Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa
File: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (raw, json)
Hash identifier: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=
Subject key identifier: 8E:19:F6:9F:A6:61:9E:4D:9E:00:9C:C2:E8:7C:CC:46:96:F3:04:36
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019425FC3F4EB88E4BFA88352F76816AB20F
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 185.248.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3f:4e:b8:8e:4b:fa:88:35:2f:76:81:6a:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e19f69fa6619e4d9e009cc2e87ccc4696f30436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:ab:4b:72:0b:6e:4e:3e:42:cf:6f:5b:38:
2f:e0:14:9d:71:36:6b:b8:e6:94:2f:82:86:92:d7:
f4:02:70:23:73:54:66:c4:d0:17:f3:f3:5f:50:33:
ff:38:05:d4:b3:0c:1a:5c:cf:a5:39:8a:f3:d6:79:
5f:68:c1:1e:10:58:21:2e:a6:53:18:41:95:a3:7a:
b7:a9:be:b8:d0:a8:42:30:e9:09:53:be:69:20:9a:
b7:3d:f8:30:58:6c:6d:b2:86:f0:d8:70:b4:c9:ee:
3b:24:85:13:fb:e6:15:e4:09:c0:c0:26:f6:0b:52:
54:08:a5:0e:f9:6b:32:ad:9f:2d:f7:4a:da:89:14:
34:08:2e:03:e0:81:40:8e:0a:df:38:34:88:20:9d:
2b:a6:70:bf:4f:78:6b:97:7e:87:96:2f:c2:90:6b:
3c:13:ae:13:e7:93:0c:14:b5:07:29:e5:7f:ff:3d:
02:04:5f:32:d8:ea:bc:05:9c:22:40:2a:f1:d8:44:
70:c0:ec:4a:aa:ea:91:58:d0:b4:e8:09:7f:8f:84:
a2:f5:eb:93:9b:0e:04:4c:7b:1c:65:d2:74:8d:1a:
d0:01:8d:e9:02:fc:3c:29:d3:13:a6:cb:64:af:14:
2b:79:cd:c5:69:2c:93:53:8b:67:e3:b1:c0:f2:c9:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:F6:9F:A6:61:9E:4D:9E:00:9C:C2:E8:7C:CC:46:96:F3:04:36
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.248.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:7a:00:1e:5d:35:44:ce:63:ff:0e:45:e8:f1:1d:3b:41:f6:
8e:a7:51:65:2b:8d:28:4d:85:e5:9e:0f:35:f0:4c:10:9e:a0:
bb:5f:e6:e2:52:b1:63:26:b8:fd:97:eb:8f:68:2f:c0:a9:52:
28:8f:d0:db:8d:a3:7e:ea:1f:3c:f4:44:9f:6b:9c:86:ac:dd:
ea:cd:2a:43:ca:14:10:0d:1a:c9:14:30:bc:99:e3:78:12:b1:
b7:c0:c1:e3:6a:5f:bd:24:b7:77:e7:46:d4:da:b7:2b:64:82:
f1:77:e3:1b:f2:7c:76:0f:da:71:10:ca:d7:3e:17:1a:7a:b0:
5e:ee:35:38:78:86:87:65:a9:13:5e:0d:6a:e7:b6:88:1b:2e:
3d:a2:5d:0a:04:e0:c1:a4:32:99:16:02:e4:17:e6:ba:88:77:
79:d1:02:d2:05:c7:68:d9:7c:b3:72:97:09:50:de:79:33:3c:
1f:63:26:ee:cf:b5:f3:e1:86:c3:d8:03:8d:d0:a3:11:3e:92:
1d:36:fa:cd:7a:55:89:25:a8:b4:d8:fe:dc:ac:b9:1d:1e:51:
d0:fd:7b:a9:56:fe:4b:c9:88:60:0a:29:aa:bf:27:e2:0d:d0:
f4:72:dd:7a:b9:34:b4:56:7c:e1:f0:04:32:a7:0e:62:3d:02:
1f:8a:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:06:35 2025 by rpki-client