Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JrnUjs09sryoAjEVf8NKuxhF1dE.roa
File: JrnUjs09sryoAjEVf8NKuxhF1dE.roa (raw, json)
Hash identifier: y/dYrXv5TmMn5cOa5RlDsW18o81Qro1TmVc4hvPd/0A=
Subject key identifier: 26:B9:D4:8E:CD:3D:B2:BC:A8:02:31:15:7F:C3:4A:BB:18:45:D5:D1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067E214AB1ABE3F91151C9BFAD08060
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JrnUjs09sryoAjEVf8NKuxhF1dE.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215254
IP address blocks: 193.5.63.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e2:14:ab:1a:be:3f:91:15:1c:9b:fa:d0:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26b9d48ecd3db2bca80231157fc34abb1845d5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:58:74:f6:da:49:89:4d:13:df:ca:da:aa:
9a:87:f0:4d:12:96:33:d2:83:03:97:24:2b:17:e3:
1f:37:3a:6d:70:90:cb:fb:6c:7d:20:f7:b6:7f:50:
6d:16:a4:82:e8:9b:b9:21:d2:3e:6c:97:3d:24:28:
63:36:52:a5:f6:b0:d4:11:70:cb:d6:df:96:3a:fe:
48:94:a3:75:78:e9:37:a3:94:3b:02:91:95:0c:9f:
62:d2:50:62:1e:5e:36:51:36:f0:13:b7:f5:a4:e8:
11:74:8a:c8:14:15:da:e1:df:dd:63:ed:37:64:9c:
12:be:19:7f:7d:00:e4:71:9e:ae:13:37:bd:5d:1b:
08:49:7b:68:e1:05:96:ab:be:4c:a2:e0:a6:6e:3f:
83:f2:6a:66:c8:7c:4d:27:fc:63:fc:a3:49:a5:4f:
69:f1:fb:8b:55:71:25:4b:95:5b:05:e8:a3:c9:da:
81:cc:66:5d:37:63:d6:10:9f:fc:fa:43:09:17:eb:
2a:92:0e:6a:64:54:ae:75:d5:6c:f3:ef:6b:c2:28:
b8:47:89:ea:04:24:27:94:db:5b:78:31:4a:ea:f5:
b2:0e:a5:d0:3d:fc:32:11:2c:a4:c5:6c:5f:da:e8:
a9:bc:5a:45:13:76:02:ab:2d:0c:23:8a:0a:9c:26:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:D4:8E:CD:3D:B2:BC:A8:02:31:15:7F:C3:4A:BB:18:45:D5:D1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JrnUjs09sryoAjEVf8NKuxhF1dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.63.0/24
193.247.90.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b7:ef:3a:35:4f:8a:52:61:04:16:d7:42:f5:ef:ee:78:e1:
88:33:76:39:aa:6b:40:97:30:96:dc:5d:b7:bc:a4:c8:da:16:
b2:b7:2e:5d:88:fc:80:82:81:fa:b5:7a:a9:37:8a:bb:cd:65:
de:85:b5:67:18:ab:dc:55:84:e1:c4:aa:e7:71:16:f2:24:63:
ef:d0:44:4d:ff:54:d9:c0:57:72:9b:d5:b4:a9:4a:79:e3:8f:
d2:16:49:0c:62:0a:5f:58:ea:db:0c:ba:04:d9:18:14:86:76:
ea:96:ef:a6:9f:b9:d2:95:a9:11:e1:b2:1c:0e:91:c1:ee:8b:
8d:3a:0a:95:de:b9:21:6b:5f:29:b5:ad:c5:bc:c7:34:b4:3f:
0e:03:98:d1:9f:39:78:1d:e2:0b:f1:98:2a:45:15:47:8e:e2:
f4:71:83:2e:3d:e6:e6:53:fe:46:a4:4d:ac:c7:15:26:6d:ee:
58:04:a5:98:ab:23:ba:75:c7:7a:1e:26:80:12:07:88:6f:fe:
2d:a0:88:39:93:31:40:da:77:c4:48:4c:51:ee:44:fb:aa:aa:
a8:fd:5b:4a:50:34:61:79:f6:fd:5a:72:e1:14:8b:5f:35:05:
a9:8d:d5:b3:b1:71:fe:15:ff:e2:dd:93:8e:2a:e7:6a:9b:7f:
d6:f0:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:34:15 2025 by rpki-client