Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa
File: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (raw, json)
Hash identifier: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=
Subject key identifier: 25:01:9A:D7:50:49:EA:B5:B8:5C:89:30:AC:4D:8F:9F:79:A7:6C:21
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 01942521B6A4A237B6D31DDB701BD2904949
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.202.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b6:a4:a2:37:b6:d3:1d:db:70:1b:d2:90:49:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25019ad75049eab5b85c8930ac4d8f9f79a76c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:99:20:f9:a7:e8:96:39:ff:46:2e:a9:7c:
9f:48:b2:54:1b:2a:eb:03:06:bb:a9:bd:c0:57:66:
8f:18:ee:a8:6f:26:6e:8f:0e:cf:ca:ec:96:0d:e7:
12:07:0f:08:61:d3:33:a2:bf:4a:05:9d:ed:b2:27:
90:6f:36:39:2f:86:09:92:19:ac:85:b5:04:34:1a:
ef:c7:6a:88:87:b7:62:24:a2:b2:3b:e3:72:ae:7e:
ba:e3:63:a7:1a:0b:92:32:44:75:d5:c4:14:83:80:
a1:10:09:af:d7:d8:04:f9:d4:9f:a1:9b:cd:c6:50:
cd:9f:33:ee:25:b1:94:50:fe:ab:d5:34:66:27:83:
ae:73:4c:ea:75:ec:65:6f:c9:a2:95:09:5c:5b:b8:
b5:43:b0:48:6e:a7:90:69:b3:d2:1e:40:5b:d7:a0:
b2:1b:b5:36:50:46:b0:bb:93:ce:6a:de:e8:75:92:
0e:91:d4:7b:50:47:70:80:4f:d5:91:11:6e:61:fa:
ef:61:f4:65:10:7f:58:c8:5c:d7:ab:f4:91:5c:32:
77:b7:93:e5:fb:4f:9c:e6:81:9a:ec:de:f6:46:2e:
54:7c:f4:b4:e8:3b:47:e1:53:28:7f:cf:86:b6:f5:
17:db:fd:af:63:68:18:c9:04:e1:e1:f0:7b:22:16:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:9A:D7:50:49:EA:B5:B8:5C:89:30:AC:4D:8F:9F:79:A7:6C:21
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.103.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f6:83:ea:fb:0d:fd:be:63:15:e8:a2:12:5d:92:2b:15:0d:
02:cb:e7:fb:3c:ab:0b:5b:46:0b:21:d1:6e:3b:10:7d:e1:7f:
2d:43:79:ab:d0:f3:d4:84:ec:8a:3b:57:96:dc:76:4c:00:49:
25:c5:99:38:97:5f:d2:2b:57:03:39:98:59:a8:fd:50:73:c1:
2e:1b:69:47:5d:13:8c:e8:a4:39:b5:10:3b:85:b3:8d:65:be:
5d:ca:d4:da:38:2e:23:e1:1b:42:af:c8:94:ce:3e:c2:b9:bd:
03:7d:6c:f4:a5:47:10:40:da:73:f1:d6:e8:52:bb:8d:cb:52:
d8:0c:92:02:0a:04:36:35:42:2c:bb:b7:53:65:e1:38:6f:3e:
14:4f:ad:40:df:d1:3d:0c:45:b7:13:f5:61:e0:43:7b:18:09:
2f:72:4b:42:5c:34:3e:ad:da:00:24:c0:75:f5:c6:83:b0:cb:
e8:50:a6:bb:cc:82:7d:fe:66:06:74:bb:24:9f:2a:f4:05:46:
c2:53:57:39:b1:d3:9e:15:89:c1:8b:8b:d1:84:b4:31:a4:2f:
85:da:4d:ab:30:e2:c2:b0:5e:cf:ce:bc:f7:b8:ab:03:43:cb:
cf:09:57:22:b4:13:b7:92:23:2d:57:28:6e:97:bc:1d:96:32:
e3:0d:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:39 2025 by rpki-client