Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/1-JVHfdgfgX9obL5uDihzl6u5be0.roa
File: 1-JVHfdgfgX9obL5uDihzl6u5be0.roa (raw, json)
Hash identifier: 5fhgSJOuf6zlLlFO7nClbQrHjOcLY4QSzZjarquKLMI=
Subject key identifier: F8:95:47:7D:D8:1F:81:7F:68:6C:BE:6E:0E:28:73:97:AB:B9:6D:ED
Certificate issuer: /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial: 01942068090B34C4EE3504A36830CD814B4F
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/1-JVHfdgfgX9obL5uDihzl6u5be0.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 193.110.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:09:0b:34:c4:ee:35:04:a3:68:30:cd:81:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f895477dd81f817f686cbe6e0e287397abb96ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:7d:2c:90:6a:33:30:79:3e:ad:89:cb:6a:
88:9e:75:5f:69:d0:24:fe:b7:e9:08:8a:49:41:91:
c3:29:15:a4:3a:41:52:4c:a9:38:ad:cc:bb:fd:43:
8a:42:c2:b7:c9:c5:89:41:fe:28:81:8e:4c:4b:1f:
45:15:e5:3d:87:6b:94:27:5e:ab:c3:f7:e6:9f:8c:
b8:39:59:79:69:7a:25:0b:64:66:8b:e3:c1:42:f0:
4f:ef:04:55:44:a9:d9:1b:69:19:c5:b3:9b:87:a8:
d4:9e:cf:20:b6:63:c9:91:c3:43:f7:44:74:cb:90:
f8:74:c1:4e:10:51:68:31:16:18:f6:0c:83:8d:8f:
c6:5d:aa:92:f4:23:51:50:28:d3:f8:83:e0:e0:16:
f7:37:69:7b:c7:d8:48:80:4a:b2:f1:b4:67:49:14:
d6:54:64:e6:e9:10:8e:ba:d3:e3:2d:78:5a:61:32:
2b:27:a0:77:46:66:e0:40:19:39:8c:44:6f:10:38:
ba:69:ad:09:73:66:c9:d9:fc:4d:87:a7:69:20:4e:
cb:3c:35:8c:02:0f:fd:f7:28:13:3b:31:ea:83:77:
c3:a9:e6:bf:a3:2c:35:19:91:3a:88:42:25:f5:af:
2d:7d:f5:1a:a0:6d:6f:b8:a6:f9:99:f7:b3:c3:64:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:47:7D:D8:1F:81:7F:68:6C:BE:6E:0E:28:73:97:AB:B9:6D:ED
X509v3 Authority Key Identifier:
keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/1-JVHfdgfgX9obL5uDihzl6u5be0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:aa:2a:87:28:56:fa:bc:a2:a5:76:67:98:45:d1:3a:8d:15:
a4:e5:49:11:bc:1c:f3:e7:bd:4d:8a:43:77:69:3d:1b:8f:0a:
b7:80:c6:67:f7:d9:a2:61:13:89:82:5b:0d:9c:44:85:73:45:
38:d4:27:e2:c3:05:19:f9:7d:6f:44:03:2b:da:85:3b:39:62:
32:9c:33:89:b5:86:ea:03:aa:50:c9:61:0f:5b:05:c3:2b:cb:
86:f5:42:dd:4b:85:33:70:9f:7d:d0:38:dc:2c:23:84:f8:3d:
49:1d:b4:9f:e6:e2:d2:f2:2f:f4:04:f0:f5:20:97:17:ce:53:
96:f9:5e:56:c6:b3:bb:55:bb:94:a9:c7:ee:4f:f6:95:12:c3:
3c:bb:da:1c:88:6a:5f:33:d6:20:ad:69:87:84:f8:28:59:c6:
6b:58:9b:ff:fe:53:04:ed:43:a0:01:cf:ea:1b:42:e9:65:ff:
76:27:22:0f:33:58:50:be:d3:e8:b6:14:4a:f8:06:83:90:1a:
73:b0:6a:5b:dc:98:1c:86:ee:68:1f:5e:8d:60:ad:7a:8d:13:
26:20:5c:49:2a:47:54:51:cb:fa:60:f4:68:4b:25:2e:84:8b:
e6:21:85:29:ff:a6:d5:2f:8d:e6:9d:41:a2:78:2b:73:e4:bb:
e0:7a:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:32 2025 by rpki-client