Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/j3mlArIrCrvoTStpcqF9EPTMJII.roa
File: j3mlArIrCrvoTStpcqF9EPTMJII.roa (raw, json)
Hash identifier: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=
Subject key identifier: 8F:79:A5:02:B2:2B:0A:BB:E8:4D:2B:69:72:A1:7D:10:F4:CC:24:82
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019424458E8350AFDC2D1E85F443276AF498
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/j3mlArIrCrvoTStpcqF9EPTMJII.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41522
IP address blocks: 194.9.52.0/23 maxlen: 23
195.93.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:83:50:af:dc:2d:1e:85:f4:43:27:6a:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f79a502b22b0abbe84d2b6972a17d10f4cc2482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:b0:9e:44:ba:68:f1:b7:51:ab:87:0d:10:
b2:e7:5a:a6:3e:e3:60:4f:de:51:8b:37:e8:f8:d2:
cd:f8:56:d4:da:72:6e:c5:8d:28:69:10:fe:da:af:
06:2b:ec:cc:4e:8b:22:47:f4:02:b0:b6:0a:27:6e:
48:71:fb:7e:da:72:60:05:bb:4b:eb:07:db:ac:a8:
c5:06:b0:7b:ef:5b:cf:e7:d3:63:e2:f8:2e:e3:68:
bc:d1:e3:75:57:f3:de:07:25:09:4b:a8:a4:d7:d4:
ab:de:8e:0c:fd:b7:a5:0d:f3:15:29:b6:7c:64:36:
f4:5e:69:22:87:bb:d8:3c:49:16:f6:da:88:61:14:
86:27:c7:52:ca:0a:2b:15:b1:57:d7:56:b7:b1:6b:
f2:19:42:74:81:13:2e:ab:13:d6:1e:36:6d:eb:27:
20:c2:f6:48:66:5c:ca:81:7b:20:56:76:4e:68:03:
e6:c8:a4:cb:24:70:48:25:ed:ec:0a:39:50:40:fe:
82:d9:02:14:2e:c8:bf:b4:09:9f:7b:5b:fb:cd:fe:
ac:ee:2c:1e:2b:37:65:09:75:02:d7:b5:6d:05:0a:
54:16:a6:15:4f:0a:8f:77:1b:a9:ed:51:f2:ad:bf:
90:ec:ac:5e:f7:ab:78:ca:ed:85:a2:06:b9:c7:46:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:A5:02:B2:2B:0A:BB:E8:4D:2B:69:72:A1:7D:10:F4:CC:24:82
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/j3mlArIrCrvoTStpcqF9EPTMJII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.52.0/23
195.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
53:a0:fd:88:df:70:ae:71:6d:20:ca:2c:37:81:6d:e7:97:f9:
24:6f:d0:0d:85:5b:f5:19:1a:02:89:b8:e2:3c:d4:9c:56:28:
2f:0a:41:c0:43:fd:80:c3:52:d5:d6:ed:1f:21:42:f5:55:b3:
e9:1c:7f:f1:f5:d4:72:7e:d9:59:b9:a9:f7:f3:1d:f0:9f:27:
ad:a2:36:ff:22:e2:e1:71:23:1f:e8:05:09:44:24:50:62:7b:
84:fb:b9:7a:d4:af:d9:fd:61:40:d8:53:c0:f0:15:bb:07:42:
5b:a3:e7:7f:43:92:65:5e:17:6f:1f:0e:0b:8d:57:fd:15:76:
74:ea:9a:59:92:bd:60:0a:6e:48:f3:77:14:83:e8:19:d8:1b:
db:83:a6:58:b3:3d:a8:be:3f:2f:59:80:b1:1a:a1:0b:10:c0:
57:d6:d6:23:ba:dc:4e:e1:0a:9a:7c:3e:b4:a9:0e:74:54:ff:
fb:4f:a9:a2:2d:90:64:57:2a:49:0f:8a:0d:f8:ed:ed:a1:2f:
e6:c1:b9:2d:82:c8:9f:a8:0a:40:bd:a8:d6:0c:a6:2c:76:3e:
db:e8:7b:65:96:6b:5c:a9:05:9f:df:74:23:4c:99:78:1b:40:
18:81:07:dd:63:fd:fa:8e:8a:9d:1e:23:08:23:5a:05:e9:f2:
c4:75:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:29 2025 by rpki-client