Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/pjWvLHgWJr8VfxqCyu_wjseZwrI.roa
File: pjWvLHgWJr8VfxqCyu_wjseZwrI.roa (raw, json)
Hash identifier: M+VetrzhMK4qS2ZDHlL6T1xkNC7G/F+gqzb3HNS9swc=
Subject key identifier: A6:35:AF:2C:78:16:26:BF:15:7F:1A:82:CA:EF:F0:8E:C7:99:C2:B2
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 0194266B536DABE7FE996C1FEB418EADD20F
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/pjWvLHgWJr8VfxqCyu_wjseZwrI.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 185.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:6d:ab:e7:fe:99:6c:1f:eb:41:8e:ad:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a635af2c781626bf157f1a82caeff08ec799c2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:dd:87:20:ef:a7:d3:fd:df:b1:c7:48:05:
f6:0c:54:2a:0b:88:da:aa:3b:a4:6c:f0:ce:3c:f2:
2e:19:46:ca:01:e4:9c:4d:81:1e:a5:47:d3:42:b4:
92:6e:a7:01:44:cb:8a:7d:db:64:80:15:d4:f0:6a:
6d:7d:af:71:38:30:7a:78:cf:bb:65:46:d9:67:d7:
c0:b0:20:30:e0:57:73:99:ce:2a:16:ad:d2:e8:d6:
64:d3:c9:60:2a:6c:47:ed:dd:44:bf:90:35:df:8b:
ac:df:55:e9:1d:c1:7a:52:03:29:71:65:d7:5b:fd:
02:09:26:64:4b:8c:10:37:42:76:f2:ef:a3:6c:bc:
8a:66:0e:4d:a9:9a:e3:b0:9f:03:c4:a9:e4:8b:f7:
8f:f9:3b:0a:77:d6:7f:43:24:10:f0:61:61:34:89:
38:f8:00:94:26:73:9c:a9:be:67:d7:32:39:81:4c:
b7:e6:f1:58:07:74:06:bd:27:57:a0:36:4a:b7:33:
e0:38:c2:3d:3e:77:46:d1:f2:24:42:1b:89:42:a1:
1d:12:6a:c3:a6:d9:d6:bc:7b:dd:38:2d:a0:2b:03:
89:11:0f:f5:88:0a:30:30:50:cd:d3:40:06:a4:2c:
1f:ae:bf:0f:2e:0b:72:8f:4c:ae:8b:c9:0d:a5:0f:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:AF:2C:78:16:26:BF:15:7F:1A:82:CA:EF:F0:8E:C7:99:C2:B2
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/pjWvLHgWJr8VfxqCyu_wjseZwrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:60:b2:fc:68:11:94:3d:bf:27:d7:9f:73:43:34:3a:a4:8b:
09:02:35:ff:27:7a:4e:ed:c0:56:0b:d1:0f:18:04:6a:de:53:
47:50:e7:d6:94:95:70:6d:05:f2:7a:d0:dc:ad:5a:10:c4:d0:
9f:a1:8e:ef:c1:f1:61:d9:8e:7a:41:d3:2f:2d:4e:85:a7:05:
07:6c:75:75:9f:87:16:a4:c7:7b:f9:ed:dc:06:b7:14:5f:48:
13:4b:eb:1f:b6:ea:55:62:38:72:69:bc:79:99:f4:6e:4f:49:
0b:4c:9d:e2:34:33:ac:68:99:7d:19:d1:ef:a4:ea:93:a6:d9:
a3:a2:8c:ca:5c:1b:0b:29:2c:09:8e:84:05:09:0a:5f:09:b0:
04:77:62:4d:a9:0b:47:a5:c9:46:c3:f7:91:d2:1b:df:2f:b2:
75:b6:76:7f:a1:c5:3b:1d:95:be:08:e8:07:de:36:ec:7d:37:
c9:69:b0:de:a3:2e:dd:0b:4d:7b:a0:9c:ec:3a:18:d3:70:36:
30:be:95:cb:18:4a:2b:92:d6:0a:0c:54:e4:9d:33:6b:38:b5:
bd:b3:ca:1d:6e:f1:1a:f9:e9:fd:85:62:04:48:bd:b2:dc:07:
38:24:d4:39:3f:7a:0d:6d:e3:7c:35:52:92:6c:53:d1:3b:9e:
f6:87:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:18 2025 by rpki-client