Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/J-jYbkHcU08sfslJpHJcwTM3ehc.roa
File: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (raw, json)
Hash identifier: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=
Subject key identifier: 27:E8:D8:6E:41:DC:53:4F:2C:7E:C9:49:A4:72:5C:C1:33:37:7A:17
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0195C8FE16675EF72929FCA94FC004477B05
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/J-jYbkHcU08sfslJpHJcwTM3ehc.roa
Signing time: Mon 24 Mar 2025 16:30:49 +0000
ROA not before: Mon 24 Mar 2025 16:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 185.253.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:fe:16:67:5e:f7:29:29:fc:a9:4f:c0:04:47:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 24 16:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e8d86e41dc534f2c7ec949a4725cc133377a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:1b:21:36:22:ed:35:a2:3f:e8:ff:5f:e6:
d8:37:1a:45:36:0d:2f:d9:60:f5:89:3b:9f:eb:03:
80:de:1e:d5:f1:28:9f:18:5d:ad:e3:c9:26:20:ce:
83:72:cf:b0:40:4d:9c:97:c9:79:72:5b:e5:6b:fc:
6f:de:93:1c:ae:bc:28:27:89:f6:fd:dd:a4:d9:d5:
8c:25:c6:df:3f:46:55:ad:84:d9:d1:38:f6:f3:aa:
77:c4:95:0b:a0:7e:4c:6d:ef:e1:a0:6b:43:85:26:
70:20:05:5c:b0:e1:32:d7:5b:af:17:41:d2:c9:82:
6c:bb:2b:ef:1d:c7:fb:e3:b5:a9:2a:5d:6d:d8:a9:
8b:8a:e5:f5:57:b1:53:43:55:71:40:b0:de:17:29:
44:31:a7:56:45:2e:62:fa:23:f0:2e:89:53:1a:09:
08:dc:ec:21:f4:1f:a1:f8:9f:e7:0c:f0:ae:f1:c7:
34:79:89:8c:b8:5b:67:f8:4a:00:a4:9b:5a:28:4a:
e8:06:9d:65:95:73:64:a9:42:0d:e7:ab:af:7b:3d:
d6:0a:02:ea:cc:7b:48:f0:2b:85:ee:af:17:21:2a:
18:59:ea:4c:62:50:5e:49:a7:4a:c9:6a:f0:e7:24:
b0:db:05:bc:fe:88:bc:39:7b:5d:c1:18:41:6d:88:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:D8:6E:41:DC:53:4F:2C:7E:C9:49:A4:72:5C:C1:33:37:7A:17
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/J-jYbkHcU08sfslJpHJcwTM3ehc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:24:91:ff:46:d8:18:fe:7d:5f:f6:6e:40:a2:75:b1:49:25:
bf:04:87:b2:85:e1:07:96:98:74:00:6e:27:90:c7:72:00:cb:
77:e7:94:de:07:b7:17:b1:e7:bb:98:b4:3e:48:04:ed:fb:ab:
60:3e:e6:5a:8f:d1:c2:4b:67:ee:bf:48:7c:98:3c:fe:20:78:
3c:b3:99:c6:b7:3e:8f:0e:e4:14:8b:38:48:70:c1:9f:9f:ed:
f0:50:bd:db:d6:ca:92:46:9b:e7:61:cc:c0:d9:8c:45:9f:f8:
d8:06:fb:e6:e8:8a:67:31:e5:63:54:4f:be:9e:c6:39:01:0a:
44:2c:e1:93:14:e5:40:ff:df:6c:1a:1d:ae:30:76:4e:4d:da:
a7:eb:95:41:bb:a2:6a:8a:e0:89:4e:17:45:5c:70:6c:3f:71:
0e:37:14:16:10:5c:ec:36:8a:b9:21:92:b6:cc:f9:85:55:77:
a1:b8:0d:fb:d0:81:d1:75:7b:87:c3:80:c9:d9:36:d9:f4:9d:
e9:72:f5:ec:bf:a1:fd:34:66:72:23:f6:a8:54:52:ba:44:b3:
c8:c3:a4:3e:2c:75:d9:bb:71:6f:d6:ca:3d:17:1c:cb:22:bf:
65:eb:5f:f7:85:58:67:e7:24:66:e7:15:25:e5:42:15:86:f1:
5b:03:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:40 2025 by rpki-client