Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCW1aruf2_3gqas_fMAcI4_HyLQ.roa
File: JCW1aruf2_3gqas_fMAcI4_HyLQ.roa (raw, json)
Hash identifier: oC1od7r5QRl1zksfECHd4pqkAxhQP3MOUd05sWShk6U=
Subject key identifier: 24:25:B5:6A:BB:9F:DB:FD:E0:A9:AB:3F:7C:C0:1C:23:8F:C7:C8:B4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194A70FA2CF048D648B7A2C011A73FEA8E2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCW1aruf2_3gqas_fMAcI4_HyLQ.roa
Signing time: Mon 27 Jan 2025 09:20:07 +0000
ROA not before: Mon 27 Jan 2025 09:20:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 82.153.207.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:0f:a2:cf:04:8d:64:8b:7a:2c:01:1a:73:fe:a8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 27 09:20:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2425b56abb9fdbfde0a9ab3f7cc01c238fc7c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:7f:82:64:4c:83:94:b2:53:cf:76:7b:11:
f3:dd:2e:0b:fe:32:8e:6b:be:eb:e2:e6:2b:25:b9:
34:dd:42:7d:65:56:b4:91:ed:6b:2d:91:09:10:2e:
e6:98:f0:9e:9e:e4:73:e1:e8:00:1f:e3:9b:a7:f6:
ad:4c:58:ae:a0:37:93:de:48:2c:35:53:25:b9:89:
8c:d0:a3:bc:71:dd:0b:69:09:5e:46:2d:f4:12:0f:
bf:9b:49:4e:f0:13:08:78:c6:aa:44:1a:7f:d2:ea:
a7:d2:54:60:47:61:33:f1:b6:4d:94:0f:eb:e8:9e:
85:73:d9:4c:6d:a8:80:b2:f6:4c:63:ec:19:3c:19:
1b:b3:28:9c:09:91:4d:6b:b9:4f:d1:bf:58:0e:48:
58:9a:ef:f7:fb:1f:2a:24:2f:50:e0:29:e9:c7:be:
f2:e9:3f:19:34:c8:3d:0b:da:2d:42:1d:29:f2:b1:
74:f6:6f:e1:6e:04:a7:75:61:77:79:9e:4f:44:82:
0b:96:86:97:6e:73:a7:12:5d:6e:bb:6e:ae:2e:16:
5f:69:71:8f:33:66:bf:c1:c8:23:54:f7:71:11:dc:
19:9e:9f:1a:05:c3:bc:79:52:ba:b0:92:06:58:da:
0d:af:e2:4e:12:64:c0:9c:48:1b:b7:58:60:5a:7c:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:B5:6A:BB:9F:DB:FD:E0:A9:AB:3F:7C:C0:1C:23:8F:C7:C8:B4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JCW1aruf2_3gqas_fMAcI4_HyLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.207.0/24
212.38.89.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a0:58:21:cc:16:45:ec:96:9e:86:54:57:ac:35:a0:04:0f:
08:1b:e1:0a:9a:6d:d5:ed:0b:28:ff:11:b5:bf:37:31:72:72:
ec:c3:52:17:91:2e:05:df:77:b2:b1:52:33:7b:4a:55:d0:1b:
40:e2:25:0a:e9:c4:e0:83:e9:c4:bb:cb:03:a7:08:63:52:b4:
50:4a:dc:e7:4d:24:33:eb:2d:4f:a2:82:e2:8d:67:e1:e7:d1:
4a:21:44:1f:0b:94:56:3a:01:59:4e:db:92:5d:4d:6d:37:7c:
2d:90:28:dc:f3:f4:81:0e:6b:55:d0:b6:8a:2a:f3:f7:0a:33:
8f:d3:d8:a0:88:37:bb:50:e8:0a:71:a8:43:50:5c:8c:43:43:
56:61:4d:30:3d:49:a4:a2:8e:24:8f:4f:97:28:e7:c6:ff:64:
f5:d8:62:ab:1a:2a:39:7e:29:de:a0:e7:28:fc:6e:24:8d:85:
90:80:7c:2d:f6:7d:a6:23:46:1e:82:93:e1:b0:4c:c0:1e:19:
6e:5d:8e:85:e3:84:da:6e:a6:d5:96:23:54:99:dd:75:20:31:
fb:ae:87:54:a2:f4:21:ed:3c:f9:5b:17:92:06:dd:f8:af:43:
e2:91:db:8b:2f:12:a3:84:93:b9:74:d9:02:21:7a:1b:bd:b4:
fd:e9:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:10:05 2025 by rpki-client