Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa
File: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (raw, json)
Hash identifier: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=
Subject key identifier: A7:88:D6:C8:F7:48:04:54:8E:84:AB:0E:1C:96:C5:B0:37:BB:47:76
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019424B3C5A3DF4871020A23B1713A4A426F
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42359
IP address blocks: 194.0.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c5:a3:df:48:71:02:0a:23:b1:71:3a:4a:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a788d6c8f74804548e84ab0e1c96c5b037bb4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:cb:38:3f:6f:91:84:03:bd:83:b4:4f:e3:
81:ef:af:59:b2:c6:bc:da:74:39:ca:0d:0f:96:e6:
f7:c4:78:da:6b:29:9a:00:f0:00:ac:a6:5d:b6:ce:
a3:f2:02:0f:6f:f7:74:b6:6b:0c:09:83:0d:6e:83:
77:4b:90:ca:af:f1:29:00:dd:d5:5d:5e:06:8f:97:
eb:09:48:1e:1f:55:ab:f0:7c:1f:71:b7:7d:06:0b:
29:02:60:29:3d:70:4a:32:63:90:41:b5:53:95:44:
04:54:ff:81:e4:0d:71:95:be:b1:60:41:fd:29:26:
6d:45:4f:ce:4b:c6:f4:a2:60:33:b6:d2:3f:e1:ec:
f6:ee:ec:43:ec:d8:7b:18:40:ff:90:74:d9:d5:0c:
c5:23:55:7d:31:2e:2d:d7:42:22:b3:05:42:08:a1:
a3:40:7d:08:07:4b:88:9d:14:e4:8b:fa:37:11:98:
d6:cc:95:43:3a:50:34:1f:bf:6b:4a:08:71:4d:cd:
42:86:b2:bb:bc:a7:47:23:a9:72:b4:37:19:54:68:
e1:78:46:f3:72:03:45:9e:cc:68:5a:82:3f:4f:10:
1c:52:5a:5f:9e:9f:5e:2a:f9:c1:ef:09:50:24:73:
2f:18:44:0c:83:c6:a2:f0:cf:72:69:7e:7c:04:a4:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:D6:C8:F7:48:04:54:8E:84:AB:0E:1C:96:C5:B0:37:BB:47:76
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.214.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b8:95:29:f0:cc:d9:4a:96:6d:14:2a:a3:94:f0:cf:43:e6:
c8:68:26:e5:4f:1e:cc:8d:d1:8d:b9:76:87:72:5d:55:dc:75:
11:57:20:dd:9c:24:82:cf:8c:e7:12:e3:f0:09:9c:96:53:0f:
b7:4b:3a:03:83:d1:ee:46:d0:96:ca:40:de:6d:bd:d4:19:0c:
22:e2:07:1e:6a:6f:9a:13:aa:6d:8d:9b:a9:64:94:1f:38:6d:
3e:16:11:cf:3b:76:0d:e4:39:14:cd:b3:30:5e:41:69:40:25:
b2:d3:f2:71:16:29:bb:92:78:ef:75:60:37:22:2e:6c:06:b5:
31:2c:07:15:e9:d8:1a:a0:5a:8e:c4:d8:19:e1:1f:37:6b:ca:
50:86:ff:1a:a3:f1:f3:67:45:d2:d8:01:0d:fb:29:39:04:54:
df:d5:1d:91:bd:22:fc:9a:9b:db:65:4e:28:61:6a:6e:dd:e5:
24:a7:27:84:15:5d:5c:9d:16:1c:ca:4f:76:02:f7:7a:0a:9c:
01:65:00:9b:56:2e:9b:69:53:96:09:8f:67:2c:01:d9:24:4b:
d2:4e:e2:6c:5d:c6:5b:0e:dd:05:c3:f8:8e:d2:80:2b:d1:b0:
3e:72:36:b0:08:37:c9:df:e7:a4:e8:e3:47:fb:c7:82:48:f6:
53:f1:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:02:01 2025 by rpki-client