Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JluteV31kJzy_QdgPE2-_eqEMw4.roa
File: JluteV31kJzy_QdgPE2-_eqEMw4.roa (raw, json)
Hash identifier: gMagI8VPf5fNmT21WXYksX4zkcBlqxVc1p1jxtB1/O0=
Subject key identifier: 26:5B:AD:79:5D:F5:90:9C:F2:FD:07:60:3C:4D:BE:FD:EA:84:33:0E
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019718613BB4827BEAFE1B3AD47F03A873FA
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JluteV31kJzy_QdgPE2-_eqEMw4.roa
Signing time: Wed 28 May 2025 19:31:54 +0000
ROA not before: Wed 28 May 2025 19:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 94.241.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 13:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:61:3b:b4:82:7b:ea:fe:1b:3a:d4:7f:03:a8:73:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: May 28 19:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265bad795df5909cf2fd07603c4dbefdea84330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:cf:7a:be:ae:01:61:14:99:e8:7f:17:8e:
5a:cd:7c:41:3f:e4:d0:9c:3f:6a:3d:0f:de:dd:a5:
5b:fc:cd:c1:5c:49:7a:d5:b6:f7:60:dd:b5:7d:aa:
9b:a9:ac:18:5c:20:80:c0:9a:1b:e9:a6:36:a6:0b:
8d:19:79:43:62:dc:bd:4e:68:a9:b8:cc:7f:1e:f8:
ee:cf:8c:20:1f:3a:82:a1:42:69:98:10:2c:9e:63:
af:2c:05:5f:4f:90:b8:14:59:79:c8:9c:a9:f9:6b:
bc:63:09:a5:47:8c:be:26:ac:cc:7c:69:9e:82:73:
ee:0f:06:85:af:af:64:b7:50:13:d2:91:d1:56:c4:
71:2d:1e:8f:37:fe:35:0b:76:f0:2f:bd:76:74:e7:
d3:e4:de:30:54:71:45:2e:c2:a5:f8:8a:a2:b8:9e:
f9:57:0e:8a:0e:38:43:8d:62:1b:07:d8:25:36:97:
f3:8e:3f:7f:1b:3e:e8:97:1f:2d:f3:13:29:ab:ff:
f2:14:f3:7d:29:bb:3f:4f:5d:eb:55:be:ab:d1:e1:
72:a0:e8:ad:8e:fe:de:76:60:49:5c:8e:c7:8e:e6:
6c:2d:3f:34:9d:cc:8d:e2:7b:08:2a:86:0f:a2:3b:
5f:dd:21:1c:ab:a0:2b:42:55:80:42:e9:a7:b5:ba:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:AD:79:5D:F5:90:9C:F2:FD:07:60:3C:4D:BE:FD:EA:84:33:0E
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JluteV31kJzy_QdgPE2-_eqEMw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
89:e6:7a:f3:b6:ed:ee:9d:71:0d:fc:e2:3c:a4:c2:5d:bd:bd:
cc:1a:f0:ae:42:2e:c5:48:f2:0c:36:0a:5f:6c:03:f3:75:e4:
81:eb:84:25:c2:d7:4d:8e:80:09:27:74:32:e4:61:c6:d2:ee:
17:cc:6c:d0:3e:df:bb:53:f0:6f:84:19:13:9d:20:03:51:e7:
5e:19:99:7a:ba:3a:59:a4:7c:5f:26:8c:a3:d5:39:59:30:a8:
db:01:d4:28:fd:6d:19:6f:92:5a:c9:8e:62:e2:9e:8f:43:0d:
cd:3a:ae:fd:9c:1c:13:47:61:63:75:d1:83:26:08:25:82:77:
8f:86:90:ba:b4:c3:d2:00:30:e5:3e:ce:00:a3:26:12:38:2b:
54:07:9e:28:a0:b5:c7:26:a7:be:2a:ef:0d:df:47:77:32:5b:
6e:9d:7b:c3:eb:68:7e:0e:a5:b1:6f:92:e6:26:ed:17:28:c3:
7d:fe:a1:77:5f:ef:80:a0:b9:d2:13:c6:fe:ac:ae:ea:60:05:
5d:b5:a5:29:3a:f4:e7:a8:1d:07:e5:24:9f:89:46:d3:d4:af:
9e:6e:2b:d3:f9:6e:d7:02:35:f6:db:55:0c:14:4b:9f:ee:8c:
f4:c3:87:44:1f:09:ca:6a:f8:1d:a9:e9:2b:64:a8:61:38:12:
66:5e:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:22:08 2025 by rpki-client