Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1jpCyAps9bajWpTTNjuuJqkvGNw.roa
File: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (raw, json)
Hash identifier: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=
Subject key identifier: D6:3A:42:C8:0A:6C:F5:B6:A3:5A:94:D3:36:3B:AE:26:A9:2F:18:DC
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019422FB6031B01F3F3661AE3D4DB8A492F3
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1jpCyAps9bajWpTTNjuuJqkvGNw.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199431
IP address blocks: 94.247.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:60:31:b0:1f:3f:36:61:ae:3d:4d:b8:a4:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d63a42c80a6cf5b6a35a94d3363bae26a92f18dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:4d:c1:d8:9d:1e:b1:4c:7d:1a:cc:56:8f:
3d:79:0b:06:5b:41:c5:33:33:08:32:63:53:d8:ea:
d9:21:60:ce:ee:f4:ed:0f:e8:0b:b1:44:67:3a:49:
b0:49:ca:bd:5b:6d:fe:61:b4:99:d9:c5:2f:b3:f5:
c4:29:ac:f0:b5:43:fb:48:db:3b:0c:ad:50:61:73:
f3:2d:90:80:93:5e:1e:db:da:d9:2f:02:d7:42:a9:
4a:c5:5d:d7:8b:ee:d0:98:f0:b9:a3:da:88:c6:e8:
30:13:08:28:55:c6:5a:e8:a9:0e:33:da:9e:f0:d7:
85:68:4c:3f:62:8c:fe:80:63:6a:e4:91:da:24:72:
31:e0:a6:a3:de:ee:f6:96:eb:3e:4e:e4:c5:bb:c0:
bd:a7:76:01:6a:70:65:f9:3d:03:91:92:95:60:ad:
4a:fc:c6:36:eb:dc:54:25:97:c4:72:76:e0:eb:61:
b2:d4:7d:22:8d:b2:5a:03:86:5d:e3:20:ad:84:e8:
c2:5b:79:f8:48:a5:99:c8:4d:ad:53:88:34:34:ab:
f2:6f:37:94:2a:74:3c:b3:8c:20:6d:01:08:2c:60:
cd:da:4f:5d:93:61:ce:28:2f:90:f2:75:c1:7c:13:
91:39:4b:1c:3c:a6:0b:65:7d:18:11:ca:17:64:2d:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:42:C8:0A:6C:F5:B6:A3:5A:94:D3:36:3B:AE:26:A9:2F:18:DC
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1jpCyAps9bajWpTTNjuuJqkvGNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.229.0/24
Signature Algorithm: sha256WithRSAEncryption
67:15:02:9e:ce:c6:f9:cc:50:32:e6:63:39:22:cc:55:58:04:
11:76:0b:05:20:d3:d7:a4:9c:3e:23:01:d6:ee:a5:fc:7f:1e:
54:4e:2d:bd:06:79:e3:00:b6:61:a0:56:ce:bc:a5:08:ba:0c:
e0:36:b3:48:44:67:d4:9e:6e:8c:6c:1d:4e:3a:fc:61:93:79:
e0:de:c6:9f:f5:71:a8:f6:26:70:7c:79:ff:8d:60:6f:f6:36:
16:52:2d:ac:a6:eb:ea:7a:87:c9:0d:3f:91:52:44:1f:94:50:
c3:3e:f7:bb:b5:74:98:fa:c9:e9:0a:a6:78:2e:f5:b0:f8:f1:
59:23:f1:93:79:a3:37:1a:58:90:bc:4e:e1:9d:ef:2e:57:85:
10:7a:e0:ce:89:b8:b0:d3:e0:53:8a:c4:a5:e2:b3:ec:d3:54:
9e:03:f4:36:80:e3:78:c4:86:d7:6d:f0:6b:6b:ac:3e:c3:f0:
7f:23:53:7d:7f:24:bc:84:f9:8f:45:40:8a:17:6f:d7:e5:c1:
ef:5c:55:fa:41:cd:df:19:fb:21:4a:97:70:43:79:b4:4b:b7:
ad:fa:91:c6:f2:48:28:67:2c:79:18:7b:9c:00:60:6e:66:6f:
28:9a:25:86:a2:c4:92:2e:b5:bb:78:79:7c:4c:78:75:57:d3:
75:08:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:16 2025 by rpki-client