Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/jp5nTO_8vGG_gXw2zLO8q19JQc4.roa
File: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (raw, json)
Hash identifier: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=
Subject key identifier: 8E:9E:67:4C:EF:FC:BC:61:BF:81:7C:36:CC:B3:BC:AB:5F:49:41:CE
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 0194228E1DBBCC7852F19BB5DAB8146EFDCF
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/jp5nTO_8vGG_gXw2zLO8q19JQc4.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50869
IP address blocks: 194.126.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1d:bb:cc:78:52:f1:9b:b5:da:b8:14:6e:fd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e9e674ceffcbc61bf817c36ccb3bcab5f4941ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:b2:76:26:7f:ac:5b:56:6d:26:e7:f6:40:
2c:ac:9c:0d:72:05:16:63:a0:e0:78:cb:b8:6d:b2:
79:87:67:da:75:c8:52:5e:7a:1c:90:49:9c:6a:19:
c7:a2:94:ee:01:0f:96:15:dc:7b:e3:c6:da:fb:aa:
6e:95:5d:37:6e:e6:0a:fd:ea:2b:aa:0e:69:2c:04:
5e:db:87:b7:ed:5f:3c:65:b2:38:b5:cf:ba:ca:84:
29:88:e8:03:39:dc:69:35:b7:03:82:9d:a5:18:15:
1a:46:2e:1d:29:94:8e:54:46:37:e3:7f:12:ec:42:
f8:39:e6:35:fd:59:e1:76:67:b2:52:4d:01:2d:b9:
a7:57:bc:7d:42:cd:da:90:80:71:c3:8a:e0:ee:2e:
b1:9b:e4:15:3c:41:a1:92:cb:82:d8:bc:7d:5f:63:
0f:71:fc:b7:eb:ca:88:84:d7:05:d3:06:41:bd:53:
d1:32:f8:29:d2:51:a5:e9:13:17:f2:1d:ae:54:43:
82:dd:30:21:04:65:7c:dc:47:e2:e6:6c:0d:b5:0f:
7e:94:8b:f2:8c:8f:27:1e:dd:b8:92:af:4b:61:7a:
fd:fe:30:b9:f5:a6:a6:38:f1:46:8a:ed:e5:4e:2e:
00:81:97:d1:60:18:40:1a:fd:63:a5:69:9d:5b:ed:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:67:4C:EF:FC:BC:61:BF:81:7C:36:CC:B3:BC:AB:5F:49:41:CE
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/jp5nTO_8vGG_gXw2zLO8q19JQc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
08:06:af:1b:30:2d:2e:88:13:17:b1:ba:55:6f:b2:87:a8:bb:
b2:d8:17:9a:f6:31:d5:35:34:2b:b9:33:a1:94:90:0f:8f:8a:
30:ae:ba:3c:db:0a:c4:53:61:43:85:c1:b8:31:5e:aa:4a:3f:
b5:65:38:bb:cc:4e:e3:84:81:8c:36:47:c2:2e:dd:ce:6f:09:
d3:25:ba:14:f2:61:6b:4c:5d:31:24:9e:d4:45:43:a2:93:ce:
b4:2a:6a:18:0d:21:16:99:fa:e6:33:75:6c:4a:5c:d0:7a:c1:
81:21:3a:5b:a9:d1:62:8a:c5:61:1e:42:48:e1:d7:9f:81:89:
5c:49:b0:54:8d:c4:55:78:ad:3c:f3:c6:1a:cf:0a:b6:70:c6:
22:9e:8f:7b:5c:3a:fd:6d:24:38:97:a1:a9:a6:70:eb:43:12:
34:ae:02:34:39:cf:3d:95:a2:7a:01:c3:f7:bf:0e:a5:86:c3:
5e:43:89:31:24:7a:52:ac:21:6c:3f:9e:95:83:aa:72:ec:be:
c2:e7:e1:bc:ea:f7:5a:ba:e8:43:1c:ce:6d:21:58:c8:e4:b1:
50:33:8b:00:2b:d9:df:47:2e:df:0e:58:1e:63:b7:fa:91:51:
37:49:da:17:7c:98:1e:fb:04:8f:87:2b:b6:f5:ad:82:ea:cf:
70:dd:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:54 2025 by rpki-client