Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa
File: jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa (raw, json)
Hash identifier: ABUXiiTkIZUHgQ3xysDCG98yDMZyrM6LOi10VqvVwCc=
Subject key identifier: 8D:2C:3C:6D:31:F8:85:37:2A:A5:F6:BB:6C:75:BC:67:23:E4:92:75
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 0194B205B6DA1E06AC7390953E9EF752E28B
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa
Signing time: Wed 29 Jan 2025 12:25:06 +0000
ROA not before: Wed 29 Jan 2025 12:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214761
IP address blocks: 195.191.30.0/23 maxlen: 24
195.191.31.0/24 maxlen: 24
2001:67c:1420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:05:b6:da:1e:06:ac:73:90:95:3e:9e:f7:52:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Jan 29 12:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2c3c6d31f885372aa5f6bb6c75bc6723e49275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:9f:7a:8b:90:e5:45:92:15:2a:6a:18:c5:
a1:49:5b:b6:f1:de:32:49:65:2f:ed:2c:17:28:ec:
64:61:10:85:49:de:01:29:45:5c:67:ec:c7:4d:25:
53:b4:06:ce:8e:a2:af:ab:95:9e:3e:90:31:52:1b:
55:f7:cb:5d:d0:f2:92:f2:44:5a:42:4d:2a:22:63:
38:1c:96:4f:78:fa:fa:29:70:18:1a:1e:12:a4:7d:
78:f2:8a:c9:59:83:1a:fa:14:d4:3a:1b:68:11:13:
80:8f:af:d2:d3:92:28:00:d5:0e:2d:42:35:1b:ae:
48:e3:4c:25:4a:45:ba:2a:ac:4d:0e:91:cf:80:e8:
c8:d1:a4:5a:24:4d:9b:ab:2d:87:aa:dc:e0:ee:bc:
b1:11:d1:be:39:20:4e:88:1b:27:f7:03:d3:b2:12:
e9:69:ad:52:74:a7:1a:5b:4d:c7:6e:5a:66:f4:b6:
a2:f3:7c:b1:09:6d:10:39:f2:ce:3f:9b:cc:68:6a:
33:e6:50:4a:11:b6:a6:30:d4:d0:ec:82:13:4a:43:
5f:57:13:4a:d6:c4:3b:45:74:05:c4:89:19:46:eb:
2e:a3:92:d6:5e:a3:f3:dc:95:ae:62:ae:c1:c3:09:
17:4c:91:7f:a4:38:89:cb:8a:59:28:2a:97:9f:96:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:3C:6D:31:F8:85:37:2A:A5:F6:BB:6C:75:BC:67:23:E4:92:75
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.30.0/23
IPv6:
2001:67c:1420::/48
Signature Algorithm: sha256WithRSAEncryption
76:93:09:8b:ed:b5:1d:93:8e:36:b4:7b:80:9d:07:3c:78:6f:
2d:93:f0:cc:71:a9:5c:22:59:36:c5:21:95:39:23:2b:5c:34:
09:e2:7b:dd:40:6c:b4:f4:67:82:a5:5c:51:c0:f3:ff:72:96:
c2:8a:2e:81:c2:df:1f:4f:b5:70:a1:34:f4:d6:b4:94:72:aa:
e8:63:fc:34:bf:ae:4c:4a:41:2a:d7:d0:03:7c:be:89:24:6e:
fe:b3:ad:16:1a:14:4b:1e:b2:64:22:88:2f:52:a0:d4:9c:e9:
68:21:e7:c0:4f:05:ca:11:19:47:42:73:f8:fa:02:c3:c4:76:
27:ba:4f:82:83:44:14:2a:bd:6d:af:ec:90:ba:44:84:1e:35:
95:4e:b2:0d:00:f2:24:3f:f3:b6:5a:c1:05:af:a8:b9:40:49:
96:55:93:91:e3:0c:ca:a6:6c:aa:c2:13:0d:4d:44:29:eb:f5:
ef:52:5f:5a:6c:63:d2:7f:d0:ff:8a:c2:e3:4f:fb:2a:77:85:
ae:bf:61:ab:ba:69:32:b1:57:fd:38:e2:cc:4a:62:42:df:9b:
8c:a7:61:c4:5a:dc:6a:b4:b8:0c:ea:f6:80:ce:9d:2f:b3:ed:
34:ef:99:c3:2e:7c:34:fd:6d:a2:8b:f1:5d:25:90:47:b9:42:
d9:67:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:11 2025 by rpki-client