Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JnLuO-KCIdILFpWMnSI67BTynAo.roa
File: JnLuO-KCIdILFpWMnSI67BTynAo.roa (raw, json)
Hash identifier: S2jaYn6M4IxVAs3bGSADE55ZJ/s2XZ2FU9XAU1K3V+E=
Subject key identifier: 26:72:EE:3B:E2:82:21:D2:0B:16:95:8C:9D:22:3A:EC:14:F2:9C:0A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0B19BAC77AB098FFBAE9B6AD9803
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JnLuO-KCIdILFpWMnSI67BTynAo.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43094
IP address blocks: 91.242.78.0/23 maxlen: 24
91.242.84.0/23 maxlen: 23
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:19:ba:c7:7a:b0:98:ff:ba:e9:b6:ad:98:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2672ee3be28221d20b16958c9d223aec14f29c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:f3:9a:7e:11:89:c0:f6:6a:38:23:d3:ae:
95:56:89:20:0e:d2:07:53:9a:31:10:67:da:bf:61:
d1:f3:80:54:fe:a8:d3:eb:1b:7a:3c:8f:35:18:3e:
11:88:a0:7c:81:12:85:fa:65:2b:a1:d5:17:04:fb:
48:63:b0:91:7f:54:38:d8:d0:3a:84:88:1a:78:6f:
e0:3d:40:5c:16:2c:2d:a8:53:cc:84:17:84:13:38:
cc:bb:90:ed:99:a2:b7:27:54:fa:8f:d0:82:a4:14:
a2:b1:e9:c8:b5:89:de:de:ec:c1:20:eb:60:11:37:
0e:93:0f:e6:09:d1:28:64:f2:81:76:3f:63:db:c3:
5c:c7:5d:02:7a:e9:5b:89:ac:9d:01:83:fe:f7:fd:
1a:49:48:ec:06:6b:10:09:4f:a7:18:a7:7f:b6:78:
21:28:e6:a8:85:97:47:03:bd:6a:b2:15:eb:c8:f4:
77:24:fa:37:35:55:0b:78:16:61:3b:24:2d:c1:b1:
84:d8:df:63:be:02:ed:6b:70:31:f6:96:dd:52:cb:
c3:cf:22:a4:65:a4:69:e5:49:66:d0:01:1e:44:9b:
94:d5:4f:b6:56:47:c7:dd:0d:38:5d:a1:71:60:6b:
cb:8e:59:63:36:f3:5a:3b:a3:43:fc:8a:3e:ff:92:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:EE:3B:E2:82:21:D2:0B:16:95:8C:9D:22:3A:EC:14:F2:9C:0A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JnLuO-KCIdILFpWMnSI67BTynAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.78.0/23
91.242.84.0/23
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f6:e3:5f:49:b6:20:d5:06:4d:2b:f2:0d:23:0a:e1:1f:a3:
da:4a:e5:31:11:8d:02:d8:ff:38:f8:42:ef:54:dc:cd:cb:98:
e6:3a:c8:f9:65:dc:65:8d:52:f6:1f:75:89:fe:44:b8:c4:87:
40:98:6a:f3:23:b1:c3:47:0b:fc:b1:51:a5:66:2a:a7:02:9d:
60:60:76:a7:a9:cf:0e:7b:61:4a:41:06:45:01:f8:54:04:7f:
c9:7d:06:0a:27:8b:44:36:ec:24:2b:8e:bc:38:21:1b:2c:bb:
cc:6a:0d:83:a3:50:4a:3a:4d:44:37:ef:0f:fb:78:0b:7d:bc:
e6:e4:19:e9:1b:5a:39:fc:59:ef:b1:e0:c7:ee:d7:41:21:e4:
28:d0:02:31:f0:13:23:d3:a4:57:74:ed:3a:a4:44:2e:68:cc:
b2:15:b4:b2:bd:7a:11:92:51:22:39:b6:45:35:b3:e0:23:66:
be:57:19:d0:aa:66:cc:e4:bd:46:9f:e2:92:a4:24:a4:23:a9:
70:0a:52:5e:47:6e:bc:f5:3d:93:90:01:b5:2d:da:fb:af:cb:
32:c6:b7:11:44:ad:5f:f2:c1:fc:fc:66:24:9f:25:4c:7c:61:
5a:16:bc:40:02:0e:33:bd:33:8a:73:0f:da:f9:88:b7:f7:a7:
4f:54:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:43 2025 by rpki-client