Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa
File: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (raw, json)
Hash identifier: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=
Subject key identifier: 8E:9F:BC:95:B5:0E:BC:DE:AC:50:F6:6C:4C:BF:9D:87:B3:0E:55:1F
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019420D623A364EF3ADF461E2D768BE81DBD
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199577
IP address blocks: 91.217.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:23:a3:64:ef:3a:df:46:1e:2d:76:8b:e8:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e9fbc95b50ebcdeac50f66c4cbf9d87b30e551f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:7e:fe:15:41:ce:03:43:a7:68:31:04:48:
f2:d0:a6:f6:fc:05:2a:83:41:2d:c5:0a:92:60:28:
e3:41:7c:2b:bb:73:c5:b7:af:86:23:43:4b:c8:66:
81:e9:d7:45:5f:89:aa:4a:a7:14:5d:91:81:9b:f0:
1d:b2:49:89:cf:b7:76:4a:f7:d7:08:a5:b7:e7:6c:
bc:83:5d:aa:d5:bf:8f:fb:82:04:77:cb:00:07:45:
7b:e3:ee:be:0b:52:95:16:89:09:d1:61:4c:6d:6d:
06:9a:cb:5f:51:74:0a:ac:4e:f6:f0:08:46:e5:2f:
b1:00:14:3b:16:78:7a:76:11:f4:fa:9d:f9:34:9a:
7c:1b:03:4e:b1:79:ea:64:b9:98:e9:4a:49:41:e9:
a4:4c:2e:4a:8f:2e:2e:9c:a8:1e:0a:74:61:17:32:
75:bb:8c:17:17:61:7e:cf:0d:a0:a7:ef:38:bf:61:
e4:65:66:b4:f6:47:4e:f0:cb:98:ab:f2:ce:1c:bd:
bc:77:6d:24:56:ef:88:66:04:70:da:4a:50:20:9a:
0f:b5:3d:64:e5:e1:31:c4:19:0c:5e:5f:80:ae:89:
6e:8b:e8:5f:f1:fb:49:ef:bd:0e:f7:33:a4:be:86:
bf:32:41:be:ce:67:a5:40:c8:0e:2c:4c:ac:98:7e:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:BC:95:B5:0E:BC:DE:AC:50:F6:6C:4C:BF:9D:87:B3:0E:55:1F
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.153.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6a:8a:8e:de:61:65:e7:dd:81:68:a1:60:f4:33:f8:13:a6:
9a:dc:01:92:13:53:5a:21:28:39:d1:91:69:f4:7b:6a:7f:12:
bb:6b:8f:fc:ce:2f:5b:2b:d8:76:3d:b9:e5:19:09:36:8c:21:
7d:4c:3b:9d:60:10:38:14:37:67:8c:23:88:4e:f2:bb:85:a3:
d8:84:88:a0:e3:9f:bb:19:1f:db:1e:f1:81:70:5d:42:28:3a:
f6:f6:e7:00:29:00:88:11:2e:b7:5e:79:d1:8d:2a:fe:f0:c3:
1f:1c:62:94:d4:eb:5a:d8:76:b8:8e:36:cf:48:16:0e:74:e1:
3d:79:d6:b3:7b:9f:7b:05:7e:aa:cb:13:01:1a:52:90:5e:c8:
60:0f:22:ff:5d:4b:39:be:8e:be:2d:63:2e:5b:57:b6:c1:63:
4e:eb:8c:f1:58:07:fa:24:06:72:f1:f5:47:c0:2e:07:25:6a:
f2:fe:f5:77:31:d7:3f:bb:5a:49:1d:ff:e9:94:fa:87:27:19:
03:9c:48:cd:d0:a6:35:89:ef:59:51:09:9e:6f:f3:34:41:69:
bb:5e:7f:e1:52:0a:cb:3a:39:a0:fe:2a:60:4f:cb:81:b3:33:
0f:2d:72:70:f0:bb:80:2a:45:05:ee:12:ec:37:cd:58:6c:fe:
92:7d:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:25 2025 by rpki-client