Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jrgMSskhT0megkHs6B0DtWXkMyw.roa
File: jrgMSskhT0megkHs6B0DtWXkMyw.roa (raw, json)
Hash identifier: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=
Subject key identifier: 8E:B8:0C:4A:C9:21:4F:49:9E:82:41:EC:E8:1D:03:B5:65:E4:33:2C
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC0760840949FD35FFB409ACC00659
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jrgMSskhT0megkHs6B0DtWXkMyw.roa
Signing time: Fri 31 Jan 2025 00:04:06 +0000
ROA not before: Fri 31 Jan 2025 00:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 83.147.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:07:60:84:09:49:fd:35:ff:b4:09:ac:c0:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb80c4ac9214f499e8241ece81d03b565e4332c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:d6:f0:80:c5:92:f4:c9:a5:f1:68:dd:a2:
a3:b5:bd:96:03:74:61:de:2c:e5:c0:29:32:39:b4:
99:b4:ff:b1:ef:fc:87:ac:87:82:5e:02:88:d0:24:
0e:4d:69:32:0d:fe:5c:db:6e:5c:e1:28:74:94:01:
d2:7a:05:3d:ba:9e:56:85:25:07:9f:9d:1d:df:06:
61:c6:3c:7e:34:73:09:6a:39:d2:a0:dd:d3:7d:4c:
2d:ae:15:64:2d:70:cb:da:c7:b1:58:a1:d8:b8:89:
54:de:47:01:98:61:b6:a3:9e:c4:27:81:8c:37:e9:
a3:bb:c4:a6:bf:00:e3:f6:1d:69:a6:05:60:ec:a3:
f0:04:49:b1:f8:67:ba:e7:4b:e3:32:5b:c0:cc:a9:
02:0a:04:87:ae:d1:fa:30:50:e6:cc:64:d2:de:6a:
20:c6:39:2e:e6:69:cd:ce:c7:0f:02:e0:c9:ab:1d:
ac:b6:f1:c4:8c:ce:50:22:1c:f9:70:52:f5:fc:91:
f2:61:19:60:70:ed:2b:0b:4c:5c:4d:ae:2e:bd:dd:
35:2b:a1:38:b6:8b:4e:02:37:73:58:34:bd:78:4d:
e3:3b:f5:02:2d:9a:18:a1:16:10:26:dc:47:bc:50:
b2:4c:0a:df:b4:a2:f7:9d:7b:51:03:5b:1a:5c:2e:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:0C:4A:C9:21:4F:49:9E:82:41:EC:E8:1D:03:B5:65:E4:33:2C
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/jrgMSskhT0megkHs6B0DtWXkMyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fd:70:03:9d:33:33:03:3c:a2:ea:fc:82:52:30:df:92:b5:
e2:2c:74:3e:c3:c5:ec:b8:e7:80:26:b6:cc:f3:62:24:1a:b3:
f2:93:04:aa:09:bf:dc:da:e3:52:76:8e:9e:6b:13:9c:e2:f3:
a6:dc:c8:c5:57:b3:81:c5:37:f2:34:bd:94:22:ee:df:71:14:
dc:96:b4:4d:53:25:19:db:9e:c0:1f:52:9c:51:dd:05:cd:cf:
e8:26:68:41:81:a3:61:0d:69:b9:43:85:f1:48:43:ad:16:49:
4b:0d:94:62:d6:7a:78:34:b7:6b:9e:52:c6:aa:54:1c:06:57:
5c:6f:69:8b:a9:91:e2:39:2e:2b:45:9e:96:92:4c:05:39:18:
37:ab:ff:54:1b:41:98:4c:be:9b:ec:d7:70:09:23:b1:cb:0b:
c2:2f:69:f1:98:c9:0a:5c:9c:09:90:db:76:ff:f9:64:b4:c9:
6e:ad:21:c8:c9:4e:cc:04:40:28:80:cf:b1:f9:a9:e5:66:35:
38:dc:e7:69:14:ed:bc:2e:fc:8b:9c:dc:a1:1b:90:28:64:04:
c1:c2:04:f7:06:33:38:88:a8:6b:2a:05:50:6e:8a:a5:b7:b1:
4c:c3:63:36:55:71:e2:07:d0:5f:9f:d0:03:8a:ab:32:90:48:
a5:9c:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:50:10 2025 by rpki-client