Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JS3mwrKoM_bu1YlMg44SqBJyzi4.roa
File: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (raw, json)
Hash identifier: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=
Subject key identifier: 25:2D:E6:C2:B2:A8:33:F6:EE:D5:89:4C:83:8E:12:A8:12:72:CE:2E
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E29E66F2F15292B892CB6663F876B
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JS3mwrKoM_bu1YlMg44SqBJyzi4.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141968
IP address blocks: 109.105.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:e6:6f:2f:15:29:2b:89:2c:b6:66:3f:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252de6c2b2a833f6eed5894c838e12a81272ce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:6a:4a:62:16:56:85:2b:43:0c:a1:6e:db:
48:6a:bf:4f:ae:69:c4:70:1e:55:a8:44:cd:35:b1:
22:f2:87:a9:f8:8c:ae:38:df:b1:29:2c:23:a5:81:
d6:63:ea:92:3b:79:60:67:c0:2d:c8:cd:22:9c:47:
00:f3:a8:71:4a:7a:53:39:8e:7b:bf:cf:e2:7b:16:
89:01:bb:2a:1b:1a:90:06:53:4c:c6:3d:55:eb:2d:
6d:97:5b:e4:44:aa:17:42:de:f3:0b:f3:95:20:31:
21:d5:f7:9b:ea:a1:5c:c2:03:be:b0:ef:54:da:1a:
1a:32:62:36:b4:85:dc:b6:2f:fa:b0:bc:3e:c5:1c:
17:8d:63:3e:7f:7c:05:16:8b:2e:24:5c:2f:f8:a7:
24:bd:90:00:63:61:58:5f:5b:cf:77:56:7d:ef:3a:
b7:80:83:c6:31:97:41:aa:b1:20:9a:ce:8f:9c:45:
e9:72:b2:6b:c1:f8:03:f5:4d:a0:39:c4:55:3d:b4:
89:9b:1f:4c:2a:a1:30:dc:7d:17:37:19:9d:c7:53:
6f:df:2c:54:d4:f7:e0:00:0e:80:ce:68:a1:16:e0:
d6:1d:92:c3:dc:f3:77:2e:49:76:cc:37:50:96:5e:
52:0a:b2:64:a6:44:a3:b3:87:51:bf:78:ed:5b:fa:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:E6:C2:B2:A8:33:F6:EE:D5:89:4C:83:8E:12:A8:12:72:CE:2E
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JS3mwrKoM_bu1YlMg44SqBJyzi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c1:93:39:9e:56:cb:66:7f:a9:4e:73:1f:03:3b:4b:3c:6d:
d6:b0:d1:7a:0f:a7:7e:ed:6b:91:9f:23:56:6d:7c:7d:66:88:
7e:a1:0d:6e:fe:b8:e8:1c:1d:e0:70:bf:4b:30:90:3a:89:63:
26:57:18:14:9a:02:e3:7f:ce:39:26:87:89:a3:b2:b1:4b:41:
5e:be:44:af:b6:88:39:47:8c:e9:e1:e2:d8:e8:83:f1:0d:60:
db:c2:92:5f:b2:14:db:0c:07:db:04:51:82:18:30:0b:c1:7e:
12:71:49:43:f7:02:fa:92:12:2e:34:9b:8c:01:4d:71:5f:cb:
56:f8:da:8c:d8:c5:e7:c8:16:18:aa:16:15:33:9e:21:c4:2a:
97:6d:a5:ef:05:8d:4b:57:7b:69:65:7c:df:58:c0:ec:c9:7e:
53:9e:dd:62:30:00:c8:eb:de:8d:ad:6f:df:34:4c:2b:11:78:
74:0a:6a:6c:30:68:55:e5:c2:8f:6e:4b:0e:b1:d5:93:0d:05:
6f:9d:64:5d:12:62:9e:1f:46:87:cf:44:61:5e:25:04:73:f8:
7e:3d:9b:09:41:a7:c4:9f:aa:3e:d2:35:f1:07:05:15:63:01:
0e:89:97:2c:cc:55:48:7b:76:1d:55:ef:ee:4f:e0:ca:ab:34:
76:49:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:33 2025 by rpki-client