Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/jq_1ppFWb5g9HX-Mw-WYljosNes.roa
File: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (raw, json)
Hash identifier: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=
Subject key identifier: 8E:AF:F5:A6:91:56:6F:98:3D:1D:7F:8C:C3:E5:98:96:3A:2C:35:EB
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 01941F8C218229A8ADF7F95E5C472E0844A0
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/jq_1ppFWb5g9HX-Mw-WYljosNes.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47452
IP address blocks: 94.141.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:82:29:a8:ad:f7:f9:5e:5c:47:2e:08:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eaff5a691566f983d1d7f8cc3e598963a2c35eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:da:4e:eb:6d:a4:8a:af:11:7a:48:91:58:
42:bb:23:f2:2c:c8:38:4c:88:0b:81:88:11:d1:d7:
4f:6c:fc:da:63:c7:ff:19:06:b6:99:77:31:4e:95:
4c:86:9b:da:98:79:dd:7b:07:2e:26:fe:ea:b2:65:
8c:44:52:7b:71:d7:ed:2d:15:a2:7c:52:57:07:f0:
39:50:77:5d:c7:1d:1d:e2:ef:1a:81:92:8f:f2:af:
26:85:88:34:af:01:04:55:2f:ce:ab:4a:1b:5e:21:
22:d6:c1:77:fb:ce:a6:37:e4:6f:e2:4b:29:21:4f:
fd:e2:8c:22:30:d9:68:cb:9f:be:4e:a9:0b:6d:5b:
db:ba:96:7c:e0:8d:a7:78:ce:68:11:f0:fc:02:bf:
d7:92:97:dc:65:02:1f:d5:ee:4b:04:f3:a9:04:73:
7e:01:5f:ee:00:d5:f5:0c:45:1a:f6:d1:b4:8d:8d:
00:6d:0e:42:54:60:2f:5c:66:79:e9:3b:76:fa:dc:
55:af:c5:79:87:07:3d:bb:29:0d:ec:ed:00:98:ca:
44:62:ca:93:c6:95:16:50:53:cf:95:bb:b0:b5:ff:
7a:38:e7:e1:d1:e2:f6:1f:d1:98:2e:51:31:c5:c9:
94:19:07:96:e1:81:48:0e:1b:74:3e:06:b6:40:a2:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:F5:A6:91:56:6F:98:3D:1D:7F:8C:C3:E5:98:96:3A:2C:35:EB
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/jq_1ppFWb5g9HX-Mw-WYljosNes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.64.0/19
Signature Algorithm: sha256WithRSAEncryption
af:cf:24:f2:7c:77:d0:64:61:97:53:de:d2:37:80:a8:b0:3c:
cc:59:2b:bb:f2:62:7b:29:a8:70:bf:fd:f8:80:6d:15:6a:fd:
98:45:8a:bf:25:91:f8:4f:98:4d:6a:52:23:24:4c:30:58:d0:
81:0a:89:05:54:e0:2e:eb:01:b5:16:16:49:3e:8c:89:9a:33:
99:40:8f:fe:e5:70:f5:d6:1b:29:70:d7:51:23:30:ef:1b:ab:
68:3e:9e:2a:20:66:d6:61:f4:a5:6d:2c:8f:3d:86:70:a9:6f:
5e:f4:2b:c1:b6:f4:53:c8:ff:5d:50:53:03:4b:c9:c3:f1:69:
b1:3e:fe:36:a3:56:fb:80:f1:d2:e9:70:ab:fb:65:ca:d6:2f:
e9:73:3d:c1:4f:b3:17:b5:73:91:23:d7:dc:73:33:58:33:d6:
fc:f0:68:61:4a:26:aa:00:00:e6:ef:a9:b2:98:19:3f:0d:cb:
77:6b:56:27:b6:e4:c5:06:d2:b2:d3:c6:77:f7:5c:83:b3:b9:
56:2e:2a:fc:bb:58:c4:a6:7d:c6:09:fe:b0:63:66:90:81:11:
31:5e:9d:72:82:28:b4:6a:05:c6:02:73:46:0e:95:38:3e:05:
4f:82:d9:6f:e3:c1:f6:5e:24:f2:18:8c:3e:b2:e1:23:02:76:
d7:01:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:33:02 2025 by rpki-client