Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JKyrn5Wfa6rCBC89CN5hvOLNfXA.roa
File: JKyrn5Wfa6rCBC89CN5hvOLNfXA.roa (raw, json)
Hash identifier: Ogv0QEIAt1ClkOLPgLsY5MBTxy9HPjcgNJd4RlIs/0U=
Subject key identifier: 24:AC:AB:9F:95:9F:6B:AA:C2:04:2F:3D:08:DE:61:BC:E2:CD:7D:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194F98D1EB34316D5C6AED02023C0F33EDA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JKyrn5Wfa6rCBC89CN5hvOLNfXA.roa
Signing time: Wed 12 Feb 2025 09:46:02 +0000
ROA not before: Wed 12 Feb 2025 09:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
82.152.52.0/23 maxlen: 24
109.176.25.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:8d:1e:b3:43:16:d5:c6:ae:d0:20:23:c0:f3:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 12 09:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24acab9f959f6baac2042f3d08de61bce2cd7d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:38:49:93:22:40:ef:06:35:a3:55:52:ad:
56:aa:3e:a0:88:77:97:70:bc:7c:2b:4d:a1:94:ea:
9b:f3:7b:f1:e1:a5:bf:23:a9:72:57:aa:e9:fa:00:
3f:6b:df:9b:89:1e:d5:fb:b0:d5:89:45:3d:83:6f:
75:ba:1f:b4:b6:8d:b6:f3:62:56:cb:73:cf:7b:ba:
1b:4e:7c:81:b5:26:ea:13:9a:19:de:90:01:a5:b7:
a7:4d:98:3b:28:8e:db:3a:09:d3:1b:10:5f:d9:81:
81:90:a6:32:3a:53:c0:d2:82:ba:94:c0:b0:22:d6:
6f:39:52:f5:da:db:d0:0a:d8:1f:ec:78:36:47:0c:
22:21:b3:51:83:6c:3b:c3:7a:92:22:ef:69:55:31:
98:b2:f3:95:0d:c6:b6:07:32:5a:d0:33:62:de:ac:
a4:3b:27:29:4b:b2:c7:ba:56:63:ef:6a:11:5d:4d:
e5:b3:d5:fb:ae:38:c2:0b:04:08:5a:44:ff:dd:d9:
dc:38:a6:b1:78:11:01:58:7c:c4:73:f0:16:79:70:
57:43:ae:44:a6:25:7a:59:a4:97:60:aa:2e:3a:d5:
9c:40:b8:20:5c:04:2a:a3:e1:dd:93:fe:6c:d4:98:
b4:51:5a:1e:6e:0e:15:b9:cf:b9:f6:f5:8f:0d:ad:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:AB:9F:95:9F:6B:AA:C2:04:2F:3D:08:DE:61:BC:E2:CD:7D:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JKyrn5Wfa6rCBC89CN5hvOLNfXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
82.152.52.0/23
109.176.25.0/24
213.130.150.0/24
213.210.48.0/23
Signature Algorithm: sha256WithRSAEncryption
88:08:53:84:82:8f:fc:9c:8e:d6:ec:c4:ac:2b:93:77:7e:f6:
58:39:cd:72:2d:0e:f1:ef:72:61:b4:5e:8e:3b:d5:51:b6:57:
4c:86:6c:00:8f:73:c0:40:59:82:e8:2c:42:be:74:a4:d1:0f:
d1:12:6d:ba:7d:02:e7:50:3e:b5:19:a7:b0:05:a9:8d:04:81:
8e:3d:ad:4a:27:f9:f4:44:47:d2:91:61:f6:b4:4a:3e:43:5e:
67:15:0f:1c:18:d9:11:1b:cc:45:55:b0:11:f7:00:ce:b4:fd:
2b:4b:ba:eb:db:b3:0b:f2:de:e4:3b:a8:15:0b:e4:b4:e6:0e:
51:1a:f6:e1:05:5f:94:79:b6:a9:15:30:f3:21:43:de:4c:7b:
79:6d:2f:c1:92:fd:ee:b5:43:67:6e:2f:89:ba:1c:f9:99:49:
1a:80:c0:f1:67:e3:b8:5f:28:da:2c:9f:73:e5:2a:cb:0d:d4:
db:dc:f3:c7:7d:0c:99:c3:86:90:77:9c:7b:54:4d:f9:90:59:
2c:22:93:63:82:9f:72:a4:2f:70:e4:60:95:0a:c2:47:91:8c:
01:3f:fd:7f:23:4e:c5:98:b2:0c:04:49:37:48:ac:25:15:ac:
07:95:5f:9e:37:50:2c:ef:e3:b3:49:93:cd:44:11:d3:8c:1c:
87:74:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:57 2025 by rpki-client