Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jkSaoSqxr3AfWSkEDuquA5qWUtg.roa
File: jkSaoSqxr3AfWSkEDuquA5qWUtg.roa (raw, json)
Hash identifier: IOBZRgZYiqhC3MV72KRMuvH8sw6w9aklYs8LdQQN2qY=
Subject key identifier: 8E:44:9A:A1:2A:B1:AF:70:1F:59:29:04:0E:EA:AE:03:9A:96:52:D8
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B6B2AA6052C7F995B90312C2B920
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jkSaoSqxr3AfWSkEDuquA5qWUtg.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198952
IP address blocks: 90.85.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b6:b2:aa:60:52:c7:f9:95:b9:03:12:c2:b9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e449aa12ab1af701f5929040eeaae039a9652d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:20:d4:b2:94:ab:40:54:3e:4b:9e:1a:c1:
4e:22:0e:de:db:09:0b:28:fd:8b:d8:fb:49:b0:de:
00:25:6a:0a:da:44:c8:44:d5:63:54:c7:46:8b:30:
a1:cd:a3:cd:32:a0:04:fd:70:cb:db:d4:4e:77:99:
c2:fb:5d:40:b2:3b:fb:bf:1c:6d:f6:61:26:22:05:
fe:f0:b7:f9:d6:d8:22:f7:cd:42:63:d1:06:5c:2a:
3e:8b:6b:4e:9c:2d:e8:81:24:d5:84:9c:13:4d:26:
82:df:4d:f7:46:b8:95:ae:dc:73:07:82:10:04:ef:
a0:0a:cc:89:3f:aa:4a:5c:b8:ad:e2:bc:3f:25:cd:
ee:fd:30:5e:36:a4:c9:b6:f5:cc:97:00:a9:c0:ca:
3c:10:b5:bc:02:fb:39:b4:4c:da:a3:2a:c6:bf:27:
a6:5a:85:65:1e:94:51:c8:c6:bb:e7:bd:de:90:86:
1b:0b:89:55:5d:16:96:df:54:8b:aa:30:a0:f0:88:
cf:ee:2e:d1:56:3a:9d:a3:ee:c8:ae:1b:6e:b6:1c:
93:a4:f9:6f:0a:8f:7f:a8:a9:96:83:be:41:21:96:
cd:75:1a:93:7f:82:20:94:6f:de:2d:a9:43:a7:6b:
5f:0e:7e:eb:bf:8e:14:e3:2b:23:04:04:16:94:e4:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:9A:A1:2A:B1:AF:70:1F:59:29:04:0E:EA:AE:03:9A:96:52:D8
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jkSaoSqxr3AfWSkEDuquA5qWUtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.85.2.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e9:73:f8:8c:a4:88:e9:54:28:b2:9d:c5:74:02:10:c7:77:
25:fe:62:b2:74:70:eb:b1:e7:72:00:bd:86:1d:cd:c2:b0:ac:
a0:ff:3f:c2:64:26:24:b5:3b:5e:c9:c6:80:9a:25:13:a7:f3:
80:21:60:8c:0c:d7:78:d6:4e:f0:04:5e:76:0f:20:2d:39:a4:
08:fd:cd:5f:e1:5b:a1:f8:eb:04:04:ee:ef:00:63:c3:af:d8:
e6:ee:6a:f0:5d:10:87:52:00:20:83:96:f8:c2:55:46:1c:2e:
18:81:13:73:b2:fa:07:22:d8:5c:e8:c3:f7:73:37:ad:2a:9f:
44:8b:8d:b8:a8:87:0b:1a:93:83:7e:8e:03:49:7c:f5:88:6c:
9c:3c:3d:e5:49:66:78:33:67:04:09:ed:7d:e9:05:14:62:52:
6d:43:c6:4e:c1:67:49:35:61:3e:28:bd:18:49:ce:ce:00:12:
17:10:8a:aa:29:a7:c7:0f:8b:c3:95:7d:e1:b3:91:03:cc:60:
29:51:8d:3a:2a:b8:ae:8e:5e:c2:36:1e:c3:b9:31:13:8a:59:
d1:ce:c3:e6:0a:32:44:4d:cc:2d:c5:b2:af:18:40:4d:84:01:
91:23:bf:a1:67:d8:cb:e9:65:d9:24:55:bb:f7:af:e4:5b:2b:
26:2c:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:14 2025 by rpki-client