Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JMCI0aEzBVM1jWfn255KjJDJelM.roa
File: JMCI0aEzBVM1jWfn255KjJDJelM.roa (raw, json)
Hash identifier: YWRXg4+87GwCCKI2ohmFXN5ykd4hF8zJPIZf1SgOsvE=
Subject key identifier: 24:C0:88:D1:A1:33:05:53:35:8D:67:E7:DB:9E:4A:8C:90:C9:7A:53
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AE2A1D96E91234FC5A96BC6AD19C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JMCI0aEzBVM1jWfn255KjJDJelM.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60149
IP address blocks: 86.107.73.0/24 maxlen: 24
93.113.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ae:2a:1d:96:e9:12:34:fc:5a:96:bc:6a:d1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c088d1a1330553358d67e7db9e4a8c90c97a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:14:c3:d3:ef:5c:dd:a7:02:20:ea:20:f4:
0e:45:ea:cc:4e:77:b3:5e:22:5e:fe:bb:0f:c0:99:
95:15:21:71:13:b5:5c:57:18:9b:7f:11:2f:5b:23:
95:19:46:3e:9f:ad:17:09:a8:04:fc:24:9f:f0:88:
b7:2e:60:17:a6:33:55:7b:33:3f:53:0e:c5:25:30:
c0:ce:af:91:db:1c:9f:6f:2a:9a:28:9e:70:cd:17:
95:1f:cb:96:16:9f:ab:9f:47:74:09:23:e5:12:99:
c0:61:37:22:4f:44:90:2e:aa:d0:e0:95:73:61:0d:
4c:b2:86:2a:83:f5:bc:b9:a7:98:d1:b6:f6:6f:78:
e9:30:10:4a:4f:4c:d9:32:bf:5f:0c:05:c3:97:84:
18:95:25:da:42:4b:97:c8:bc:ae:a9:52:a7:f6:01:
57:99:5f:9e:2a:64:21:3d:64:04:62:78:da:b4:64:
b1:d2:dd:78:88:0d:b7:c1:44:7f:ca:c0:11:5d:8c:
53:ad:f3:49:af:93:4d:da:cc:c8:0c:b7:c1:92:8e:
68:7f:48:e2:28:10:31:d9:b0:bf:2c:b1:25:8b:56:
ad:b9:42:20:fc:05:8b:78:b7:a3:7f:86:13:ab:72:
bd:b8:c0:55:96:9a:c6:62:9a:63:13:b3:39:e6:92:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:88:D1:A1:33:05:53:35:8D:67:E7:DB:9E:4A:8C:90:C9:7A:53
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JMCI0aEzBVM1jWfn255KjJDJelM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.73.0/24
93.113.126.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b7:5b:04:13:5a:f1:62:2a:a7:a2:cf:ad:40:04:5e:dc:87:
ad:78:28:21:ff:27:2f:1d:4b:81:71:50:8b:d8:b8:49:8c:b8:
cb:b3:00:8d:68:d1:8d:11:50:1e:4b:78:dc:83:3a:a1:e4:1f:
4c:22:8a:73:ee:5e:ab:0e:1e:ac:a1:64:a5:b6:fb:b9:93:44:
f7:57:09:5e:0f:3c:a1:ad:45:21:eb:73:a7:99:8a:b3:b1:d6:
46:7e:2d:5d:80:2d:e3:95:fe:31:1f:6e:32:cd:c0:a7:86:de:
1c:06:c5:c6:5a:cc:6b:f4:c4:7e:df:36:0c:d7:73:d6:90:98:
1b:00:a9:27:5a:91:e3:b8:a4:ca:f2:19:6a:e4:40:79:68:b6:
35:59:c7:89:af:68:ae:f9:37:a1:79:69:30:70:33:c7:a7:a9:
02:b0:54:ee:81:c6:be:38:e0:f9:4e:58:25:86:82:a6:c9:71:
d6:46:d8:5b:1b:dc:d8:fd:df:c4:c2:7b:ee:fc:f6:e4:0a:d6:
6e:76:1e:3f:43:cd:6f:4b:0c:67:8f:b9:43:1b:3c:91:0c:89:
b4:a5:e0:e7:90:48:a4:97:7e:4e:83:2b:bc:4f:7e:dc:4b:72:
b1:0a:b9:86:b6:86:12:47:cc:7c:67:ae:8d:ce:a2:98:a3:a6:
f9:40:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:32 2025 by rpki-client