Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/jOZUYryfotd3VTVGeBf6KTjWoz0.roa
File: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (raw, json)
Hash identifier: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=
Subject key identifier: 8C:E6:54:62:BC:9F:A2:D7:77:55:35:46:78:17:FA:29:38:D6:A3:3D
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 0194274819EA525CC706126A634070318F0E
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/jOZUYryfotd3VTVGeBf6KTjWoz0.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39271
IP address blocks: 46.19.128.0/21 maxlen: 21
46.19.135.0/24 maxlen: 24
87.238.144.0/21 maxlen: 21
87.238.151.0/24 maxlen: 24
185.186.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:ea:52:5c:c7:06:12:6a:63:40:70:31:8f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce65462bc9fa2d7775535467817fa2938d6a33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:a0:7a:56:90:15:f2:98:30:52:1d:99:10:
bb:ad:23:03:cb:2c:a7:ab:28:7c:fb:87:16:03:29:
af:b7:ca:c4:75:13:9e:93:f7:7f:57:a7:25:17:00:
91:09:91:10:0c:80:b0:3e:7e:b0:1f:c3:ef:e0:c2:
42:7c:d7:e5:f5:09:23:2f:dd:71:b3:0f:58:db:16:
f1:50:ed:ac:25:4d:6f:6a:e4:ea:de:4b:3e:41:66:
ab:9d:8e:55:f8:2a:86:f7:55:b1:60:a1:aa:d8:f6:
bf:89:ac:6a:d4:8b:69:25:7c:c9:0d:49:68:c8:50:
0b:fd:a9:1f:ee:6a:88:d8:7b:b0:74:01:da:57:af:
5e:9f:cf:93:ec:87:91:e2:5a:12:a5:ad:3a:fc:91:
7f:c1:11:ad:a2:92:55:5b:ff:3c:52:93:62:29:0d:
1c:43:b4:22:fb:27:26:55:05:f2:fe:d7:c9:6a:98:
fb:ef:5a:73:d1:74:e7:3e:9b:48:bd:38:14:07:85:
ae:98:47:50:0f:58:ac:13:7c:60:5e:2f:96:b2:65:
fd:49:f0:9c:9f:15:07:35:fd:00:08:dc:76:20:58:
9d:37:b9:af:cd:5e:8d:1c:5c:91:1c:02:88:ea:3a:
d5:64:ad:96:d9:82:e3:94:92:4f:87:5f:40:a3:9a:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:54:62:BC:9F:A2:D7:77:55:35:46:78:17:FA:29:38:D6:A3:3D
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/jOZUYryfotd3VTVGeBf6KTjWoz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.128.0/21
87.238.144.0/21
185.186.72.0/22
Signature Algorithm: sha256WithRSAEncryption
01:44:74:a5:7b:57:60:de:23:56:84:9a:d5:91:7d:e0:18:3e:
13:ed:29:e9:57:9f:91:7c:0c:d5:c0:7f:24:27:42:8d:74:58:
88:79:ce:9f:4f:07:f4:50:ab:b9:7b:f8:21:eb:e2:49:f5:de:
68:3d:20:2c:0a:4d:2e:fd:c9:d3:3f:79:f4:a0:30:28:9e:84:
1d:69:b7:50:6d:97:a9:20:e0:f4:ab:ca:2f:23:8f:c9:48:02:
4b:1f:6c:9d:77:1a:3c:6e:59:a2:41:70:c2:d4:52:95:d3:c5:
37:84:51:a8:d8:72:b6:58:20:df:d8:c2:80:c2:d1:cc:b5:83:
64:c6:cf:fb:7f:e4:62:00:25:8f:38:fc:98:6f:ca:39:26:ea:
93:05:39:2e:57:48:44:c4:46:4d:56:52:bf:65:11:9c:01:ac:
d5:5d:96:4f:19:e3:46:f6:49:7c:7f:81:30:a6:c4:2f:d9:ef:
75:9a:35:6d:cc:89:a7:09:4f:a1:a5:5b:d6:3e:57:7e:8f:f4:
7e:8a:e3:f3:e5:fc:a2:de:89:48:91:26:48:52:75:39:7c:bf:
7b:e0:01:78:5a:e6:02:11:d5:6b:62:6d:e6:23:4c:a2:f8:72:
7c:77:29:4d:34:39:92:02:62:2a:30:61:95:cd:2c:a8:23:ea:
01:da:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:50:01 2025 by rpki-client