Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JuqZOgUOvu6EEROsDS3UPr9wkgQ.roa
File: JuqZOgUOvu6EEROsDS3UPr9wkgQ.roa (raw, json)
Hash identifier: OYTZSwncUbXdSjy4QAvPwOf7RTfVtM1zJWP6i8p9ydg=
Subject key identifier: 26:EA:99:3A:05:0E:BE:EE:84:11:13:AC:0D:2D:D4:3E:BF:70:92:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACE6AE187DCAFEAE285E4E64980DA0F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JuqZOgUOvu6EEROsDS3UPr9wkgQ.roa
Signing time: Tue 28 Jan 2025 12:33:06 +0000
ROA not before: Tue 28 Jan 2025 12:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400950
IP address blocks: 212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e6:ae:18:7d:ca:fe:ae:28:5e:4e:64:98:0d:a0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ea993a050ebeee841113ac0d2dd43ebf709204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:ff:6e:85:aa:5c:24:95:b7:5a:aa:05:31:
89:ee:8c:e5:e5:26:da:e8:90:77:1f:2a:bc:1d:65:
3b:4d:68:40:76:f6:ee:c6:46:37:ca:d3:d0:78:36:
9e:79:a5:1b:d1:da:fa:70:28:0c:b3:4e:12:ba:c8:
99:29:fa:d0:08:bf:87:04:45:43:46:67:99:fa:c1:
f1:29:72:50:d6:65:e1:76:60:d0:07:45:ee:fc:a4:
64:4b:bc:95:47:ce:95:6a:59:65:4e:f8:6f:33:ea:
70:fa:d9:e5:99:86:65:11:90:cd:92:2e:68:81:eb:
9f:ea:3a:50:cb:1f:89:79:e2:e3:68:8e:1d:41:ba:
b3:78:a4:ff:b9:e3:9a:b6:1d:d3:a3:a7:4f:3e:55:
c8:cf:27:d5:e3:ef:df:bd:f2:3a:b4:57:35:17:07:
da:2e:91:43:3e:d4:bf:63:ae:ee:dd:a9:a0:a2:29:
d6:9d:2b:e2:23:17:42:11:85:48:13:d5:98:f3:ca:
61:e5:8e:9f:ed:6e:a4:ad:18:08:56:d3:77:06:f8:
a9:a8:20:46:df:4c:34:67:76:b1:4a:77:59:04:a8:
83:21:61:f3:2a:73:94:73:43:70:10:f6:b4:cd:11:
20:00:10:ff:ad:7f:28:96:16:68:27:a9:df:f7:78:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:99:3A:05:0E:BE:EE:84:11:13:AC:0D:2D:D4:3E:BF:70:92:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JuqZOgUOvu6EEROsDS3UPr9wkgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8e:6b:8c:44:53:32:9f:75:0e:36:a5:57:a4:83:96:cf:4e:
bd:cd:a5:0c:1f:f8:d1:a8:86:e8:73:2d:b7:c9:dd:28:89:92:
ca:6b:61:ca:b9:3d:98:a5:1d:d9:9d:fa:64:f9:26:5c:ad:01:
97:95:86:43:d7:ce:1b:27:3e:34:e1:eb:a8:34:a9:67:be:56:
68:c5:1a:e0:4b:42:b0:0d:c4:3d:1d:eb:50:64:f1:86:36:cd:
2b:3f:7d:f7:11:72:7d:2f:04:24:9c:91:84:1b:01:b5:38:7b:
6a:44:7b:3e:33:07:c6:2a:dd:ec:d8:c7:19:36:84:5f:54:71:
d9:a4:74:4f:09:91:a2:a2:bb:d6:68:68:60:08:a9:98:c3:62:
ec:cf:d0:fc:63:a1:53:d7:ec:8a:2e:65:42:a8:71:12:29:4f:
ca:d8:39:fa:00:2f:96:d3:1d:e5:da:84:b7:7c:00:c0:29:e8:
d0:88:9c:61:0a:e8:94:85:20:e1:fe:25:87:20:2c:87:17:1a:
65:a5:74:56:82:08:d4:88:51:e4:b5:30:9d:5e:af:a3:47:06:
5f:98:5f:54:40:62:2d:85:81:e8:2b:37:46:b2:a3:f4:b5:a8:
43:7b:bf:68:b3:30:51:dc:e6:be:cc:b4:1d:dd:19:fb:f0:88:
ed:d9:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client