Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa
File: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (raw, json)
Hash identifier: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=
Subject key identifier: 8E:4B:B2:1F:D7:98:C7:B0:48:6B:A5:D0:BC:24:65:D5:CF:72:D8:31
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01942521C00D9834FF94E0EA81F77B6AD11E
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202651
IP address blocks: 92.119.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c0:0d:98:34:ff:94:e0:ea:81:f7:7b:6a:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e4bb21fd798c7b0486ba5d0bc2465d5cf72d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:3d:8e:53:89:b1:71:93:6b:37:1f:c9:7d:
08:a0:4c:75:42:71:d3:90:3a:af:2b:18:ca:7a:d9:
27:43:99:49:8b:e5:dc:bd:5f:a4:d3:f3:59:4a:bc:
be:66:71:19:70:30:fe:af:2b:00:6a:26:10:29:e6:
38:a8:5f:4a:72:7b:a1:61:6b:c3:bd:06:a3:fa:29:
97:e2:4f:f0:9f:34:d4:ff:63:64:ac:7b:26:11:c4:
74:22:f4:e7:e5:13:3e:e2:f6:d5:c1:83:47:a4:0b:
68:1a:5f:2c:d4:f8:16:a8:ff:53:63:ae:df:81:5f:
65:14:f9:b7:3e:53:6e:41:8a:b9:2c:a8:9b:a4:c5:
4f:55:24:ed:a2:3c:93:2f:db:58:74:e7:96:ff:91:
70:40:67:ba:12:2a:6f:e1:56:42:7a:ec:d5:e6:9e:
11:d3:e4:17:88:da:92:ca:ad:8c:81:09:56:64:88:
01:74:84:97:52:87:d2:22:d1:22:5c:77:a7:5e:36:
36:71:50:14:5e:e1:1b:84:8a:24:83:85:0c:eb:db:
87:ee:a2:f6:e7:36:35:69:4c:aa:26:01:7b:eb:ad:
12:6b:82:44:51:f9:01:bf:5c:a6:31:cb:16:22:de:
55:69:4a:29:d6:ac:85:5d:ca:0f:ac:f4:f3:79:19:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:B2:1F:D7:98:C7:B0:48:6B:A5:D0:BC:24:65:D5:CF:72:D8:31
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.63.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5f:a1:9c:6b:5e:8a:6d:96:a7:67:ce:64:e9:97:5c:be:bb:
1e:e3:50:db:26:12:dd:db:55:e3:cb:c2:cc:02:cc:5a:11:cc:
98:65:dd:a5:19:33:b0:c0:a6:d3:a5:60:92:1d:8a:78:d1:9d:
f3:7f:a2:6f:95:a9:a3:c7:ef:67:7c:47:aa:06:1d:6b:be:88:
67:c5:57:76:ec:3f:2a:eb:88:f2:b4:b1:2e:fa:34:2e:a6:11:
b0:ef:72:f7:6a:5d:cf:dc:02:e9:03:3d:dc:29:ee:63:9d:2f:
df:6c:55:15:95:7f:a1:8e:a9:35:94:68:fa:a0:ee:69:ec:8d:
7b:03:12:97:15:0d:b8:a7:93:01:91:6c:3f:3c:23:fa:73:13:
0d:32:59:7c:c6:6f:69:26:f7:8f:6b:ac:64:92:1e:eb:81:82:
cd:e1:39:44:10:38:ca:44:fa:a0:83:21:2f:94:7c:26:d2:62:
65:e7:4b:a2:4c:12:a7:79:3c:20:e8:f2:b5:3e:32:29:ca:6c:
71:80:c9:b8:ca:7a:36:3e:33:33:23:5b:8b:c2:65:f3:95:08:
2d:f7:68:43:ac:71:35:b9:ad:14:6f:53:ac:42:ce:f3:5b:3e:
ac:ec:5d:db:9f:7d:fe:e1:4f:2e:24:54:1e:69:1d:3e:20:90:
96:cf:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:08:18 2025 by rpki-client