Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jnYTysXrOb_StYu-PzKs4M4hD2Q.roa
File: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (raw, json)
Hash identifier: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=
Subject key identifier: 8E:76:13:CA:C5:EB:39:BF:D2:B5:8B:BE:3F:32:AC:E0:CE:21:0F:64
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98B107D7AA4CD67B726B23328D982
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jnYTysXrOb_StYu-PzKs4M4hD2Q.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 185.121.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:10:7d:7a:a4:cd:67:b7:26:b2:33:28:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7613cac5eb39bfd2b58bbe3f32ace0ce210f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:fe:a4:3d:5c:78:78:f0:6a:e9:af:31:4f:
ef:ee:a9:eb:94:b9:22:d6:02:04:bc:3d:39:38:d6:
a3:5c:13:3b:c9:2a:25:1b:07:c6:79:db:e0:a7:5c:
48:f6:ea:19:7e:e3:ff:e8:cd:09:8a:27:5e:25:2f:
36:4f:9f:c0:7a:12:e2:49:e0:77:b9:e3:ea:c1:d4:
d4:b1:ac:d9:ed:b3:6c:eb:42:b4:bf:9d:f7:d1:d5:
27:c6:93:3f:eb:1a:be:6d:a2:d6:68:27:fc:0f:37:
4c:00:05:d1:8f:53:b9:aa:49:17:3b:3d:53:8e:4a:
60:e5:77:4e:e0:b4:27:13:5e:89:38:d8:73:ae:f5:
77:d2:1a:52:98:ab:31:aa:10:1c:b8:8e:05:35:56:
b0:97:97:66:c1:15:e9:53:df:1b:34:61:1f:cf:a7:
e3:c8:ef:0f:ea:e4:24:7e:35:01:24:21:49:fb:43:
c5:3f:02:a2:97:f6:29:b7:33:26:b1:d4:ea:5a:ed:
4c:7c:25:b3:12:37:d7:31:fa:ad:9f:98:9c:3b:6e:
b4:d2:88:4b:31:10:0a:5c:7e:22:32:2c:1d:55:7b:
a4:99:09:a3:a4:8c:41:49:af:2d:e7:66:40:79:d8:
b8:d2:29:50:69:90:04:9e:31:ba:29:72:5e:17:70:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:13:CA:C5:EB:39:BF:D2:B5:8B:BE:3F:32:AC:E0:CE:21:0F:64
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jnYTysXrOb_StYu-PzKs4M4hD2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.134.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f7:06:64:5e:44:3e:89:f5:72:41:c2:57:88:77:32:25:4c:
33:00:a4:87:ad:54:df:12:22:4d:5b:72:8e:84:af:8c:9f:76:
b4:c0:f5:0d:c2:ab:be:e7:8c:3f:ce:4c:c5:56:df:b5:a9:67:
72:00:d3:4f:1f:95:1b:19:73:03:ef:7f:db:38:62:cd:ab:79:
24:0c:d8:d2:75:aa:9a:08:d4:d1:3f:0f:0b:ac:b6:9e:20:58:
c5:12:32:dc:2a:ce:91:a2:f5:bb:22:fa:7c:8f:16:5b:46:3d:
20:6d:97:3a:41:3f:8a:ac:fc:1f:5e:01:de:14:47:be:ba:0f:
a1:98:25:bb:e3:d4:b8:6a:ac:c0:5a:01:3d:7d:7b:d5:1e:c9:
3c:b5:cf:d6:09:78:ae:3e:8b:31:e4:9d:49:3e:59:67:27:cb:
94:09:63:11:63:c1:87:7d:99:85:8b:e7:cb:fc:20:31:7e:8e:
15:c5:a1:20:06:c3:a6:90:f2:2f:72:53:4a:ef:b9:c1:c9:3c:
7d:32:2a:f6:26:d5:ab:95:b8:ed:bf:d5:8b:53:17:5e:af:81:
3b:ae:9b:27:4b:eb:e7:e5:7b:9e:40:c8:fa:80:ec:64:20:ab:
1a:92:9f:e3:b7:b1:a7:00:c4:46:e0:8b:c9:00:49:f3:4b:ed:
66:f4:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:52:54 2025 by rpki-client