Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iJ0DWK1t0Wje5QA119bRgvqMf5w.roa
File: iJ0DWK1t0Wje5QA119bRgvqMf5w.roa (raw, json)
Hash identifier: 2NyV+K2mH3hr3H8biA9S+96mSIwlGt9h9hIZDjWCZkI=
Subject key identifier: 88:9D:03:58:AD:6D:D1:68:DE:E5:00:35:D7:D6:D1:82:FA:8C:7F:9C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274849DB4AF783AE9A976A7951AFE095
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iJ0DWK1t0Wje5QA119bRgvqMf5w.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206930
IP address blocks: 194.15.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:49:db:4a:f7:83:ae:9a:97:6a:79:51:af:e0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=889d0358ad6dd168dee50035d7d6d182fa8c7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:f5:22:28:d7:a8:88:cb:98:98:b1:7d:ad:
8f:d1:b6:cc:dd:62:2d:13:73:ee:89:19:06:42:d6:
bd:d8:da:cc:67:2d:68:31:20:32:00:c4:da:eb:f6:
86:fe:57:30:da:56:eb:96:0b:f5:8f:63:67:4d:8d:
a2:ec:82:2f:d1:86:cb:46:02:aa:61:24:f7:91:39:
57:c4:b1:47:2f:08:e7:b5:49:7a:fe:e2:99:e9:c7:
7e:18:9b:a7:59:f6:a2:ba:49:f9:76:ee:d1:5a:3f:
db:6c:be:33:86:d9:fa:79:54:16:10:7b:92:aa:33:
3d:58:57:6f:37:d5:76:c7:a2:27:70:40:b9:72:4d:
92:49:0b:9e:5d:21:63:e8:bd:1e:5e:fe:41:03:b1:
a8:eb:88:17:1e:28:4f:ad:06:cc:9f:ae:cb:5a:f8:
7e:04:89:b9:f4:b6:50:ff:ca:1e:ce:f4:86:7d:12:
78:ef:e1:57:89:49:d5:21:03:c8:05:57:71:59:38:
44:f3:1f:65:7f:b3:13:23:f2:8c:7e:2c:0e:60:52:
c3:06:9a:bb:87:5b:9b:bb:ba:7d:fa:1a:4a:3d:b6:
96:fc:bc:a5:a6:db:a6:0f:40:1c:9b:60:f4:2c:ee:
f1:39:48:c2:35:99:b5:52:5c:eb:d9:2b:70:c6:75:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:03:58:AD:6D:D1:68:DE:E5:00:35:D7:D6:D1:82:FA:8C:7F:9C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iJ0DWK1t0Wje5QA119bRgvqMf5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.140.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f0:02:36:05:8b:10:bc:3a:82:c6:f7:0f:ba:fd:f6:21:9c:
17:37:e3:8d:2a:df:de:cd:66:88:d4:23:c4:b6:34:41:3d:53:
d1:5a:87:4e:fb:5f:c0:bf:61:79:1c:c4:8b:e6:e5:ec:42:1e:
96:f2:55:d4:26:20:5b:95:0d:e3:ef:c0:1f:0d:70:64:59:7f:
76:c6:78:7e:8f:ab:9a:ee:4e:27:68:c1:c6:af:c5:33:21:21:
74:95:3f:2c:45:7b:5f:f6:27:14:2a:52:33:91:7b:75:df:8e:
0b:c8:6d:e8:7e:7e:f0:cd:38:8f:ae:d6:cc:ef:de:4f:36:8a:
f7:66:ae:7c:70:77:69:bb:2f:cb:06:d5:ca:f3:61:92:c7:8a:
09:86:3a:30:1e:ba:cb:e8:43:06:69:91:f8:af:d1:3e:db:8c:
5f:5f:81:9a:55:c0:14:ff:4a:6a:89:11:fe:2c:08:52:bc:31:
17:c9:93:58:50:4e:92:5f:23:90:de:64:89:11:18:bc:82:b9:
7b:be:4d:b6:95:7b:43:fe:cf:a7:f2:a3:25:38:87:84:6d:db:
bb:3f:02:c2:b7:3f:d4:d5:ed:3c:ca:16:12:f4:61:ae:74:b4:
fe:1e:40:fb:a0:dd:4d:80:ef:b4:54:d3:8b:91:7b:44:96:92:
62:bf:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:20 2025 by rpki-client