Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jq1X3eNQQJad_sHiOrqiZqMH6BY.roa
File: jq1X3eNQQJad_sHiOrqiZqMH6BY.roa (raw, json)
Hash identifier: 03DK9QczS6l1lOox+Hw2hw7GSl8cHqngtcZ5xm6i7ro=
Subject key identifier: 8E:AD:57:DD:E3:50:40:96:9D:FE:C1:E2:3A:BA:A2:66:A3:07:E8:16
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D731FC5E7A894942809C544BB9AF02
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jq1X3eNQQJad_sHiOrqiZqMH6BY.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216234
IP address blocks: 193.109.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:31:fc:5e:7a:89:49:42:80:9c:54:4b:b9:af:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ead57dde35040969dfec1e23abaa266a307e816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:75:1d:c7:14:e9:b9:b3:89:67:3b:47:9a:
f5:c9:0e:93:65:2f:f1:d3:6d:0f:7a:38:55:89:c9:
65:c5:21:2b:dc:d1:84:9b:79:ad:23:b1:5c:d9:38:
40:22:dd:ac:59:8f:68:b2:80:2c:1e:5a:d4:bb:bf:
2f:7e:b1:d1:ae:ec:fe:f7:a9:ea:8c:13:0e:3b:77:
8f:7e:a6:98:5a:c7:e6:6e:1e:45:bf:81:27:84:b1:
5a:af:27:a7:cf:7e:55:91:0d:4c:0b:61:ed:09:cf:
88:9e:de:3a:75:9a:da:dd:6d:cc:e3:71:47:ad:54:
5b:aa:2c:c5:7c:13:6e:d0:c8:4b:dc:de:54:5f:f8:
30:d0:57:36:be:9c:c3:a6:63:a6:cb:66:f5:b6:d2:
fe:fe:07:97:99:1b:32:3a:85:91:78:1a:f1:94:cd:
d4:b4:9d:b1:a3:c5:74:e8:10:2f:d8:4f:4a:a3:01:
ba:66:75:71:12:91:9e:b2:f6:ec:d4:06:25:b0:2d:
ea:c9:b6:9b:32:f7:42:a5:61:33:b8:9e:61:3b:f7:
3c:c2:1a:b6:6c:9f:d3:24:88:f3:b3:90:6c:5e:00:
a6:38:e6:00:09:8c:e1:eb:67:07:f4:19:84:be:04:
41:96:a7:6d:75:0d:94:b2:e0:62:e9:29:7c:07:c6:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:57:DD:E3:50:40:96:9D:FE:C1:E2:3A:BA:A2:66:A3:07:E8:16
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jq1X3eNQQJad_sHiOrqiZqMH6BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.85.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e4:01:94:7a:8e:30:ef:6d:51:3f:f0:fc:07:db:87:d7:b5:
7a:7e:72:bb:54:6b:68:17:ef:95:1d:07:28:6c:18:8f:0e:fe:
fb:85:7f:d8:5d:13:7d:55:6e:f3:6c:bc:50:ce:a6:cc:64:30:
d8:32:5b:b8:d3:16:00:70:86:04:3d:ce:17:31:dc:88:e7:e9:
97:bf:ba:36:f8:ac:22:c7:d7:50:ca:b6:3c:87:b3:5d:14:39:
2a:e9:33:b6:04:ec:ce:f5:83:6a:55:d8:03:a7:ea:40:8a:b1:
26:40:df:ac:76:91:90:93:d9:32:df:1a:24:01:bc:51:f2:c0:
b2:c3:dd:bd:51:5e:e3:61:ae:ce:ac:9a:db:59:a6:7d:53:56:
d9:76:91:56:cc:5e:0e:b6:81:3f:de:35:d5:ea:af:12:fe:92:
02:c7:ff:cf:80:34:9a:fd:53:02:c5:52:9a:85:01:ba:34:ce:
41:ca:fb:84:3e:63:cb:31:c6:85:2e:2d:f4:62:8e:1f:9c:e8:
27:0e:94:fe:f4:02:f6:51:0a:91:cf:ec:cf:5c:c6:9c:e1:92:
d5:92:03:b8:fd:85:ad:f9:15:15:ae:a1:0e:38:d2:b1:65:ca:
d5:86:09:28:0a:a1:2c:7b:4c:7a:48:72:39:52:2a:e4:0c:cc:
fe:60:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:27 2025 by rpki-client