Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/jtdGItGjIscVK6iUpNCTUSGRedQ.roa
File: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (raw, json)
Hash identifier: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=
Subject key identifier: 8E:D7:46:22:D1:A3:22:C7:15:2B:A8:94:A4:D0:93:51:21:91:79:D4
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 0194252164CC3FA530F3A90B098039DA9A89
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/jtdGItGjIscVK6iUpNCTUSGRedQ.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15474
IP address blocks: 130.208.0.0/16 maxlen: 16
2a00:c88::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:64:cc:3f:a5:30:f3:a9:0b:09:80:39:da:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed74622d1a322c7152ba894a4d09351219179d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:46:6a:1f:50:04:73:3d:e7:0d:93:97:ae:
cd:2b:bd:ad:3d:84:dc:64:90:ca:13:ed:03:a3:95:
7f:d3:ac:1e:89:ef:a8:29:6f:dc:4a:a0:0e:d0:58:
9e:60:86:b0:b9:d2:53:1b:1f:43:ce:27:31:34:74:
6a:8f:07:af:bc:92:1b:4c:2f:1c:cf:d7:55:a0:29:
af:78:b0:3a:3b:e2:69:0c:9e:c9:72:f3:e4:fd:de:
a7:5c:93:21:56:b6:7f:65:1f:c5:ce:cd:9b:2f:4d:
7a:84:f3:8e:b8:10:ff:87:1c:eb:01:a4:82:7e:db:
1c:20:cf:3c:06:db:fc:ce:9f:88:82:cc:8b:e9:0b:
f9:b4:3f:7c:9b:bd:e4:0c:d0:e0:60:c6:66:e5:a7:
f7:8b:33:59:9e:9d:5c:df:be:53:83:70:39:e2:f8:
9f:67:f2:23:36:6c:d3:f9:0e:f2:db:60:ec:55:81:
63:8a:fc:fb:4c:29:22:bc:4c:48:cf:f7:21:e6:c0:
1a:49:ba:fb:61:04:14:a6:52:48:58:6c:b1:34:2f:
cd:76:e3:5c:29:53:d0:84:51:df:ec:2b:fa:21:cd:
96:4b:23:30:5a:58:5a:38:76:a7:d6:16:9d:ad:d2:
58:db:9b:ae:07:3e:69:26:b0:af:e8:84:7f:52:f3:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:46:22:D1:A3:22:C7:15:2B:A8:94:A4:D0:93:51:21:91:79:D4
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/jtdGItGjIscVK6iUpNCTUSGRedQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.208.0.0/16
IPv6:
2a00:c88::/32
Signature Algorithm: sha256WithRSAEncryption
3e:5a:5b:83:41:2f:04:2c:e4:fe:09:f9:ed:21:10:c1:c2:7d:
78:a2:d2:19:8c:e6:44:8a:eb:43:8c:68:c8:57:0f:2e:ce:4d:
a1:31:24:87:75:15:ae:0b:d4:fb:85:1d:37:f9:dd:93:aa:57:
e5:6d:47:23:d7:41:b1:fc:f4:e5:e3:3a:20:13:54:6f:c5:25:
ed:9c:ff:73:92:d8:db:c7:29:2f:b2:06:c6:f6:b9:0c:2b:7d:
d8:6e:b8:58:41:24:d3:9e:8e:fb:6c:a0:57:65:df:92:40:8e:
2b:5b:32:ea:39:79:0b:d2:9f:10:b7:63:58:65:21:df:c5:03:
1c:fc:dc:a9:e0:f8:8b:20:65:57:47:c6:91:15:1c:17:3f:70:
d8:71:8a:99:c2:b7:53:f0:b8:fb:ce:3d:27:88:77:db:73:f9:
d8:74:fe:23:89:c9:06:b2:54:52:96:eb:6b:ee:61:f9:2d:71:
70:c2:a0:86:89:7b:3e:0d:e5:67:5b:ae:29:8b:c8:21:76:b3:
e7:40:6e:4c:c5:49:a7:41:a0:73:4d:d4:f9:97:a8:5f:e6:ba:
ff:91:d5:df:96:5b:63:4f:56:a5:8b:07:aa:eb:27:af:71:ae:
5f:f8:55:8e:5f:8e:c9:06:04:ce:2d:4c:bd:c5:c4:1c:67:61:
26:93:49:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:38 2025 by rpki-client