Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa
File: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (raw, json)
Hash identifier: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=
Subject key identifier: 26:FF:4D:87:4C:4E:3C:13:70:BC:28:F8:A9:0B:18:8A:66:0C:51:6A
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0194274830025CB82F0F1429D558898CC99F
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 37.18.64.0/21 maxlen: 24
46.227.192.0/21 maxlen: 24
185.137.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:02:5c:b8:2f:0f:14:29:d5:58:89:8c:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ff4d874c4e3c1370bc28f8a90b188a660c516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:63:d5:c4:85:84:df:50:24:a3:9f:55:9c:
72:df:86:66:a6:d3:69:2e:18:59:21:72:a3:9f:7d:
42:7e:13:5e:61:c6:33:6f:fa:47:d1:b5:d6:47:b7:
be:8b:49:4d:91:29:af:69:e5:ae:0f:08:bb:cc:a8:
9f:d1:3f:f5:9b:70:95:5d:05:37:31:84:4a:43:d0:
bb:ad:ce:28:fe:2b:0c:fd:0b:d6:e9:1e:38:ae:f4:
d2:d3:ba:de:cf:d1:3b:fc:87:ec:75:2f:f8:57:a2:
ec:26:ca:21:2a:7a:90:17:fa:bd:5f:5c:e1:5f:00:
84:49:c1:c6:ce:e9:a4:f1:ca:73:5f:ff:7f:f7:df:
6c:44:47:dd:37:35:8e:87:cc:31:3a:68:d0:ec:67:
65:97:17:78:5e:43:77:06:1f:00:e3:f1:ab:6e:a4:
ca:3d:aa:8f:5e:a4:72:36:68:90:ae:26:fb:9e:04:
df:38:af:8c:4b:42:cf:d9:d4:c6:28:f9:b9:12:66:
2c:38:c6:7e:86:1a:a9:70:33:59:13:32:ea:67:fb:
18:cd:b0:cd:a9:97:47:c5:25:55:2e:45:ee:5d:c3:
a2:b6:08:83:6f:97:b9:77:53:63:9a:a7:f9:73:99:
04:b0:90:24:e7:28:96:af:5b:d6:f8:7a:83:b8:8e:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:4D:87:4C:4E:3C:13:70:BC:28:F8:A9:0B:18:8A:66:0C:51:6A
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.64.0/21
46.227.192.0/21
185.137.4.0/22
Signature Algorithm: sha256WithRSAEncryption
64:d2:a7:37:3d:48:5e:16:7b:3d:84:bd:1a:b9:84:fd:8c:ac:
e9:ce:95:da:72:b4:17:b3:18:5a:84:5f:f4:71:b6:e1:3c:a1:
8a:0f:5f:9d:80:49:3f:4b:58:58:a9:d5:8b:5f:ed:96:41:09:
0e:0f:89:c6:37:f1:a1:1d:1c:38:7b:26:e6:5d:82:a9:4a:9d:
83:70:be:7b:7a:0e:af:91:44:fc:fa:13:18:49:52:bd:14:70:
f1:41:18:96:4c:a6:2a:38:85:25:9f:17:f2:bf:cf:70:3e:78:
d6:20:ca:e3:bb:e6:c2:7f:18:7f:11:27:19:0a:38:93:6d:f2:
f7:54:9a:d4:6f:d4:f8:52:20:50:8c:b5:53:e5:6e:8b:95:6f:
ac:61:13:2b:5d:27:63:70:21:b2:6b:9f:09:b5:83:d4:d3:2f:
bc:5f:d1:7a:c5:ec:2c:26:3f:74:6f:52:b2:cf:3c:1a:f8:a1:
2e:55:ad:bd:a6:ff:a6:47:66:87:f0:2c:cf:ae:46:ef:db:f0:
cf:64:1b:5d:9b:72:86:4b:97:82:4d:79:fd:bd:1d:7d:1b:46:
29:75:12:24:ff:5a:09:fc:dd:34:a0:38:b0:35:86:0d:a1:34:
9a:83:30:c1:52:67:94:98:c5:6e:8a:f0:28:5f:3c:29:38:55:
2f:8a:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:08:38 2025 by rpki-client