Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jj99dXTCmEq6-apXdBmRrC5IIZA.roa
File: jj99dXTCmEq6-apXdBmRrC5IIZA.roa (raw, json)
Hash identifier: eJAmjo6166WprYTagRQ/Xod+qDktzCdIPHvRL29NA00=
Subject key identifier: 8E:3F:7D:75:74:C2:98:4A:BA:F9:AA:57:74:19:91:AC:2E:48:21:90
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B29DB20FE2516D6620B9E4709A718817
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jj99dXTCmEq6-apXdBmRrC5IIZA.roa
Signing time: Wed 29 Jan 2025 15:11:06 +0000
ROA not before: Wed 29 Jan 2025 15:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199439
IP address blocks: 93.113.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:9d:b2:0f:e2:51:6d:66:20:b9:e4:70:9a:71:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 29 15:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e3f7d7574c2984abaf9aa57741991ac2e482190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:b2:1e:c4:02:a4:7b:c9:78:1c:d3:14:da:
13:1b:cc:63:82:b2:01:b9:8c:51:01:a2:6d:3a:4b:
bd:d8:0d:e4:41:2a:4c:64:c4:a5:85:c1:33:d2:a3:
ff:0d:5e:b4:bb:cc:12:c0:85:cb:81:a7:06:25:69:
38:82:95:ab:c9:f7:a7:35:ae:e5:e5:11:cb:0e:d3:
98:cb:d4:c4:5c:cc:d2:60:b4:78:68:48:b8:79:c1:
31:aa:17:5d:d1:41:fb:1d:13:e2:48:bd:63:7d:27:
8f:8c:92:37:e7:7c:eb:4a:58:cf:14:60:f4:07:c1:
52:92:8d:38:01:d4:dd:46:db:b9:b6:2a:9d:18:0b:
dd:a8:a0:e2:7c:10:a3:a1:0c:d4:05:38:9b:10:88:
9d:d0:4a:42:85:ca:37:6c:aa:2d:09:fd:ea:29:2c:
53:c2:22:40:02:66:5d:88:e4:8e:fe:96:02:e9:37:
2b:70:54:47:86:ff:8c:f1:6c:ff:bf:3d:fa:7e:83:
86:29:02:1c:7f:28:f8:32:34:55:58:9a:d9:48:58:
60:c8:3e:cd:14:c8:c0:f2:5b:62:39:95:3c:dc:9e:
35:0e:35:36:9d:d3:72:53:ab:9f:f5:33:02:c9:8d:
64:47:73:b8:1f:ae:cc:af:a6:e9:8d:78:34:ba:30:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:7D:75:74:C2:98:4A:BA:F9:AA:57:74:19:91:AC:2E:48:21:90
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jj99dXTCmEq6-apXdBmRrC5IIZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:64:75:a1:fc:f0:68:58:50:63:b2:5d:b7:24:73:4c:3e:fb:
e6:40:d9:c7:2d:ee:dd:de:f8:42:3b:ae:8a:83:88:61:c8:8c:
4a:a8:81:4d:38:33:68:cf:89:18:80:f0:30:cb:02:17:39:3c:
8e:b8:f1:ac:99:c8:d5:c1:7d:9f:b3:f7:3d:28:03:c1:16:33:
d4:54:ca:c6:c7:28:46:13:11:b7:fd:23:24:d9:13:ae:79:33:
4e:a3:d3:0b:2b:a2:5b:ea:59:a4:4c:2a:1b:a0:14:de:e1:15:
fb:a0:98:71:27:8f:49:8a:9e:08:e1:02:f7:ec:4a:60:62:e3:
9f:0c:26:be:4f:cc:a0:2a:42:de:57:12:45:5d:fa:9a:ef:6d:
12:eb:9b:f7:41:44:59:76:1b:32:f8:db:d1:2e:73:60:86:76:
c8:15:af:2f:7c:a6:62:c3:22:0f:c8:51:5f:0b:95:62:09:d8:
6d:ba:c9:5e:11:13:9a:ec:6a:6b:91:f1:b3:f1:97:8a:82:e9:
b7:70:21:ee:99:7e:74:57:58:af:04:38:9d:ab:10:4f:2c:2a:
f6:9e:56:96:3b:3f:f3:d4:c6:16:56:38:73:34:aa:20:70:e5:
87:e3:b0:1d:fd:97:17:91:97:d1:f2:1e:1a:88:34:b1:3f:27:
ad:83:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:13 2025 by rpki-client