Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/joe5pZwVwibh0SdF2PsA-ibLXSs.roa
File: joe5pZwVwibh0SdF2PsA-ibLXSs.roa (raw, json)
Hash identifier: kolEql5tzzaraNXgVLIhDCRD/4roZFIN0wmtLXS0EH4=
Subject key identifier: 8E:87:B9:A5:9C:15:C2:26:E1:D1:27:45:D8:FB:00:FA:26:CB:5D:2B
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0194282682E94036994D6FD16882C5C4468A
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/joe5pZwVwibh0SdF2PsA-ibLXSs.roa
Signing time: Thu 02 Jan 2025 17:53:20 +0000
ROA not before: Thu 02 Jan 2025 17:53:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 185.143.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:82:e9:40:36:99:4d:6f:d1:68:82:c5:c4:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jan 2 17:53:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e87b9a59c15c226e1d12745d8fb00fa26cb5d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:c3:fa:95:af:f8:ac:c9:d2:73:65:ec:1c:
46:ec:2b:53:ae:ff:f3:1a:41:05:ff:36:e3:ba:1c:
53:96:ba:71:df:89:5a:11:31:c8:81:c0:90:d5:d3:
3f:75:15:d0:64:6c:d4:10:95:f0:94:52:f7:bb:c7:
10:51:2a:a6:99:67:23:ed:ed:15:5f:69:82:b0:f8:
1a:19:56:fd:76:78:13:83:3e:e1:bc:8c:83:fa:fe:
d1:d9:ae:34:98:29:ad:57:85:ba:ac:58:95:fb:be:
3a:7b:62:1b:41:43:01:64:a2:7f:87:01:24:b2:0e:
60:88:dc:89:b0:46:e6:7b:2c:79:b1:ea:ec:3e:1a:
de:72:c9:1e:bf:e4:82:8e:81:38:55:b3:a6:be:0a:
b4:01:db:65:df:66:ab:df:9b:9d:31:86:32:ee:11:
1a:61:4b:94:15:6d:cd:de:fe:84:a3:60:3d:6d:63:
96:a1:cf:e0:44:5d:de:47:7d:05:81:26:2e:0a:98:
62:f0:ea:20:5c:73:d9:41:2d:aa:29:1c:48:65:43:
82:4c:1a:bd:79:48:b0:3f:e8:c3:a4:82:2d:41:59:
6f:3c:99:10:f1:8f:ff:5a:a4:11:32:da:12:55:60:
a8:4b:83:8b:a3:fd:bf:b7:2b:4d:a0:5c:5d:6d:54:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:B9:A5:9C:15:C2:26:E1:D1:27:45:D8:FB:00:FA:26:CB:5D:2B
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/joe5pZwVwibh0SdF2PsA-ibLXSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b3:89:f2:c4:cb:da:8b:67:03:41:35:34:2d:2a:87:b2:80:
98:c2:81:82:5b:ac:d2:7f:74:12:2a:ff:23:c2:06:8f:f3:90:
dd:d6:8a:96:31:2d:9d:d9:d2:50:f6:62:fb:77:6a:ca:2e:0f:
9c:b2:64:0b:5a:71:f6:72:b5:05:83:52:fc:9b:5f:dc:8c:e9:
77:25:42:39:44:eb:d9:31:5b:f1:17:49:6e:8b:92:2a:08:fb:
b8:b7:8d:ee:a6:c9:c5:22:32:15:09:70:04:95:b2:10:19:ce:
8d:39:f2:95:17:55:6c:75:a3:28:6c:e8:cc:ed:2d:ae:5d:7c:
e1:ea:64:54:10:56:9d:19:ac:36:0d:35:2b:5f:1a:0c:d2:a3:
c7:39:b1:9b:21:3f:0e:c9:58:b8:a2:b4:09:0e:a8:2f:fd:f6:
f0:a5:39:13:47:8e:72:6f:f3:84:82:d0:69:dd:e4:fb:4e:ee:
2e:25:3d:57:e1:b3:a9:ce:a1:71:e3:81:1a:f7:3b:ef:c3:d9:
85:8f:b3:58:ea:3f:81:98:bc:e6:fd:98:26:b0:32:c7:ae:7b:
7e:d1:b6:6e:76:2e:fe:c8:29:94:7a:62:5d:c6:3f:aa:cb:ff:
37:0c:b7:45:82:e9:dd:ad:17:b2:b6:3d:f9:0b:a5:09:61:c4:
8b:9e:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:23 2025 by rpki-client