Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa
File: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (raw, json)
Hash identifier: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=
Subject key identifier: 24:5C:F5:38:CB:72:60:4D:1B:76:B3:E9:03:35:80:1F:1A:0D:7E:BD
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01942444BC02F98AFD30AA64E960B0FBE81A
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48847
IP address blocks: 185.127.180.0/24 maxlen: 24
185.127.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bc:02:f9:8a:fd:30:aa:64:e9:60:b0:fb:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=245cf538cb72604d1b76b3e90335801f1a0d7ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:1f:b4:58:7a:67:4d:b6:b9:bb:de:3b:44:
71:ab:68:c1:f4:52:35:78:cc:c4:fa:37:29:3f:f1:
d2:c8:78:71:dd:dc:3d:eb:e0:69:44:07:fa:78:99:
cd:d7:ba:e8:9f:38:a4:78:69:12:69:0f:ed:70:2e:
a6:f6:6c:3b:09:3a:12:47:8c:fb:c1:0e:e4:59:81:
47:0a:c3:ff:21:8a:22:55:45:77:00:81:8a:10:8d:
cc:7f:de:43:74:b1:c4:ab:99:de:2d:fd:94:b5:bc:
79:d9:f7:20:da:d6:db:4a:44:38:c3:09:20:ee:62:
b9:d5:ae:8f:d1:9d:fd:3d:e7:2e:a5:39:a5:96:c8:
7f:12:27:80:90:10:8b:65:65:ab:d3:4c:b1:e4:1a:
e9:41:1a:dc:c6:01:9d:e4:b9:2f:12:fd:b8:7b:f0:
f6:85:8b:0f:4f:d7:2e:20:cf:79:f3:5c:d1:4d:02:
dd:2a:d1:07:dd:c3:bc:19:9a:38:59:97:25:84:9f:
16:d5:cb:d8:11:96:02:e0:dd:9e:c0:2e:cf:b9:ee:
8e:3a:85:6e:eb:8e:87:cd:82:ab:88:66:76:f0:09:
c7:c5:2d:88:e9:33:ac:0f:24:5a:9a:21:a0:d3:dc:
f6:c8:b0:f7:39:7a:31:29:c2:11:46:cb:4a:78:a3:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:F5:38:CB:72:60:4D:1B:76:B3:E9:03:35:80:1F:1A:0D:7E:BD
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:3c:15:19:29:e2:9b:d5:75:e4:2c:94:61:3c:9e:2c:b5:c2:
0e:55:31:40:7e:df:9c:13:27:17:8b:a9:a7:bc:8e:c9:9c:54:
10:d9:d6:c6:6c:73:65:59:f3:a2:17:c6:df:ee:e1:52:c1:99:
6f:6b:b4:9b:3f:4b:7a:18:41:6d:16:ab:2e:32:fb:8f:3c:6f:
2e:03:dc:f7:a6:8a:12:18:ed:c1:eb:4a:43:aa:69:95:2e:5e:
0c:4c:47:89:e2:82:81:fb:8c:39:2c:07:96:98:02:6e:71:44:
c9:99:f3:05:d7:05:74:f8:22:e0:2d:ca:a6:d8:0f:9a:37:92:
e4:a6:e1:50:f0:17:4b:3a:e5:07:76:a2:80:81:3d:33:2c:9e:
06:13:82:8a:65:57:30:ab:fa:48:a2:d1:0e:7b:87:af:6d:a8:
26:bf:a4:89:39:4a:c7:89:b1:5c:c9:17:11:7d:1f:c5:ae:c6:
1e:06:49:31:c0:bb:60:5b:ad:17:9a:51:b8:d6:c7:25:a0:79:
bd:4f:75:b5:4f:c7:1d:f1:27:25:69:fa:23:06:36:f2:c1:94:
f3:fe:78:e4:f8:01:98:89:bd:e4:fa:0b:94:2d:09:28:86:8f:
85:14:3a:5d:05:1e:a0:e0:78:8e:29:81:ab:3b:9e:8d:9f:00:
fa:73:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:26:01 2025 by rpki-client