Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/j1mcX8ca99AfMX3QtJoMJ_rC6-s.roa
File: j1mcX8ca99AfMX3QtJoMJ_rC6-s.roa (raw, json)
Hash identifier: yTEjNg9NwrLsbENXfpNZFM9+qokI9t+X2SATBjjcpgI=
Subject key identifier: 8F:59:9C:5F:C7:1A:F7:D0:1F:31:7D:D0:B4:9A:0C:27:FA:C2:EB:EB
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD566BA5446672A45C3F6413102C36
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/j1mcX8ca99AfMX3QtJoMJ_rC6-s.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49063
IP address blocks: 194.226.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:56:6b:a5:44:66:72:a4:5c:3f:64:13:10:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f599c5fc71af7d01f317dd0b49a0c27fac2ebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:ec:fd:7c:80:7e:19:f9:a3:f2:39:ba:16:
8d:2a:63:86:05:10:96:9a:db:a7:dc:34:75:86:eb:
59:ce:de:5a:c6:1f:a6:b2:74:48:d9:63:34:13:63:
54:ca:89:5c:0c:01:e0:85:e5:2e:af:c1:a7:ab:44:
fd:74:02:25:fc:6c:94:0f:8a:4a:aa:6b:6e:40:0b:
37:80:d8:5f:ac:b5:e6:fc:ef:03:af:e4:7a:a3:09:
e2:b3:2e:1b:1b:93:bf:5a:ed:59:44:f0:20:3b:0f:
25:77:db:e6:e5:d4:08:80:46:d2:69:28:9e:cd:b5:
5f:76:d6:5c:bc:68:cf:3a:e9:62:5b:29:b2:45:ce:
be:3f:3d:c3:3d:5d:68:17:df:f2:e5:cb:03:a8:c4:
f3:31:e5:2a:4e:74:15:93:7c:82:8e:2f:08:25:f1:
d8:5c:f0:bc:36:c7:16:b8:3a:ec:2e:0c:a3:81:73:
82:e9:26:71:cb:a2:5e:a4:b5:30:f5:ad:de:b5:4e:
15:e0:5c:82:b0:1c:42:74:a2:d4:8f:56:fe:75:e2:
7c:f5:81:7c:2d:a7:d1:f5:a6:3a:cf:c2:5c:aa:b0:
05:24:ae:f5:5d:1d:9f:4a:85:ba:a7:ff:1c:40:5e:
81:fc:c7:5c:12:15:35:f2:a5:f3:da:6f:ff:2c:0e:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:59:9C:5F:C7:1A:F7:D0:1F:31:7D:D0:B4:9A:0C:27:FA:C2:EB:EB
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/j1mcX8ca99AfMX3QtJoMJ_rC6-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.177.0/24
Signature Algorithm: sha256WithRSAEncryption
79:48:1d:17:58:52:af:c7:76:cd:11:57:2a:31:b2:ff:19:6d:
e1:68:d9:8d:f6:57:7f:df:ec:35:35:33:0b:33:43:1b:50:3e:
2d:56:03:a8:92:bb:62:6e:51:a2:bc:fc:43:91:5d:2c:08:9f:
3b:08:8c:e7:84:b6:7d:61:83:b7:05:2f:d0:4b:02:77:1c:15:
d2:75:55:24:2e:38:b5:bd:68:0d:6d:42:61:e2:c2:6b:1b:87:
fd:d8:a0:ea:27:23:4e:08:4f:a3:5d:d6:f0:39:80:9c:4b:e0:
81:5b:37:63:2c:62:6d:95:81:6a:b9:d2:ee:35:00:a9:f4:2a:
98:4f:cd:07:76:cb:3b:c3:45:91:dc:e6:9f:7e:a3:11:07:92:
f7:10:e8:1f:9e:fe:1a:cc:56:bf:a3:97:f7:1a:26:3c:98:f5:
11:5f:f9:0e:b8:f5:13:fb:e6:cd:93:69:8b:e4:cb:79:c4:99:
96:b2:f9:19:89:63:d7:f5:ae:e3:51:e4:54:60:6e:24:04:2c:
7a:b0:29:85:41:7c:d4:c1:62:91:0a:d1:4e:1a:25:5a:bd:46:
7f:0d:63:27:67:40:1c:34:83:6f:57:f1:81:fe:e4:b8:b7:1f:
30:ad:dc:bf:96:a3:6c:93:2a:9b:a2:f3:d7:01:51:0c:f8:4d:
93:79:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:49:17 2025 by rpki-client