Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa
File: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (raw, json)
Hash identifier: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=
Subject key identifier: 8D:AF:EB:04:5F:A6:54:1E:88:E8:01:B9:4A:AD:D4:FD:C4:28:96:D9
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 0194244587922E44CB75194BAEE1FD24EA3F
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 185.185.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:87:92:2e:44:cb:75:19:4b:ae:e1:fd:24:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dafeb045fa6541e88e801b94aadd4fdc42896d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:31:a6:a4:76:d6:4f:f8:e6:35:17:2d:f0:
d7:9c:88:a2:6e:f7:da:a3:3f:b6:94:e5:b6:a6:55:
df:1a:58:ce:a1:d2:76:f2:31:34:41:a0:d2:02:06:
50:cb:23:e7:ff:8e:82:83:70:5b:86:8b:34:81:3b:
33:4f:9e:a3:04:94:d9:0b:64:db:ee:88:ee:8c:f6:
e9:f9:c7:0e:60:0d:81:f7:bb:2e:d3:f3:eb:9b:fb:
db:83:e2:07:f6:9a:e7:99:95:6d:1e:ea:3f:d1:03:
f5:5e:78:7a:7e:3b:96:7c:53:9b:61:9b:bb:23:55:
9c:ea:45:e9:3c:5b:97:a5:3e:b4:9b:2d:81:b9:e0:
20:62:0e:32:77:28:61:63:ef:1f:17:3d:4f:2a:b4:
2f:e3:96:ea:7f:d9:f8:c3:72:02:1d:f3:27:59:4b:
4c:df:c7:f2:b5:92:ad:c5:c2:f6:29:4c:37:d2:68:
55:a1:b4:3b:93:14:51:c7:02:a2:a3:63:68:fd:cb:
f8:8c:09:00:ce:f1:e3:7a:cd:4b:de:76:b2:b0:a9:
15:8c:94:15:ff:8d:f8:b5:ac:eb:36:2e:69:52:04:
09:df:38:0f:1f:41:31:bc:3a:a9:ed:72:35:5b:90:
9b:6f:0e:22:76:44:ac:70:c3:aa:e8:95:93:05:9f:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:EB:04:5F:A6:54:1E:88:E8:01:B9:4A:AD:D4:FD:C4:28:96:D9
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3b:1a:fe:a3:78:6d:93:2e:7b:2f:f1:99:0e:47:09:55:9d:
13:ac:93:5b:bc:da:2d:0c:59:1c:19:b7:f5:cd:1f:1a:8d:27:
6a:b0:e4:c9:e4:47:71:fc:8b:38:68:c6:f2:fc:ef:99:79:11:
9f:59:61:2b:02:80:81:b6:f2:63:fd:4c:c5:cc:77:13:21:a0:
50:0d:ff:89:20:df:e6:ad:42:81:30:df:c1:58:a1:b6:c5:b8:
c7:99:51:77:53:b5:fa:b3:d3:77:1d:50:58:a6:30:6d:a4:1e:
5e:ca:c6:fa:ac:f6:fb:49:fa:73:19:10:fa:fe:ab:b7:6d:3e:
50:1b:99:07:b4:26:86:cf:a2:4d:a8:75:7d:69:ef:a9:29:1f:
db:cf:9f:30:d0:06:0d:88:c5:bf:91:84:52:b5:ac:96:7e:81:
95:fe:f1:89:97:e6:82:c9:ee:74:d3:da:f8:7f:b1:0b:30:1e:
29:d2:63:f3:4f:81:87:fd:01:b1:16:30:42:13:a6:10:43:af:
65:83:7e:8e:b3:c2:b5:f9:35:c3:c8:f9:3a:c3:ee:58:64:bd:
5d:5a:76:6c:b4:a1:ae:6b:3f:5b:f0:4e:fd:51:7d:b4:6e:02:
26:ed:7f:1c:42:cf:a2:37:43:7a:c5:76:cb:ea:57:5b:5f:a8:
c8:de:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:14 2025 by rpki-client