Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jFBxrG8uVzUk479hTMEt3q3s7UE.roa
File: jFBxrG8uVzUk479hTMEt3q3s7UE.roa (raw, json)
Hash identifier: HU1MnjvSi0X+Vxy1aJmnzTabs+4tjbiNEMgeCOVzkqA=
Subject key identifier: 8C:50:71:AC:6F:2E:57:35:24:E3:BF:61:4C:C1:2D:DE:AD:EC:ED:41
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A3316399F82C46957C6748D601834
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jFBxrG8uVzUk479hTMEt3q3s7UE.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209251
IP address blocks: 195.168.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:16:39:9f:82:c4:69:57:c6:74:8d:60:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5071ac6f2e573524e3bf614cc12ddeadeced41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:ae:b7:ae:d0:7d:7d:b7:50:c3:1a:c2:06:
a4:98:b6:0a:5d:d1:df:bf:d4:c3:74:86:c3:b4:17:
23:d9:5a:97:aa:05:99:9d:74:09:bb:7a:9b:2e:d1:
16:07:c8:8d:6c:e4:9e:1d:ff:7b:79:e9:32:d4:5a:
ae:71:bb:73:f0:c6:35:10:a7:dd:4b:ec:08:a9:db:
3d:98:3c:d7:77:aa:cf:0e:df:b6:df:4c:17:c7:32:
0d:46:84:d6:e5:bc:29:f2:98:ff:9b:f2:7f:06:66:
0c:dc:dc:f6:17:54:94:6d:f3:92:bc:bc:a3:15:70:
b2:fd:63:ee:30:c3:86:cb:20:2b:71:d3:3d:05:73:
32:e4:f3:5b:40:26:a6:3f:eb:8b:78:cc:3a:ab:cd:
bc:ce:2c:ac:c3:55:3a:46:ee:34:df:5e:30:d8:bb:
1a:b2:95:88:6f:3c:18:bf:6f:d7:63:e5:c0:b4:0b:
7d:b4:71:f0:30:92:7c:71:7d:b3:5d:fc:fc:34:e2:
1f:20:1d:fc:af:a7:c1:d0:1b:69:23:12:d1:97:f5:
91:2d:3a:70:2d:9b:5b:93:fa:59:97:47:2b:ff:14:
8b:a8:4c:2f:ff:2d:8a:65:57:20:30:67:63:ec:11:
f3:d6:04:66:d0:92:6f:db:e0:d5:ad:4c:24:81:1c:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:71:AC:6F:2E:57:35:24:E3:BF:61:4C:C1:2D:DE:AD:EC:ED:41
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jFBxrG8uVzUk479hTMEt3q3s7UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.218.0/24
Signature Algorithm: sha256WithRSAEncryption
36:86:41:89:6f:98:59:62:6d:8a:37:94:9b:99:2a:ab:03:45:
29:21:59:50:15:dc:26:cf:f1:d4:15:3a:74:1b:f7:4c:4a:c3:
70:78:da:52:7b:e1:89:ef:41:fd:9d:e7:f7:f2:75:36:ed:6f:
b0:98:c6:30:4f:71:3a:14:24:2e:40:65:a2:f2:5b:26:e0:95:
e6:d3:80:d2:41:cb:75:6c:30:20:73:a0:30:34:8d:e8:e9:06:
5d:3d:71:9f:4f:4e:08:b4:d9:25:7c:8f:45:8e:87:f2:aa:65:
59:04:f9:74:5c:87:df:b7:1c:07:9f:88:64:3f:2c:5c:02:83:
2e:16:8b:43:7f:d4:15:45:62:25:28:d0:35:e8:61:e1:6c:ae:
d5:94:92:0c:93:dd:48:ca:ec:5b:8e:47:84:a0:72:b2:db:f7:
24:99:78:26:13:b1:f4:d8:8a:54:ab:b2:cc:7d:47:83:78:09:
c3:07:9e:69:aa:0e:25:ba:0a:38:3c:05:01:47:14:fb:a9:61:
57:ea:47:36:fd:b3:b5:17:2d:a3:c0:14:9a:22:f3:81:05:11:
8f:4b:14:7f:07:32:6c:77:76:dd:ec:37:a9:f8:f0:b2:40:e4:
85:d6:9f:33:58:15:33:09:54:ee:4d:57:6a:4a:9e:da:0d:1a:
e4:cf:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:07 2025 by rpki-client