Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa
File: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (raw, json)
Hash identifier: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=
Subject key identifier: 27:9C:43:F3:1F:04:8B:08:32:E3:31:9D:B2:B5:E4:D4:AF:03:62:20
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 01942220139FFD7440F6CDCA548B82B7186A
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57024
IP address blocks: 146.0.24.0/24 maxlen: 24
2a01:9680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:9f:fd:74:40:f6:cd:ca:54:8b:82:b7:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279c43f31f048b0832e3319db2b5e4d4af036220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:97:be:44:3f:64:05:58:f4:4e:62:64:29:
71:12:d5:17:d5:9c:18:10:78:c3:b9:6d:c3:ef:fc:
f4:67:3d:b3:ec:e8:e8:9a:c6:dc:17:1c:0a:82:56:
0e:2d:2b:d7:9a:8a:99:c0:6c:38:96:e4:4a:3f:4e:
23:b1:0f:7e:a4:32:2d:a9:95:0f:3f:b0:16:f5:20:
82:9b:3e:7f:98:e0:fd:8b:b0:02:72:4a:ea:69:82:
f4:d8:a4:49:78:6e:13:91:db:db:24:77:5c:ca:6f:
95:75:76:bb:cc:bd:6e:a0:07:54:bf:f5:14:e1:50:
97:dd:92:bf:04:d6:05:da:ec:1a:e6:0a:04:2f:04:
21:63:30:7a:2f:4e:69:7b:6e:08:05:3a:7d:29:0f:
fd:33:2b:e0:66:3e:19:1e:60:89:64:5d:40:e9:cf:
46:ee:e5:1f:b2:83:f2:98:ba:03:87:44:15:1e:a4:
2e:28:95:1a:4a:59:51:19:85:25:90:5a:b6:68:15:
89:1d:75:04:cf:46:72:3b:d5:8e:79:13:e3:50:39:
d3:69:79:23:02:51:32:c5:ba:e1:f1:7b:0b:fa:2d:
17:ca:ae:7f:6e:50:07:12:cd:61:40:24:a4:e3:5d:
1f:fb:0f:09:b5:bc:79:fc:8a:29:20:78:0f:d0:97:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:43:F3:1F:04:8B:08:32:E3:31:9D:B2:B5:E4:D4:AF:03:62:20
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.24.0/24
IPv6:
2a01:9680::/32
Signature Algorithm: sha256WithRSAEncryption
09:22:86:08:ba:35:c4:44:88:fc:b8:10:38:b0:07:f5:1a:e2:
e0:cb:ee:66:86:ad:70:7b:19:dd:e4:f7:8f:33:9c:bf:f7:70:
5b:50:bd:98:a0:3e:28:be:41:70:ed:08:d2:39:63:df:dc:01:
8a:33:08:67:11:21:cf:5b:0f:24:b9:28:ae:1f:74:2d:69:4f:
7b:c5:12:56:13:ce:f2:d4:0b:1a:64:41:62:2f:40:15:33:26:
51:84:a2:9a:f5:ac:ac:f1:7e:2b:15:a3:f0:2c:66:9a:86:ef:
64:db:6f:b3:8f:78:71:2c:7c:e5:d4:3d:18:c9:ad:e2:03:0b:
43:61:f5:84:02:34:01:92:a9:50:57:c1:4b:37:a7:fe:ac:8a:
04:59:99:40:e0:8a:55:1f:25:95:c8:11:2b:f0:e2:c8:6b:32:
9f:40:9c:87:44:c4:eb:1b:1b:08:f1:f6:61:ee:e7:95:44:f5:
94:a6:47:f1:b2:55:5d:3e:75:ff:88:28:a1:63:e8:6f:75:76:
4b:e6:ef:e1:6a:f6:3d:93:8e:0b:89:20:15:59:84:8d:1b:ea:
2b:9d:72:0f:a1:ee:6a:76:35:50:ec:cf:6e:72:a9:13:a2:93:
2f:2e:6d:b4:d5:f1:50:5d:1e:78:54:fa:3b:14:6b:bd:e1:21:
8f:14:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:18 2025 by rpki-client