
6c:04:43:46:d7:9c:8c:0c:7f:39:c7:04:0c:f6:84:
df:3c:e1:32:d3:44:40:c5:d9:5d:51:ec:ec:44:d6:
03:11:66:2a:67:ca:b3:ca:2d:88:70:22:aa:9b:5f:
2d:54:88:97:2f:a1:f0:e6:40:88:f9:36:5d:b2:59:
9e:48:00:74:e1:03:91:e0:f4:1b:46:ea:a9:9e:35:
ee:d2:47:a1:3d:c0:d0:2f:9c:8f:f5:47:f8:56:f0:
37:1d:f1:79:d1:c3:3f:7f:c9:c8:b3:3d:4a:84:9e:
49:9c:9b:e9:fa:ab:49:cb:97:af:89:a9:f7:b1:82:
70:2d:1f:ce:a3:b5:ed:a3:70:54:dd:15:da:89:d3:
3d:85:b4:c9:b5:ee:f1:9e:0e:32:93:4a:ca:9b:d8:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:1C:2D:15:C2:50:0D:6E:9F:E4:40:20:01:44:E5:18:26:1C:D4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JPQcLRXCUA1un-RAIAFE5RgmHNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
94:73:76:60:76:79:21:c8:8b:78:ba:c3:a2:6a:66:df:d1:22:
45:64:10:3f:d4:fa:81:96:f1:f8:9f:73:e1:91:65:77:e9:59:
69:16:e2:85:a7:85:78:ab:9d:4b:4c:b9:7c:7b:5b:fe:81:a4:
7e:3a:dc:41:bc:8a:3a:d7:ca:32:a3:30:38:a8:dc:be:34:46:
88:49:3a:c2:a8:f5:03:d1:2e:c4:d2:d5:8d:c3:01:4e:5d:3e:
6f:54:5b:ee:1e:3d:f0:88:9f:58:6e:50:3b:d8:9d:0b:d8:c8:
cd:9d:ea:8a:21:4f:2e:e2:8b:d1:0e:e7:17:7b:7f:43:c3:27:
61:de:21:84:70:ab:6a:34:d3:f4:15:ca:80:87:63:56:ef:8d:
72:db:04:a0:5a:ac:b0:31:cb:e9:17:2c:cf:a9:32:b8:3e:d2:
ac:55:1c:c7:b8:ed:92:62:dd:5b:bd:28:3d:53:d1:66:c2:9d:
bf:9a:93:d8:33:55:70:29:f8:42:a2:7e:e9:f6:cd:a1:ce:01:
4a:38:4a:ee:17:f0:1b:be:11:11:79:3f:01:e7:69:3f:c4:5a:
b8:fa:44:be:26:77:f7:cd:e4:5b:c5:bc:17:22:93:4e:33:85:
59:51:02:46:55:48:69:b9:43:5f:01:72:dc:6a:d6:15:84:c9:
17:c7:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:14 2025 by rpki-client