Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/juIbMy-ZOag5FvgvGV0o5yTeEN8.roa
File: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (raw, json)
Hash identifier: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=
Subject key identifier: 8E:E2:1B:33:2F:99:39:A8:39:16:F8:2F:19:5D:28:E7:24:DE:10:DF
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019421B177C77F6744ECBA5EDD69AB2D0556
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/juIbMy-ZOag5FvgvGV0o5yTeEN8.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43211
IP address blocks: 185.188.104.0/22 maxlen: 24
185.188.104.0/24 maxlen: 24
185.188.105.0/24 maxlen: 24
185.188.106.0/24 maxlen: 24
185.188.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:77:c7:7f:67:44:ec:ba:5e:dd:69:ab:2d:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee21b332f9939a83916f82f195d28e724de10df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:c0:3d:a2:e4:46:9e:a4:06:00:a7:68:12:
3f:cd:e0:43:41:d6:0d:d9:8e:42:84:c8:89:19:39:
40:30:f4:02:85:5a:30:b5:6b:4e:9d:f4:59:c3:62:
e3:71:e8:a5:25:2e:95:18:8b:c7:f4:20:99:08:b0:
ab:ea:77:d7:30:8a:0e:ca:61:65:00:1b:bf:25:78:
5b:2a:35:00:71:97:e1:73:3b:ef:2c:c4:b3:4f:9c:
ae:5e:a2:0e:e4:82:10:25:af:68:74:a4:8d:9e:0a:
22:92:1e:55:75:31:8a:88:cb:7b:ae:97:eb:cf:70:
9b:99:5a:21:99:55:80:7c:a6:4e:d0:50:7e:6d:0a:
43:69:24:27:35:fe:39:8e:47:d8:16:51:a4:cc:22:
ee:d8:66:c2:37:ed:5c:eb:30:06:ed:6b:bb:51:46:
85:c4:48:23:d9:45:62:a4:13:10:48:71:2e:3f:2f:
c4:95:da:d1:89:98:d6:21:c3:f0:86:f8:bc:69:34:
1a:c3:52:f7:5e:c6:e5:e9:44:0b:95:f8:da:1d:1b:
f5:df:e0:55:f7:46:89:20:b5:90:73:a9:03:d3:08:
b9:e6:67:0c:97:9c:d8:93:64:e0:92:f4:5c:1b:16:
c5:a2:a5:c2:4c:5a:fa:8f:3a:11:6d:96:9b:b6:d6:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:1B:33:2F:99:39:A8:39:16:F8:2F:19:5D:28:E7:24:DE:10:DF
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/juIbMy-ZOag5FvgvGV0o5yTeEN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.104.0/22
Signature Algorithm: sha256WithRSAEncryption
10:35:8c:84:7c:de:37:0b:a2:a7:ef:2d:95:7c:ee:d6:3b:3d:
cc:d2:9f:c2:81:71:e0:98:b4:ff:0a:0c:3e:5d:cd:c4:3e:77:
ac:7a:a6:ec:4b:49:17:23:03:d1:d7:f8:d6:6a:97:b8:a5:88:
8c:16:94:88:08:51:3d:98:53:0b:2c:ac:96:e0:7f:ea:04:e3:
a7:e9:c9:72:07:e8:b9:b8:d0:17:c7:7d:df:ca:3d:cd:c4:75:
fd:1a:75:a9:c2:63:2a:e0:7e:58:50:fa:cd:2d:c6:db:81:22:
e9:70:b0:62:f8:3d:49:27:cf:39:e7:c7:fb:10:94:dd:e6:5c:
5f:0f:dc:3e:fd:c9:b1:3e:fd:f2:05:4b:28:02:e4:7d:ec:c9:
6c:c9:79:af:7b:9d:ea:22:4b:8a:1a:c8:4e:0a:a7:aa:53:48:
00:be:4d:16:20:a6:4a:ce:6b:8d:3c:1a:66:89:83:32:1c:b3:
f9:5b:f5:42:f2:75:2e:ca:9f:db:5d:d5:ac:c4:64:5b:90:b6:
bf:e0:28:35:6b:45:f3:ce:25:41:61:e5:ca:ca:ae:3b:4c:3e:
e4:2b:32:65:e9:ec:4d:3f:60:7c:f5:09:8a:5d:2d:21:39:8c:
73:ca:fe:22:33:51:af:c3:70:78:cb:35:31:42:67:83:bc:3f:
a6:7f:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:00:20 2025 by rpki-client