Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/jI7_nEj5zlq6z4OVYNSKuGo62t4.roa
File: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (raw, json)
Hash identifier: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=
Subject key identifier: 8C:8E:FF:9C:48:F9:CE:5A:BA:CF:83:95:60:D4:8A:B8:6A:3A:DA:DE
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 019423D7F35EF03FD70205BDC87B7900D6FD
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/jI7_nEj5zlq6z4OVYNSKuGo62t4.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209810
IP address blocks: 194.50.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f3:5e:f0:3f:d7:02:05:bd:c8:7b:79:00:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c8eff9c48f9ce5abacf839560d48ab86a3adade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:3d:ad:97:c8:cf:7e:00:92:a5:95:d4:96:
e4:9f:72:25:0c:da:b5:cf:a7:05:90:cf:10:d3:82:
47:bd:18:10:59:5f:ff:c1:0d:92:86:f9:8f:6b:5e:
58:81:fa:04:88:08:d9:77:06:c3:63:3e:7e:78:8d:
48:bd:5c:3d:de:b2:c2:62:34:03:12:c3:7a:b8:ab:
c6:08:c2:5f:84:9c:29:8c:aa:af:b2:db:60:56:0f:
61:0c:3d:5a:a4:f7:8a:d0:d5:61:66:18:2f:02:7e:
c8:6a:dd:93:c7:29:ef:c3:95:16:07:38:13:ac:c7:
65:fb:c0:68:97:ff:0b:b6:4d:a1:38:0e:b0:d1:3d:
47:46:ed:31:e0:35:8e:02:e3:aa:1b:e7:97:6b:af:
a8:aa:b0:86:66:86:ab:b8:68:bf:2d:4e:3d:ac:6d:
75:51:9c:59:84:e9:46:9c:08:88:e4:4a:91:ed:c5:
e0:6e:0e:4a:97:a0:9f:68:e1:2f:a0:ad:c2:66:43:
64:29:ad:1d:17:0d:be:04:6f:e8:8a:66:77:0e:19:
9b:af:6f:dd:71:83:26:03:a9:66:5d:69:52:58:b6:
64:49:bd:1b:60:23:c2:9f:85:f9:ed:73:5b:3d:9a:
f5:ff:71:50:26:e8:4c:3c:e7:df:79:7a:f6:fb:eb:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:FF:9C:48:F9:CE:5A:BA:CF:83:95:60:D4:8A:B8:6A:3A:DA:DE
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/jI7_nEj5zlq6z4OVYNSKuGo62t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:82:f6:b4:a5:96:7d:7b:66:a2:e3:23:67:b3:37:d6:50:70:
81:9b:6d:12:a5:6e:e9:08:24:69:85:4c:85:ed:7d:1c:df:86:
1a:23:01:72:b1:c3:db:7f:f9:68:20:32:66:a0:fc:5f:3b:ec:
f2:89:c7:41:65:3a:64:e5:ad:3b:72:3c:38:3b:bc:ea:54:c4:
0a:4d:84:4f:2e:03:17:51:85:25:ce:30:ce:e0:82:e9:dd:7b:
a3:0b:3f:8b:03:2f:53:09:38:d3:03:90:3f:ab:62:65:7c:1e:
ca:fc:15:3b:69:23:29:f4:3e:2d:d4:52:00:4a:70:d2:fa:47:
4b:31:b7:aa:f3:a3:c1:ce:2d:95:a7:ff:ca:3b:51:ba:ab:8a:
93:16:9b:94:57:a4:d2:db:0c:73:13:06:d3:1d:40:20:ee:b0:
fa:35:3c:4c:fe:56:61:82:20:86:09:b0:68:9b:f7:e0:62:d5:
d9:96:3f:f1:d9:be:fa:30:3e:94:05:74:1f:40:1d:d3:44:0c:
05:e9:87:a5:21:16:5b:2e:7d:40:e6:32:f1:34:c1:0d:92:0a:
d3:dd:54:8c:a4:2d:a2:7f:b4:d6:dd:c0:db:5b:97:95:64:f2:
1d:aa:f5:e3:1b:37:e5:ed:f4:22:eb:0f:8d:c2:81:88:8c:f7:
d3:f1:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:26 2025 by rpki-client