Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/jUminXGzN3lBVv6Wl3PuROeq30E.roa
File: jUminXGzN3lBVv6Wl3PuROeq30E.roa (raw, json)
Hash identifier: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=
Subject key identifier: 8D:49:A2:9D:71:B3:37:79:41:56:FE:96:97:73:EE:44:E7:AA:DF:41
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0194228E1EF2228AE74B21F16E0903EA477F
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/jUminXGzN3lBVv6Wl3PuROeq30E.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50939
IP address blocks: 195.88.80.0/24 maxlen: 24
195.88.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1e:f2:22:8a:e7:4b:21:f1:6e:09:03:ea:47:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d49a29d71b337794156fe969773ee44e7aadf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:0b:40:83:d3:92:41:e3:f4:f0:7e:b7:c3:
ad:f3:e4:53:41:15:2c:09:30:be:db:ef:72:f8:5a:
4a:b1:a1:b4:74:10:c2:f9:31:20:6f:54:b3:fa:95:
a2:a4:d4:9b:3a:96:f1:73:5e:c1:76:1a:fb:40:14:
ff:9e:77:44:77:ff:c6:23:0e:6e:b1:cd:8e:9f:8b:
3a:d2:b3:e9:ad:81:7b:9f:cd:d3:a1:5e:dc:e5:70:
cb:ee:21:25:3a:37:1b:1d:bd:b1:91:bc:a5:0f:f5:
59:c4:a7:cb:d5:fd:27:91:24:c8:7f:db:88:b6:b2:
dd:13:6e:0b:03:74:8d:6a:00:4c:b3:cd:a4:a9:81:
49:c7:d4:e1:e6:8d:6d:53:62:71:33:26:00:96:52:
4d:e5:b9:bc:97:bc:b6:04:c0:82:04:96:14:93:27:
0c:67:30:e6:80:1b:fb:7f:bd:2c:5d:55:90:36:88:
a2:70:b7:3c:ce:31:8f:76:03:91:6c:78:00:31:95:
0e:30:e5:bc:f2:7c:6a:b9:38:c5:86:67:1b:15:e7:
1b:7d:d2:0e:fd:a4:e6:59:41:03:79:b9:9a:61:f9:
73:9c:ff:f4:98:9a:1d:f5:54:12:a7:28:8b:dd:f5:
33:e1:f7:19:3e:65:00:2e:4c:28:b5:c0:92:c8:47:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:A2:9D:71:B3:37:79:41:56:FE:96:97:73:EE:44:E7:AA:DF:41
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/jUminXGzN3lBVv6Wl3PuROeq30E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.80.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:43:d7:ce:15:a4:0c:30:b4:de:53:71:e5:52:84:dc:3d:0f:
29:d3:4e:04:26:cf:b6:86:25:41:f2:38:9e:4f:70:47:50:61:
6d:f5:1a:a6:b1:e6:8a:be:a0:14:32:e0:f2:b3:6d:e9:46:90:
c4:87:23:69:59:7d:a2:a4:9c:e0:39:cb:c4:14:67:c0:55:fc:
50:65:d7:98:e9:f5:b7:0b:f6:8c:4a:a8:ad:8b:40:60:72:83:
83:1d:b2:f0:75:f3:83:9c:0f:c0:a1:7b:cd:8e:33:51:cd:3f:
b0:96:f5:e0:8c:93:b6:4f:bc:f7:b9:2e:24:95:a4:8e:61:99:
46:c8:8f:1e:08:c4:0f:07:ca:4f:41:ae:c4:b8:b8:d4:3f:c2:
83:9d:0a:67:d7:6d:31:c5:9e:54:3f:cd:4b:05:fe:2b:ad:a5:
5c:5f:f6:04:22:7a:f0:08:59:01:26:4c:98:1b:e0:41:c8:66:
30:da:32:e9:a2:96:f4:bd:8f:b1:44:8a:90:c4:70:9b:b0:4d:
08:f0:ea:0c:7a:c5:cf:78:3f:b5:d1:e7:24:0c:da:92:3f:f0:
9a:fc:1b:3b:6b:ba:6d:eb:d7:b2:3d:f8:0f:e4:03:ba:47:a4:
fd:16:c2:ee:2a:b9:ef:7c:9f:13:a3:98:1e:20:b8:c7:15:0f:
10:e2:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:55:52 2025 by rpki-client