Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa
File: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (raw, json)
Hash identifier: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=
Subject key identifier: 26:4A:2C:BF:6C:45:14:D4:36:80:E4:4C:18:9F:91:8F:52:53:82:A9
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 01974EBBC4E1D31C2DDD12B3059EBD5B426E
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa
Signing time: Sun 08 Jun 2025 08:50:17 +0000
ROA not before: Sun 08 Jun 2025 08:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 193.177.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:bb:c4:e1:d3:1c:2d:dd:12:b3:05:9e:bd:5b:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jun 8 08:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=264a2cbf6c4514d43680e44c189f918f525382a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:c9:68:4b:08:dd:89:cc:61:30:84:1d:34:
62:71:bf:7b:74:59:7e:2f:4f:77:6a:66:9a:99:14:
fa:b6:ec:e0:ff:d2:4e:02:fd:11:52:eb:fc:0b:94:
c7:17:c8:ea:b6:e5:ee:ae:da:bb:0d:5a:9c:54:8e:
80:75:6e:ae:12:d2:7e:5a:79:c2:59:18:0e:0b:bb:
21:71:45:24:46:39:fe:5f:9a:a2:9f:d5:54:2d:ac:
10:48:40:f9:38:f4:5d:cf:ff:1e:f6:a0:29:4f:c6:
73:0e:8b:46:72:50:4c:eb:37:5e:c1:29:8d:56:59:
86:ff:07:aa:79:c7:fc:7f:8d:42:46:3c:de:e6:03:
3b:14:5f:02:20:a0:a8:58:9b:1a:64:88:81:bb:16:
07:b1:11:4e:e6:2a:83:8d:9b:5b:00:30:d1:31:4b:
8d:31:68:6a:bf:cd:14:a0:54:f3:bd:74:e5:7d:70:
71:a7:45:89:1b:37:d4:df:ba:b0:d2:a8:fe:32:09:
eb:14:e9:ad:f8:ff:fc:6d:47:60:d9:9e:39:8f:7c:
a3:a1:18:fd:68:fa:b5:87:36:1a:af:01:1c:9d:9b:
57:64:7b:10:b6:3f:e6:7f:a7:87:b0:4e:0f:3f:e8:
19:16:38:81:01:a4:a7:dc:58:93:b7:b5:07:9e:b1:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:2C:BF:6C:45:14:D4:36:80:E4:4C:18:9F:91:8F:52:53:82:A9
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.0.0/24
Signature Algorithm: sha256WithRSAEncryption
93:18:c3:06:c6:d3:d2:24:38:e0:c6:24:0f:97:78:e6:d5:63:
4d:4f:23:ff:75:e8:a4:48:15:e1:c9:73:9f:e8:73:0f:e9:97:
25:2a:c6:70:07:d7:9e:04:79:c6:78:dc:40:38:74:0b:e7:00:
c4:46:bd:5b:66:7d:bb:c6:b9:23:51:bd:4f:46:d3:1d:94:b2:
00:e8:cc:72:c1:31:50:2b:80:4c:d2:d7:01:be:36:47:8d:d2:
d7:e5:4e:f7:2d:f9:c8:29:e3:34:d2:d7:64:01:41:3d:7d:2a:
ef:4f:4e:2c:f0:4d:bb:06:8d:8b:53:1b:49:79:9b:45:71:1a:
5f:6c:71:b7:e4:f2:cd:56:2c:a2:76:76:5d:c9:bd:5e:db:37:
a7:d2:9b:04:c4:9a:e4:1b:6b:cb:68:11:4d:96:9d:2a:c7:23:
bc:db:92:87:19:03:98:cf:d1:66:8c:4a:ea:48:a7:86:cb:ef:
98:9c:3a:f4:19:80:a3:f4:2e:11:b5:e3:fd:7c:ef:7c:ce:68:
9a:92:31:90:40:c0:fa:ca:8e:fd:d8:1f:05:17:9a:6f:2a:22:
d1:b7:2c:f4:d8:d4:91:47:84:67:ca:43:9e:14:46:e9:2f:d2:
31:8d:6b:49:e5:32:a9:31:44:dd:26:e7:29:20:7f:d2:e6:70:
d6:cd:fc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:38:38 2025 by rpki-client