Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jlhpehl06JZZModLuXTzUx8HFX8.roa
File: Jlhpehl06JZZModLuXTzUx8HFX8.roa (raw, json)
Hash identifier: 0PAFD/PrSrvB0d9Jb6loC1ylXHF6o5ufG+PcTnLyiXQ=
Subject key identifier: 26:58:69:7A:19:74:E8:96:59:32:87:4B:B9:74:F3:53:1F:07:15:7F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD60B9867B31C8562C1DA0F31FD2CC
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jlhpehl06JZZModLuXTzUx8HFX8.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200627
IP address blocks: 212.193.98.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:60:b9:86:7b:31:c8:56:2c:1d:a0:f3:1f:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2658697a1974e8965932874bb974f3531f07157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:23:0e:04:31:48:f5:3c:d8:6c:94:87:fe:ae:
40:dc:2d:87:a0:7b:cc:ca:01:cd:bc:a2:97:31:0c:
4a:03:8f:cb:5e:c6:66:35:15:33:c8:17:0a:6e:a2:
20:ea:50:69:9d:28:72:f4:a4:6a:c1:c3:52:fb:9e:
cd:c7:f1:08:c0:40:5c:45:ad:27:bc:c1:3c:27:83:
d7:0a:63:c2:6c:42:78:1c:ce:0b:f2:57:af:be:3f:
e8:b8:08:4c:9d:e7:96:01:83:11:17:75:2b:ce:3c:
2a:82:37:64:08:a5:21:f3:c2:50:11:c2:1c:b2:f5:
ec:ca:59:62:61:7e:ff:b6:a3:61:29:75:ce:1e:e1:
da:95:b9:49:14:09:e7:b2:59:37:64:27:4d:ae:ab:
33:ff:1e:46:d3:d4:92:84:78:b0:3e:45:6f:60:cc:
e6:c3:3d:9d:70:27:57:15:07:e6:62:5d:a4:d2:47:
df:f7:06:5f:0c:5e:5d:22:02:cc:f6:f3:dd:a2:9f:
e3:c8:d4:82:c0:85:85:7d:20:06:c4:5d:a1:45:fd:
de:aa:52:1f:6e:7c:5a:c6:2c:3c:cb:a6:6c:b6:3e:
a5:28:cf:ee:39:77:fe:db:f1:7a:cd:a8:d1:3a:11:
58:74:b3:15:da:e5:03:6d:d5:82:19:ef:bc:80:ce:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:69:7A:19:74:E8:96:59:32:87:4B:B9:74:F3:53:1F:07:15:7F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jlhpehl06JZZModLuXTzUx8HFX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.98.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e9:02:27:d4:78:f0:b5:f0:5f:31:7b:e6:1c:31:f2:62:7c:
b4:e7:d7:12:a9:90:56:0f:47:8e:d9:c0:28:26:42:b0:02:15:
02:0f:4a:6f:e2:eb:e4:53:fd:8d:fb:7c:ff:ae:ce:5e:b4:99:
b9:7e:0f:a1:12:66:c5:71:89:30:45:f0:72:5a:e9:35:8a:78:
18:76:2f:26:2e:b0:d7:bb:2f:73:a7:e1:ad:63:12:2a:f6:78:
2b:10:87:7b:81:6f:22:12:30:9a:c8:a8:94:fb:2f:e8:9d:0c:
14:3a:8b:16:d3:9b:59:b7:0d:e7:c0:2d:b7:82:5b:4c:a5:82:
b5:33:3a:00:f5:d5:ac:cd:2c:d0:e0:3c:d5:f9:54:76:d9:cf:
b9:7b:10:6f:f1:ba:a4:04:de:e7:06:f0:68:f1:fb:3c:8c:b4:
e3:56:f1:b8:23:b8:32:67:4f:2b:76:a6:09:ed:c5:2b:73:94:
6f:02:ef:98:f4:3f:0e:7c:76:46:48:f6:6c:ea:f3:68:6f:cf:
a5:56:ab:12:c7:40:e6:2c:aa:24:4d:8b:30:4b:93:97:9b:ae:
61:b5:da:02:33:05:b4:79:ec:f7:40:0d:9a:1b:94:bc:67:1c:
fb:5e:35:a9:8c:22:4c:29:91:20:bc:8a:6c:ea:6e:82:68:a2:
bc:e4:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:49:15 2025 by rpki-client