Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jOMnWCpH8SK3To3f8WWMtYlmw7M.roa
File: jOMnWCpH8SK3To3f8WWMtYlmw7M.roa (raw, json)
Hash identifier: xawHFaJsohPNcEIGxa0SNMZnh1cm/njACj9uSfpUfgg=
Subject key identifier: 8C:E3:27:58:2A:47:F1:22:B7:4E:8D:DF:F1:65:8C:B5:89:66:C3:B3
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194F576ADCC4EC3B07646634A32FB38421B
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jOMnWCpH8SK3To3f8WWMtYlmw7M.roa
Signing time: Tue 11 Feb 2025 14:43:03 +0000
ROA not before: Tue 11 Feb 2025 14:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.232.0/22 maxlen: 22
178.253.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:76:ad:cc:4e:c3:b0:76:46:63:4a:32:fb:38:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 11 14:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce327582a47f122b74e8ddff1658cb58966c3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:27:56:6d:ec:f3:b2:56:77:69:6d:50:06:
58:41:56:0e:3a:16:d9:e3:06:f7:44:e1:6e:be:51:
9c:6c:ce:8e:24:6f:ea:f3:1c:d9:41:ea:fa:26:40:
5a:ae:d6:cc:74:e2:1d:be:af:50:f8:f3:c5:0a:12:
f4:f0:a5:e7:b8:1a:46:a6:f8:88:c2:27:8d:79:3c:
aa:a7:00:d5:81:37:37:26:f2:4a:95:06:0f:b1:1e:
f7:3d:45:6a:ce:c1:e3:7a:18:06:a4:26:cb:4f:a9:
28:07:5e:e1:75:18:c8:7a:ab:07:28:65:91:c8:9a:
75:37:a1:be:e3:36:c4:db:ac:6a:dd:17:b2:9a:b2:
0f:8c:7f:cf:09:9c:3c:33:38:3f:e3:3e:95:51:0b:
46:4e:0e:aa:89:97:65:27:0b:66:5f:c1:40:a3:ed:
69:88:8b:4d:ef:47:03:40:b3:8f:00:cc:8a:64:a4:
31:e4:f6:80:58:22:5c:30:ff:b4:d7:04:a1:69:9c:
98:2c:a2:7d:25:2a:2e:b8:6c:6f:f1:84:e0:7a:61:
c9:c4:7f:a1:4f:d9:5e:cd:66:42:63:88:14:03:f7:
7c:f3:80:dc:f1:0d:1e:50:e9:39:e6:fa:7b:53:49:
84:4d:05:e3:09:4c:24:ea:80:a5:32:fb:8f:e3:53:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:27:58:2A:47:F1:22:B7:4E:8D:DF:F1:65:8C:B5:89:66:C3:B3
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jOMnWCpH8SK3To3f8WWMtYlmw7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:11:ef:1f:6d:3a:f4:da:b5:8d:a7:9c:82:6c:e5:dc:03:fd:
37:b8:f9:cc:6f:81:d3:57:11:c3:3b:84:f2:c8:d7:c4:2a:71:
12:f6:ab:3c:e5:ef:db:72:dc:84:5e:34:f2:ae:00:bd:c8:20:
43:e4:50:37:92:93:53:56:b8:fe:1f:3c:27:5f:26:db:5f:7f:
87:6e:cd:15:0b:f5:e2:f4:68:c2:b8:be:81:d1:e7:6d:64:d8:
f3:10:3a:c0:c6:79:28:b6:9d:d5:14:59:e5:d6:ed:b5:e6:99:
ab:8d:e4:72:5b:67:2d:85:db:71:f6:75:d2:58:03:41:95:a6:
ce:21:f7:ca:37:fe:19:8e:12:64:b5:ce:5d:e3:2b:19:dd:11:
a6:72:54:f8:8c:80:3b:68:3b:89:85:c1:62:be:d8:66:9a:87:
d7:2a:3e:a0:db:f8:75:cf:7f:d1:a3:48:89:f4:2b:84:c9:90:
46:71:e5:97:6a:5b:c8:df:85:b7:ca:35:eb:0d:44:2e:84:03:
5a:31:8e:2f:4b:f9:b5:13:6d:3e:38:ff:72:d2:9b:03:01:70:
a5:32:fa:e6:93:e5:63:ed:cc:a1:ff:e3:52:1d:e6:8f:35:06:
2a:e3:94:37:41:02:5c:fc:36:6a:de:c7:f7:56:19:48:e7:bb:
de:ae:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:54:05 2025 by rpki-client