Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jjhX0aIZcT544KCIQyZSn1ZrMgI.roa
File: jjhX0aIZcT544KCIQyZSn1ZrMgI.roa (raw, json)
Hash identifier: KgbdxCj+Lc31A78ghx4EPIuyhJon/0ov16MKkHX+ajU=
Subject key identifier: 8E:38:57:D1:A2:19:71:3E:78:E0:A0:88:43:26:52:9F:56:6B:32:02
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D612F2A136DF5DD4C59D8B1B0F1E15
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jjhX0aIZcT544KCIQyZSn1ZrMgI.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39205
IP address blocks: 89.33.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:12:f2:a1:36:df:5d:d4:c5:9d:8b:1b:0f:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e3857d1a219713e78e0a0884326529f566b3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:a4:cb:f9:9b:7e:c6:b6:c9:b4:b4:ee:37:
45:77:ca:5e:ae:9c:3b:47:83:96:05:05:29:19:5a:
8f:6d:ab:5b:1b:92:13:c9:fc:6e:d5:24:67:9e:46:
97:b5:1c:62:38:ed:f8:7d:7f:da:65:4c:30:e2:7c:
ba:00:c7:f8:b7:b1:de:f8:45:be:59:80:34:eb:5e:
58:cd:86:5f:00:e1:4f:a3:fe:a2:5d:a3:35:e7:98:
ae:69:73:2b:44:44:d7:64:00:27:a3:c9:26:d5:a0:
b2:f7:c0:54:8b:e8:b2:b6:98:7f:e9:a2:77:07:4d:
14:e5:a7:42:5d:98:f0:33:bc:13:dd:05:62:3c:2b:
df:98:b9:3c:18:3c:a1:3f:fd:10:c2:1e:c0:fa:03:
b4:91:d9:4f:73:c5:4e:2a:df:a4:73:27:22:ea:c9:
bd:7b:9f:03:d5:89:a6:4c:d6:dc:d5:86:70:f5:61:
eb:7f:d6:de:16:43:ed:d0:f1:1a:96:99:a9:af:e3:
61:b0:b9:ec:86:31:28:cb:15:f8:25:f7:38:0f:e7:
7a:be:12:bc:2b:bb:07:49:27:39:68:9f:4e:91:6e:
3b:67:85:54:02:1a:b7:4b:09:a5:9a:66:f7:88:e0:
dd:43:5e:91:ec:68:ea:5a:20:35:18:4f:e9:a7:45:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:57:D1:A2:19:71:3E:78:E0:A0:88:43:26:52:9F:56:6B:32:02
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jjhX0aIZcT544KCIQyZSn1ZrMgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c4:40:d9:49:d1:86:01:7b:95:cb:87:24:88:af:14:73:ee:
09:3c:85:85:d0:87:30:c5:17:62:c6:6a:ff:b3:64:4e:7a:8d:
78:31:7d:91:48:75:55:a0:78:71:6d:43:7b:74:7c:90:5b:a4:
b6:bb:da:60:ee:8d:fe:80:17:56:c0:00:30:97:ab:86:df:11:
93:56:56:8a:91:62:a3:33:cf:c1:36:b0:b9:65:53:20:76:ce:
09:3c:f4:a9:96:b2:d7:0c:b4:cc:21:24:ea:83:1d:db:06:e5:
2a:46:8f:34:30:7c:36:78:39:67:79:dd:a5:4e:78:dd:c0:4c:
a4:18:36:09:02:04:df:6a:23:0d:70:66:fb:b2:ab:39:87:a0:
d9:0a:83:fe:39:0d:00:8b:08:e6:d7:b6:e6:61:2c:9f:b8:e0:
7d:b8:d2:15:e3:06:96:97:a7:dc:d7:ef:75:10:ec:3a:83:be:
c4:99:99:01:18:7f:0f:cd:20:93:55:e0:60:e9:ce:e1:1d:e0:
d7:39:d4:d8:79:0b:c2:a8:0d:e3:87:5c:d0:72:1d:25:29:8d:
d4:8e:bf:8a:66:7e:17:9d:38:d8:92:b0:4e:6d:89:20:f2:0f:
3f:5a:fa:31:06:29:1c:26:f2:07:f3:25:85:8b:a6:ea:db:a9:
86:eb:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:42 2025 by rpki-client