Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/jTf4hu8p-YdeMkBcAMreST3RURY.roa
File: jTf4hu8p-YdeMkBcAMreST3RURY.roa (raw, json)
Hash identifier: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=
Subject key identifier: 8D:37:F8:86:EF:29:F9:87:5E:32:40:5C:00:CA:DE:49:3D:D1:51:16
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0194214464FE0EA791C7801E5C01A047732E
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/jTf4hu8p-YdeMkBcAMreST3RURY.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203172
IP address blocks: 185.188.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:fe:0e:a7:91:c7:80:1e:5c:01:a0:47:73:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d37f886ef29f9875e32405c00cade493dd15116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:ac:77:58:7c:f7:16:e4:84:24:51:1d:bd:
1d:be:0d:5d:6a:3a:ad:3f:ad:fc:92:83:a7:94:cc:
76:8d:b3:c9:de:b8:25:e3:a2:c8:b8:98:8c:bf:b9:
1b:7d:95:bc:14:2b:01:9f:71:93:8b:bd:7d:13:90:
d8:5a:9a:cf:1c:ac:72:3c:38:a9:60:8c:c9:22:e6:
53:e8:c2:8a:52:c1:6e:90:aa:11:95:76:b4:29:ce:
16:52:3a:c9:93:60:a8:90:08:b1:37:fc:ec:56:35:
2d:44:4e:e5:79:f8:2f:4e:a7:d2:cd:b7:1a:b2:83:
a9:12:03:60:a6:a0:e0:f3:98:e5:48:e6:87:74:9f:
4d:16:58:b0:1b:ff:77:e7:04:3c:a4:cb:7d:8f:0e:
69:2e:4f:e1:c3:d0:4f:4b:fe:7e:61:68:29:07:d8:
e2:e0:ac:87:b0:3e:56:33:73:75:d8:4a:cc:5c:77:
40:45:02:de:f5:f3:26:d7:b3:63:ec:10:ee:09:4a:
74:d0:e9:39:9a:8e:c6:87:d0:3b:b3:43:45:db:df:
48:fd:c2:98:26:81:b9:51:bc:0c:a1:71:2f:3c:00:
4f:04:a2:bc:bc:6e:a1:a1:27:1c:5a:ec:8f:de:be:
b0:f1:95:60:25:10:95:59:c0:8c:3f:22:1f:fa:7f:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:F8:86:EF:29:F9:87:5E:32:40:5C:00:CA:DE:49:3D:D1:51:16
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/jTf4hu8p-YdeMkBcAMreST3RURY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.143.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:f2:51:04:50:cf:97:07:d3:82:44:a6:94:97:a6:cb:25:
9d:fd:95:90:1c:c7:39:f0:2b:ec:87:f1:88:3b:d1:51:8c:36:
08:1f:d9:9c:e7:86:7c:8a:3d:49:f5:7e:8c:e2:eb:90:8e:14:
fb:9a:3f:07:e4:bc:72:d2:e7:85:8b:2e:d4:d9:73:9c:c4:06:
91:7c:f0:e1:62:2e:e9:a4:bb:2f:c5:fd:3d:c6:1c:a1:0e:61:
05:fc:15:4a:fa:67:57:ae:3e:85:dc:dc:13:2d:ca:89:b9:d1:
e1:4c:b1:d0:2b:22:ec:1a:b8:72:e6:fc:b0:ee:a8:dc:56:c4:
db:2d:2b:a3:6b:07:9a:42:38:37:8e:48:10:26:9b:b6:9c:55:
7c:76:b8:08:08:ea:68:4d:fb:b9:51:92:fe:68:a2:7b:46:50:
8e:a4:a5:e6:e6:a3:6c:56:31:58:5f:35:0e:db:6d:ad:30:83:
87:df:e6:5c:88:36:d7:3d:ae:8d:db:87:39:85:a4:29:44:69:
10:11:f1:c1:4d:7e:8e:23:c6:a1:8a:d6:71:46:d3:09:b2:cf:
f4:de:d6:31:b4:54:67:e9:48:5c:3e:de:2a:93:20:2f:c0:31:
42:4c:4f:80:a6:01:dd:95:0c:fc:78:78:28:28:23:57:cb:49:
69:18:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:00:08 2025 by rpki-client