Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/JyF5UhD9cVqjqquiR-hK995tZzw.roa
File: JyF5UhD9cVqjqquiR-hK995tZzw.roa (raw, json)
Hash identifier: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=
Subject key identifier: 27:21:79:52:10:FD:71:5A:A3:AA:AB:A2:47:E8:4A:F7:DE:6D:67:3C
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019427482CC88DA9134C3312D7DC5AB60BFC
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/JyF5UhD9cVqjqquiR-hK995tZzw.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207925
IP address blocks: 193.143.226.0/24 maxlen: 24
2a10:8700::/32 maxlen: 32
2a10:8703::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2c:c8:8d:a9:13:4c:33:12:d7:dc:5a:b6:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2721795210fd715aa3aaaba247e84af7de6d673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:54:00:af:9e:53:04:1f:dd:22:62:ef:91:
e9:34:aa:07:b9:33:df:aa:51:3e:6d:7c:e5:03:42:
52:a3:77:dc:17:fa:b1:08:f3:f5:1c:fc:60:90:aa:
cf:1a:59:67:7a:31:8c:2b:63:ca:60:3a:e7:51:0f:
e0:d8:ea:ba:9c:89:97:f8:41:3d:ed:23:43:6f:4d:
36:65:ba:af:80:e7:53:90:39:7f:44:a5:5c:da:c1:
bd:7a:32:15:c5:40:ef:98:cb:d5:59:b8:49:cd:c6:
ce:8d:74:02:b9:3d:5e:cc:ae:12:b8:65:0c:14:6c:
d0:e9:5f:c6:3f:8b:78:12:8a:a6:90:b8:05:0b:98:
83:a3:a3:4e:24:f8:d8:38:75:0a:59:17:02:6d:d2:
bc:2b:3d:b3:3c:e2:9a:32:dc:ff:ce:12:5d:97:ed:
ef:fa:5d:eb:54:6a:84:3d:1f:f9:92:c7:e8:17:30:
7a:ff:8e:59:80:de:48:ed:15:51:dc:ef:7d:69:97:
f0:89:08:43:d6:da:7f:da:78:8e:c3:c4:d8:f8:13:
45:40:00:6d:b1:86:59:2f:fa:9a:79:8f:f3:b7:78:
0a:8a:65:ee:51:40:29:2e:b0:2f:a1:24:8b:f9:eb:
da:1a:70:e1:b4:d5:d7:c5:22:3f:1b:d0:26:f4:fb:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:79:52:10:FD:71:5A:A3:AA:AB:A2:47:E8:4A:F7:DE:6D:67:3C
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/JyF5UhD9cVqjqquiR-hK995tZzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.226.0/24
IPv6:
2a10:8700::/32
2a10:8703::/32
Signature Algorithm: sha256WithRSAEncryption
61:76:94:4d:8b:61:fe:a2:bb:59:3e:b4:02:48:96:9c:03:c6:
6b:2d:62:97:29:b8:90:49:d3:60:a8:b8:11:37:9d:4d:07:8e:
9b:61:57:67:10:79:6b:db:e7:30:20:05:51:5c:a7:1c:39:49:
18:b6:bb:6b:d4:15:8a:3b:a6:04:8e:dd:01:54:35:f4:75:3d:
ab:77:ea:21:0f:67:f3:a2:48:f3:81:0d:7e:b0:08:8b:3e:cc:
ea:fd:59:fc:2d:34:5c:b5:23:d9:12:9c:20:c5:bf:7d:3a:e8:
a5:71:fe:53:5e:ee:b2:9b:02:86:c2:99:49:4b:a3:91:bf:4a:
32:69:1a:92:29:2b:1e:f7:fc:90:54:b4:c7:8a:81:48:6f:bd:
60:31:0b:b0:0b:ca:b6:80:13:59:20:bc:8d:2a:f8:01:ae:7c:
43:d1:f1:3c:02:0a:ab:0c:90:f9:75:ae:19:c9:01:a0:5a:5f:
ad:59:bf:bc:f7:94:87:a5:bf:81:9b:1c:78:3c:3d:6e:ce:ef:
29:09:e5:a7:35:b8:67:f0:69:26:97:76:0b:7c:c7:a0:d8:0f:
8f:70:db:5f:3a:ae:0f:ca:65:6f:3f:eb:35:01:e6:54:af:3c:
bf:b4:11:52:36:16:d6:8f:e8:df:85:66:03:f6:0b:60:c2:a5:
5c:87:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:37 2025 by rpki-client