Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Joob3jfl7gNNspMnty4voVZknJE.roa
File: Joob3jfl7gNNspMnty4voVZknJE.roa (raw, json)
Hash identifier: 1hIqcv8nluKZbBgzBR7FmiMq6eAYZfjLrWV7iNAQR8Q=
Subject key identifier: 26:8A:1B:DE:37:E5:EE:03:4D:B2:93:27:B7:2E:2F:A1:56:64:9C:91
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019422FBB241615E2AD060EF5B9C56D9AE5A
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Joob3jfl7gNNspMnty4voVZknJE.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207333
IP address blocks: 93.188.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:41:61:5e:2a:d0:60:ef:5b:9c:56:d9:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268a1bde37e5ee034db29327b72e2fa156649c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e5:d5:62:09:4e:69:b9:a8:c3:02:7b:74:40:
03:72:ad:e8:6f:19:a6:65:51:30:5e:ca:ba:61:30:
3d:37:6d:06:c2:55:2b:1e:53:30:42:12:18:16:96:
36:8c:47:45:83:59:99:34:c7:75:22:c9:57:66:f4:
c3:18:29:12:78:1b:a5:29:e7:00:88:2d:2e:cc:26:
55:2d:de:43:fc:c3:ad:fa:c5:8b:f8:28:73:f2:67:
20:f1:b9:2e:01:d8:c7:48:61:d7:1c:8c:83:de:ff:
98:61:51:3a:6d:46:72:3b:d0:72:07:f3:49:2e:b1:
12:dd:6a:6a:16:70:db:d1:23:b4:43:f8:fe:b0:4d:
a8:ba:a5:1b:39:20:7f:a9:1a:d0:6e:fa:3a:4c:08:
6b:36:fb:61:7c:c0:a2:3a:08:0f:84:cb:fd:a5:97:
41:9e:ff:19:7e:3b:19:59:12:3d:a0:ed:b5:ee:9d:
b7:ab:6e:17:7f:e8:9d:97:4a:83:3a:d8:06:7a:85:
41:39:a9:0c:1a:81:87:3c:12:ec:93:50:ef:dc:d4:
36:26:86:ff:45:81:1d:23:75:c8:f7:7d:45:4a:e8:
f2:d3:e8:d5:a0:ca:20:36:8f:a6:5b:76:0f:74:34:
14:f6:c1:5f:3a:7d:35:0c:45:2d:ca:2d:53:11:22:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:1B:DE:37:E5:EE:03:4D:B2:93:27:B7:2E:2F:A1:56:64:9C:91
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Joob3jfl7gNNspMnty4voVZknJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a1:4d:d9:cd:0f:39:8c:28:16:5d:a8:ee:d4:9b:5f:29:a9:
c5:05:1c:e6:f1:e9:1f:97:21:18:24:de:d5:7e:59:82:12:2d:
92:2f:7d:6a:29:45:b5:21:4d:2f:a4:d3:a3:3a:74:61:15:47:
b6:32:d9:bd:51:0d:cc:37:26:4a:7d:7d:90:e8:32:48:7d:ff:
2d:bb:93:ed:e5:b1:0a:c6:93:79:ab:a6:6c:d7:b7:3a:c2:0c:
30:d8:c7:45:dc:f2:13:f8:9d:6a:d7:48:f2:f5:f9:9e:46:de:
70:7f:16:4c:5c:29:14:23:a9:6e:c0:7e:f1:28:56:2b:59:a4:
22:ba:98:bb:02:cf:4b:af:aa:16:81:46:b6:a1:46:8d:f7:2e:
42:65:5f:78:30:5e:59:5f:e0:11:72:0c:a2:72:dd:cf:8b:91:
0b:d3:83:4e:81:c4:62:f9:00:37:48:63:61:2e:22:ba:36:31:
d0:11:0a:52:75:b6:ae:00:4e:c3:79:81:f2:ef:d5:b0:ca:5c:
15:6e:55:7f:db:0d:af:a2:ad:7c:f6:fc:eb:f7:e3:55:4f:08:
f7:86:5c:d9:cd:33:72:89:98:ef:58:de:a3:20:49:5b:c6:a3:
83:53:1f:53:95:4e:ec:30:e3:90:9b:58:b8:ea:ed:1c:4b:fd:
d6:f7:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:07:16 2025 by rpki-client