Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa
File: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (raw, json)
Hash identifier: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=
Subject key identifier: 25:E5:2B:53:06:C5:A4:6B:BC:88:3A:83:66:62:CB:B4:B5:F4:ED:4A
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019423D70CD17956AE9049EA8707AEC98054
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202447
IP address blocks: 147.236.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:d1:79:56:ae:90:49:ea:87:07:ae:c9:80:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e52b5306c5a46bbc883a836662cbb4b5f4ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:5b:66:d6:1c:1d:d9:53:bc:d4:5a:94:8c:
fc:21:3b:13:7e:e1:cc:9e:8a:23:7f:c2:4e:e8:e3:
d6:c7:de:46:b7:2b:05:00:dc:16:b3:8f:8d:fc:60:
ed:34:6d:30:3f:59:f6:bd:9b:46:c2:88:c6:84:42:
d5:2f:3f:50:75:c4:4e:d7:68:1b:19:32:2b:73:35:
4e:18:30:c4:b2:57:5c:e6:6d:95:6a:5b:59:47:20:
dc:e2:d1:56:84:43:e5:77:96:67:9c:3b:c1:fc:91:
ec:74:ef:bf:2d:3f:51:20:09:1b:9b:9c:bc:06:f4:
87:85:a4:44:f7:58:83:df:70:73:8f:1b:0e:74:9c:
14:d4:7d:48:d0:45:3a:0f:46:20:1e:43:43:8f:6c:
44:b6:b2:e5:c7:cf:ed:14:c0:b2:e7:92:d6:3d:67:
96:84:24:38:58:0e:d2:f9:06:fc:a8:d4:29:9d:97:
95:3e:73:bd:5a:71:21:47:2b:75:d3:d2:46:eb:b6:
e9:c9:c6:0e:44:d1:dd:b7:11:d0:2f:e2:1a:77:1a:
f4:31:ad:0b:a9:52:66:6f:35:8a:51:24:9b:f9:6c:
a8:ff:70:f8:f9:75:79:ac:15:64:48:e0:91:b7:83:
aa:98:b0:8b:ad:e9:74:08:fe:29:82:bc:ff:6e:42:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:2B:53:06:C5:A4:6B:BC:88:3A:83:66:62:CB:B4:B5:F4:ED:4A
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:88:63:8e:6c:e6:47:93:07:99:d8:69:a1:79:2a:5c:68:24:
97:b1:e6:46:04:18:6a:05:87:dc:ed:3c:d6:fd:2d:4c:fc:c5:
46:57:20:62:0e:99:1d:3a:dc:e1:bb:5c:f1:04:10:2a:29:a2:
e2:e6:a5:8a:ed:7b:1b:3c:cc:b7:50:a6:24:0d:7e:e6:78:a0:
41:91:00:7a:c2:45:e0:b4:ea:88:12:1b:17:29:d1:af:44:fb:
85:03:58:e9:c4:1c:50:0a:76:89:68:7f:19:72:e8:00:2a:35:
66:7d:1d:aa:31:fd:46:95:44:08:5e:71:45:f4:4c:98:98:80:
ff:12:59:73:bb:42:cc:42:64:97:7b:c0:ae:fc:4d:3c:5d:6c:
18:22:41:d6:d5:b5:d6:9a:b3:ee:89:34:b2:fc:1c:04:c8:a3:
ed:b9:4a:1d:1b:4c:1d:ae:ab:9d:9a:e6:d1:78:99:dd:89:ea:
b9:67:45:4e:f9:1c:46:56:a8:a0:61:bc:af:f9:e9:4b:a7:ce:
e2:24:d5:28:36:b8:2a:da:7a:b1:a7:d0:df:63:ab:ea:7a:c5:
1d:22:1d:b4:6c:6c:0a:2f:88:18:05:c9:37:da:32:01:c0:48:
fd:02:68:e4:03:14:93:6e:9a:27:5e:9f:25:dc:fe:45:2a:b4:
54:a2:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:51 2025 by rpki-client