Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa
File: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (raw, json)
Hash identifier: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=
Subject key identifier: 27:08:11:0C:98:89:36:53:03:01:0F:8F:F8:AF:84:EE:82:DD:54:41
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 0194236A33222EDAFA528241A01A2DB77468
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50902
IP address blocks: 185.253.5.0/24 maxlen: 24
193.110.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:22:2e:da:fa:52:82:41:a0:1a:2d:b7:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2708110c9889365303010f8ff8af84ee82dd5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:fe:82:ff:b3:82:a2:08:b5:86:19:a3:cf:
12:91:fe:b8:4d:50:02:21:78:cd:90:d3:8c:d3:41:
37:ea:7d:94:bf:e9:37:ab:e4:55:6c:0b:a8:66:f7:
08:80:22:50:1d:4f:55:c4:a0:06:02:8a:f4:6c:d9:
aa:57:12:9b:ba:ec:3e:f6:d6:08:5c:4a:8c:c3:a3:
09:ab:e0:58:fa:71:69:36:0c:53:19:62:93:e4:82:
18:46:67:a3:c4:c8:7d:d5:05:31:e3:e6:e4:98:e0:
7c:45:ee:d2:53:1d:b7:1b:32:96:9a:66:ff:a6:df:
c3:11:46:95:16:90:cf:68:1f:eb:9a:65:9d:6d:ee:
35:24:c7:94:23:32:0c:2b:6f:df:b1:b8:08:b2:09:
4c:71:0d:bc:5a:74:07:59:8b:a3:d8:47:52:d6:90:
9b:55:ec:71:ff:43:7a:a8:a1:54:47:2a:85:9a:c7:
c1:9d:d6:4d:59:a8:be:02:b3:d1:d6:61:a1:74:75:
74:41:01:f7:b8:92:66:f0:8a:c3:0c:fe:c4:6a:76:
03:14:43:cb:26:3d:c8:92:04:70:76:58:b0:95:48:
b1:16:ec:7c:20:80:19:bb:1a:df:24:63:b0:db:86:
fa:46:2b:e4:35:5d:3e:1b:d2:46:41:cb:7b:70:f2:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:11:0C:98:89:36:53:03:01:0F:8F:F8:AF:84:EE:82:DD:54:41
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.5.0/24
193.110.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cd:28:8c:f7:c0:49:84:39:7a:a2:b0:c7:8a:ce:34:84:2b:
78:a5:d7:73:26:3b:73:99:3d:af:6a:8b:9b:bd:9d:93:32:8c:
52:5d:d1:f3:b8:3d:0c:f2:8c:3f:d3:34:12:96:00:3b:32:77:
34:f1:15:49:02:00:6a:88:32:c6:78:2f:ec:ff:d8:f1:7c:5c:
08:19:c7:80:e6:6e:9d:11:77:b1:b5:81:16:0a:77:cb:f4:13:
87:dd:52:1d:9e:b0:48:6a:6a:30:01:dc:ce:75:b0:e9:8f:6d:
f8:05:74:90:bc:9a:e7:71:aa:dd:44:6c:3b:4e:f8:38:22:31:
3c:1c:bf:b2:9b:e0:a4:f0:59:44:f8:f4:9c:f7:6f:b9:23:76:
12:2e:72:e3:6c:49:2f:de:f1:b3:6c:06:d6:c4:89:c7:66:f5:
2f:b3:c2:08:c7:29:05:05:df:60:b6:58:ba:25:34:64:26:b0:
cb:20:53:aa:2d:dc:b5:8a:50:e4:24:fd:25:b0:72:12:1b:71:
bc:a9:f8:93:83:dd:c1:1f:b6:e4:af:03:5d:8f:c3:c4:1b:bd:
e1:e7:88:b8:ed:2e:4d:15:c9:f0:7a:81:ca:5b:a5:c3:e8:38:
46:2b:9e:44:23:52:86:40:61:ee:41:5e:54:03:4d:71:e7:8a:
fe:b9:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:56 2025 by rpki-client