Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jq7aDHee1eFbqLFB-__4rlJKjdE.roa
File: Jq7aDHee1eFbqLFB-__4rlJKjdE.roa (raw, json)
Hash identifier: raY+ZvfUYrB8JTOY6lsDiterIgjV33M4HZVFl619/yE=
Subject key identifier: 26:AE:DA:0C:77:9E:D5:E1:5B:A8:B1:41:FB:FF:F8:AE:52:4A:8D:D1
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5C6117C6413C81D2D23E47CDC0C4F
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jq7aDHee1eFbqLFB-__4rlJKjdE.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 85.209.8.0/24 maxlen: 24
92.246.76.0/24 maxlen: 24
185.68.22.0/24 maxlen: 24
185.196.117.0/24 maxlen: 24
213.226.124.0/24 maxlen: 24
213.226.125.0/24 maxlen: 24
213.226.126.0/24 maxlen: 24
213.226.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c6:11:7c:64:13:c8:1d:2d:23:e4:7c:dc:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26aeda0c779ed5e15ba8b141fbfff8ae524a8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:45:ca:8e:ec:80:a4:66:bc:3d:f1:44:7f:
ff:3a:13:f6:37:6a:4c:90:24:90:6d:e9:ff:4f:7e:
83:cb:c1:b6:36:da:23:80:2d:f4:25:95:44:dc:23:
f3:c1:6e:e0:f8:0c:e1:6f:92:74:c8:90:9d:89:92:
43:92:82:6b:0f:0a:d3:7a:2d:c8:94:41:ab:8c:42:
ee:f2:bf:42:0e:28:05:11:f1:94:e1:84:79:e8:07:
82:4f:62:81:98:77:0f:72:af:f6:8d:74:0b:41:bf:
9b:64:d9:65:89:f4:e1:f0:a9:66:c1:b7:e0:b0:2c:
72:9d:5a:62:57:3c:bb:7c:b1:f5:73:97:69:47:bb:
61:91:ae:0c:c9:6a:28:47:1e:ff:e6:57:23:fa:2c:
0f:29:ec:c6:51:35:f8:84:42:a4:7f:1e:12:d9:ae:
0a:1b:22:b3:01:76:a1:91:c4:27:3b:d8:0e:9f:af:
16:05:db:dc:c6:7e:70:ea:31:ba:52:21:00:d5:db:
48:9a:3a:a4:3e:8a:63:ee:94:88:3e:09:19:8e:c9:
fa:a6:de:78:dd:b4:ec:fd:be:5a:c3:49:34:0d:40:
13:a7:7a:42:a4:f3:c2:5e:0e:9c:50:58:9e:b9:c1:
34:b1:f7:69:b2:8e:a1:10:55:d2:d9:58:33:aa:a3:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:DA:0C:77:9E:D5:E1:5B:A8:B1:41:FB:FF:F8:AE:52:4A:8D:D1
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Jq7aDHee1eFbqLFB-__4rlJKjdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.8.0/24
92.246.76.0/24
185.68.22.0/24
185.196.117.0/24
213.226.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:24:03:06:9b:24:82:84:96:3c:39:73:eb:17:51:33:cc:77:
31:9a:2c:7c:ae:43:c1:59:54:1a:e8:85:80:94:f6:30:29:60:
61:7a:6b:33:25:fc:68:07:70:8a:8c:d8:0b:9f:3a:28:3c:34:
1b:a2:3f:44:e1:3b:9b:99:73:48:67:8d:97:24:11:5b:43:70:
f8:cc:c3:45:66:fd:00:c0:a9:49:0f:50:52:a8:b8:1e:03:82:
a1:b0:d3:a3:c3:70:8d:71:f7:a2:a1:18:ed:96:90:44:36:c7:
1e:6c:f6:33:d5:24:c3:5b:f5:99:47:13:59:5d:3f:35:44:bb:
fe:00:3b:56:35:b8:0d:ed:81:59:fd:b7:07:ad:aa:90:6f:02:
4f:ab:6a:da:cf:f1:22:71:20:62:eb:0a:ce:f4:6a:47:b1:5c:
60:57:7c:2e:f1:a5:a5:26:51:0d:a8:3d:1d:ef:3c:9b:ef:3d:
ba:be:bc:4b:24:f3:1f:40:e7:4e:22:78:fc:a2:9b:9e:e8:d1:
83:17:59:20:5d:23:c8:2f:f1:4e:0c:a0:b5:4f:b9:8d:2b:18:
db:04:98:2c:1f:15:9e:5a:cd:1c:56:9b:97:98:07:50:4a:77:
d4:6f:16:d8:33:5c:ee:23:99:67:f4:21:e7:34:f0:6d:b9:5e:
22:f6:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:58:55 2025 by rpki-client