Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/jx1FgPOkBbayLbn8i9fFX-3vhJI.roa
File: jx1FgPOkBbayLbn8i9fFX-3vhJI.roa (raw, json)
Hash identifier: du1QA1Pa5BxqPJI19sJCDEas0RaG543HI6Un8BqtN7g=
Subject key identifier: 8F:1D:45:80:F3:A4:05:B6:B2:2D:B9:FC:8B:D7:C5:5F:ED:EF:84:92
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 0195FD48ED307E36F882452DD90883C90B7B
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/jx1FgPOkBbayLbn8i9fFX-3vhJI.roa
Signing time: Thu 03 Apr 2025 20:12:49 +0000
ROA not before: Thu 03 Apr 2025 20:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.17.96.0/21 maxlen: 24
193.17.104.0/23 maxlen: 24
193.17.106.0/24 maxlen: 24
193.17.108.0/23 maxlen: 24
193.17.110.0/24 maxlen: 24
193.17.112.0/23 maxlen: 24
193.17.116.0/23 maxlen: 24
193.17.120.0/23 maxlen: 24
193.17.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fd:48:ed:30:7e:36:f8:82:45:2d:d9:08:83:c9:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Apr 3 20:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1d4580f3a405b6b22db9fc8bd7c55fedef8492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:6f:22:03:be:ce:88:e2:9d:2b:d5:18:d3:
54:06:ab:37:9d:51:3e:89:e0:5f:30:0f:f5:ab:80:
b3:76:c9:17:8c:13:ab:da:14:d7:67:2d:0b:af:ff:
cd:ee:2d:b9:39:16:4f:ec:31:7c:79:18:b2:43:72:
a2:79:17:e6:48:08:b4:f4:28:10:bd:23:43:b6:c4:
5c:ed:ef:38:83:a0:53:54:df:06:5a:8e:73:b5:d2:
43:e1:25:e6:27:30:01:4b:b9:44:bc:9d:40:93:ff:
97:f3:e3:36:d5:8c:c3:99:3d:81:ac:54:c3:db:71:
75:0a:dc:54:15:5a:09:e2:c8:d4:29:d0:6a:73:03:
0d:12:f7:87:d9:0a:01:20:c7:04:81:27:32:68:eb:
86:87:e8:b8:7d:b6:22:df:c7:ea:0a:87:ce:7b:6a:
02:9f:dc:44:66:8f:94:ce:6c:42:ce:6c:9c:f1:cc:
55:17:ea:2b:05:72:66:8a:b9:60:79:b1:2b:85:0f:
20:03:6c:cd:89:70:07:03:d3:20:28:8b:13:89:39:
68:57:5d:91:da:56:55:9b:e8:14:7d:34:09:08:e8:
dd:a0:d6:49:81:55:71:07:f0:f5:7b:a0:87:a2:94:
ac:58:32:b8:09:82:47:c4:60:f4:c4:12:08:84:c2:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:45:80:F3:A4:05:B6:B2:2D:B9:FC:8B:D7:C5:5F:ED:EF:84:92
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/jx1FgPOkBbayLbn8i9fFX-3vhJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0-193.17.106.255
193.17.108.0-193.17.110.255
193.17.112.0/23
193.17.116.0/23
193.17.120.0/23
193.17.124.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c6:cd:a9:c1:8e:7b:dc:f6:52:1b:58:cc:89:60:0a:68:83:
3c:60:19:97:0b:20:7f:6e:68:49:28:60:fc:f6:43:e5:c7:00:
17:57:65:92:41:8c:38:45:e2:8f:a3:00:08:8b:9a:b0:b9:9a:
83:99:62:a0:39:fe:5a:f3:40:1d:47:78:52:60:5b:a3:5e:ae:
03:cf:95:91:12:63:48:26:be:7c:94:75:a2:84:30:5d:10:6e:
02:9f:ed:f9:d6:5b:e9:89:be:26:00:4a:fd:18:33:5c:97:3f:
61:32:a5:63:5c:ef:53:c1:8d:40:72:7e:e1:10:63:62:85:36:
8c:62:3d:49:3b:e0:d4:4b:21:07:a1:91:03:c9:15:9d:9e:cf:
1f:de:ce:b9:c5:c6:6d:e7:a9:80:a4:54:3a:d2:b7:e4:38:5d:
a1:ef:27:97:0b:39:96:0f:27:71:85:6c:c5:f2:b9:09:7e:f6:
57:aa:90:e8:24:8a:a0:f4:6e:b0:1e:0e:78:69:f1:fa:3a:52:
ae:5e:96:ca:c0:3f:83:3a:91:c8:c7:68:fe:a7:fd:e4:81:25:
77:88:0b:20:c3:e6:45:d1:f6:98:b8:d7:40:2c:e6:a0:2e:8f:
c4:3f:3b:01:fa:70:32:b4:e9:5a:40:03:dc:e6:8a:86:d1:b7:
3c:56:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:43:37 2025 by rpki-client