Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/JCElWnpyHCGRVw4kJTI2wPhKalo.roa
File: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (raw, json)
Hash identifier: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=
Subject key identifier: 24:21:25:5A:7A:72:1C:21:91:57:0E:24:25:32:36:C0:F8:4A:6A:5A
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019427486C56DD04B543BC1E12726184794D
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/JCElWnpyHCGRVw4kJTI2wPhKalo.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8542
IP address blocks: 185.81.12.0/22 maxlen: 22
2a00:ce60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6c:56:dd:04:b5:43:bc:1e:12:72:61:84:79:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2421255a7a721c2191570e24253236c0f84a6a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:ab:a5:82:1d:d8:2f:aa:45:7b:3e:43:08:
ed:e7:fd:de:d8:1b:1e:13:41:70:bc:5c:8b:d1:e5:
2e:ba:7f:7e:09:88:1e:3a:2e:29:dd:dd:53:23:cd:
3a:68:d1:1c:6c:36:45:5d:94:83:45:9c:cd:5b:1c:
b2:fa:b4:26:35:7a:85:58:a1:e8:24:82:da:fb:49:
2e:3a:7f:6c:2c:28:3f:93:ed:a3:da:80:8c:b8:b2:
6f:ec:6e:bf:33:00:35:21:f7:ce:d5:27:0e:6a:d6:
70:b3:b3:8f:a2:a9:f7:69:8b:45:65:c8:20:cf:87:
de:51:63:ee:4f:89:c5:60:c3:e6:a0:67:77:16:d6:
69:26:ea:76:be:13:bb:20:c1:2f:56:ed:5f:88:fa:
1f:fa:22:a6:2f:cf:52:c7:aa:a3:69:ef:0d:1d:37:
ab:fa:1c:be:4c:b4:9b:78:ee:f0:5f:7a:c3:5f:5e:
7e:2c:bd:48:e4:b7:4b:eb:e8:84:9e:48:9b:2e:e6:
96:52:d1:b5:65:ff:a6:3c:55:0d:9c:e1:57:4f:6b:
55:f4:6e:d8:d2:a8:06:18:3f:f6:6b:b9:53:ec:87:
d6:59:85:ad:23:b5:1d:1d:04:97:e3:0e:e9:2f:61:
49:a8:f6:dd:09:61:f4:77:9b:8b:cc:98:9a:0a:0c:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:25:5A:7A:72:1C:21:91:57:0E:24:25:32:36:C0:F8:4A:6A:5A
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/JCElWnpyHCGRVw4kJTI2wPhKalo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.12.0/22
IPv6:
2a00:ce60::/32
Signature Algorithm: sha256WithRSAEncryption
2f:b5:56:cc:32:6d:80:62:6b:96:59:b0:09:33:c5:b7:76:2d:
40:d3:75:4e:af:4b:b3:28:5b:9d:ef:59:14:ad:2f:2a:2d:39:
52:8e:cf:f4:25:34:15:86:33:8c:dc:cd:b6:67:38:5c:9c:67:
14:6c:13:9c:5b:75:d3:21:3c:a1:3d:2e:31:66:b3:fa:69:51:
06:fe:b6:45:48:8a:76:b9:39:b2:10:27:be:25:04:ad:3d:04:
6f:68:56:7f:62:c5:01:3c:d4:93:15:76:0f:5b:a0:af:ea:61:
aa:85:90:e8:2f:2b:82:43:9b:c3:ac:a0:65:6a:d6:03:cc:69:
41:51:d4:7c:37:ff:2a:4b:96:42:c8:74:ad:31:31:70:3d:dd:
f5:37:69:23:2f:a7:7b:3b:d3:a7:9d:c3:3a:56:63:f1:51:f8:
45:61:b8:0a:60:28:49:72:dc:41:ae:83:03:1a:63:e3:90:e5:
63:6f:a5:e6:80:83:2f:d3:f8:5a:c7:99:61:11:fb:25:bc:75:
15:4a:32:97:4d:da:c4:b9:0b:29:b4:0c:17:ae:cf:7d:55:ee:
63:21:0e:5e:bb:f0:fd:d5:61:5d:1c:c5:5a:1a:0a:66:2c:d9:
c3:77:b2:5e:5b:c6:82:45:a1:77:24:b7:30:86:eb:2b:80:6f:
72:51:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:24 2025 by rpki-client