Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Jn7xXP0hy7A2gK4lsZgTaRpNzlQ.roa
File: Jn7xXP0hy7A2gK4lsZgTaRpNzlQ.roa (raw, json)
Hash identifier: 5loPMarEGhhNHTtXsrCjFteZBtyifn+6Bwt73fRzVZ0=
Subject key identifier: 26:7E:F1:5C:FD:21:CB:B0:36:80:AE:25:B1:98:13:69:1A:4D:CE:54
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01941FFAB69883CDC1C4AC2A373C2FAB1BEB
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Jn7xXP0hy7A2gK4lsZgTaRpNzlQ.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.4.0/24 maxlen: 24
87.247.174.0/24 maxlen: 24
87.247.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:98:83:cd:c1:c4:ac:2a:37:3c:2f:ab:1b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=267ef15cfd21cbb03680ae25b19813691a4dce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:91:29:0b:d0:1b:eb:94:69:c5:97:62:8d:
e2:53:cc:17:5f:eb:5b:69:75:56:95:cb:41:7a:b3:
0d:f0:22:9d:90:bf:bf:d4:00:1d:25:63:2b:af:17:
25:31:ec:4c:6e:e4:b7:2b:b8:c9:d3:b3:fd:55:8d:
c1:8d:15:10:03:41:91:b3:34:4d:26:e8:de:7e:17:
5b:4a:ab:85:ba:cf:3f:51:ba:43:d7:0a:f0:5c:f0:
4f:b4:67:74:da:b2:f1:a9:49:03:3e:70:6d:14:f2:
e5:f6:82:22:b4:33:03:65:6e:86:ea:ca:4a:20:5d:
66:32:dd:19:97:66:c5:e8:ba:be:a8:7b:8d:42:aa:
d4:dc:c3:d0:3b:a3:21:c6:bb:1b:9b:e1:7b:35:58:
2a:f8:91:34:b1:12:9a:66:76:00:35:9b:ed:6d:80:
b4:43:da:a0:7f:e4:9f:a7:85:6c:6e:82:f7:c3:a8:
d0:06:81:6a:e1:e4:c2:a3:e0:82:dd:a6:d4:34:4a:
b2:23:cb:59:f2:a0:87:b1:08:2d:c9:e7:03:df:55:
08:b7:a8:4a:c0:98:85:b8:2c:7b:c8:64:d7:94:54:
a3:31:0c:64:4b:b9:3e:14:57:00:a5:35:23:ae:33:
f9:f9:cb:9c:01:27:ae:81:d7:a4:ed:44:d9:7d:1f:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:F1:5C:FD:21:CB:B0:36:80:AE:25:B1:98:13:69:1A:4D:CE:54
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Jn7xXP0hy7A2gK4lsZgTaRpNzlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.4.0/24
87.247.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:f5:59:ef:fd:6a:89:7c:24:08:4a:24:6c:a2:ae:c7:38:5e:
b0:ea:73:2c:fe:09:c0:0a:83:ef:8b:38:02:61:b5:bc:33:38:
51:4d:e2:f6:68:56:9e:ec:92:fa:ca:b2:e4:96:99:a9:f9:58:
68:b8:82:bf:ac:a4:31:5e:d2:df:8a:84:3f:f1:c3:ba:e9:3b:
cd:3c:87:22:bb:3d:25:57:45:62:ed:38:47:d3:3d:07:0b:15:
12:8f:ab:6d:7c:85:17:9f:10:7f:a6:44:25:01:e3:f9:cc:db:
af:58:7b:10:0e:a9:a3:26:e7:c9:32:3c:d5:5c:26:af:61:02:
7e:07:2e:5c:1e:4c:cf:ef:1c:3c:36:7d:a4:7d:ba:63:a3:f0:
07:df:50:0a:58:60:b6:83:44:2f:92:d0:b1:36:80:be:d6:46:
1b:3e:ce:8d:99:f5:29:ed:bd:8a:38:55:bf:b2:ff:1d:21:05:
3a:f6:7d:7d:1c:3f:c8:ae:e7:00:d8:c5:d8:c5:29:37:fe:31:
0c:82:2c:e7:f9:0f:62:20:64:53:2f:c1:94:4e:93:be:a1:cf:
30:c7:0b:30:c4:2f:a8:77:8f:31:11:2a:9e:50:ab:c6:ef:33:
0e:43:ba:f5:11:13:03:7a:a7:8d:e1:81:73:f7:46:14:17:b0:
63:56:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:22:25 2025 by rpki-client