Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/jhr_GFldqDt1qMGamMwZGXuEY9U.roa
File: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (raw, json)
Hash identifier: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=
Subject key identifier: 8E:1A:FF:18:59:5D:A8:3B:75:A8:C1:9A:98:CC:19:19:7B:84:63:D5
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019425FC068EB5E2E0D2592EFACF740FF634
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/jhr_GFldqDt1qMGamMwZGXuEY9U.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203451
IP address blocks: 185.92.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:06:8e:b5:e2:e0:d2:59:2e:fa:cf:74:0f:f6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e1aff18595da83b75a8c19a98cc19197b8463d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:ef:b7:3f:ae:41:c0:c2:00:7d:1e:cf:61:
a7:dd:68:3b:af:17:42:bf:51:56:70:9b:19:13:fd:
2a:fc:13:f8:46:28:2f:45:00:9d:c8:59:6e:15:35:
69:7a:ab:98:41:c7:35:15:79:2e:16:bb:21:90:e2:
95:de:95:ee:c4:6b:84:45:d7:cc:47:d3:6a:23:2c:
9c:a2:e0:3a:48:f0:00:b5:29:d8:f5:39:1e:16:08:
0e:44:17:15:d3:6a:d6:00:ad:8f:b0:21:17:a5:c8:
6f:a6:0c:63:ea:96:c5:2f:a0:47:2e:73:70:22:63:
c4:a9:c0:0f:16:5e:cf:3c:13:18:bb:30:cb:25:6f:
f8:26:bc:67:fe:d2:ed:99:d8:f6:cc:d1:5b:59:58:
70:6a:36:13:60:7f:e4:0f:89:17:6c:dc:2f:ee:60:
44:ea:d3:4f:68:54:2f:37:ab:73:7f:07:30:9b:35:
81:b8:26:d8:9a:db:0d:30:43:d4:4d:74:e1:ff:00:
8c:c8:9c:d1:de:ac:3d:68:a2:68:69:13:6d:a9:cd:
39:64:f3:d7:e0:85:80:55:6a:53:18:d5:7c:b3:66:
55:0c:35:7a:9c:96:55:d0:b0:dd:cc:07:c1:a6:7b:
c1:7c:58:df:b8:c5:48:1c:3b:5d:42:4c:bf:27:a6:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:FF:18:59:5D:A8:3B:75:A8:C1:9A:98:CC:19:19:7B:84:63:D5
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/jhr_GFldqDt1qMGamMwZGXuEY9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3f:f7:c6:8e:a0:41:ec:03:6e:66:5d:26:a3:e3:fd:71:d4:
42:be:dc:35:88:4b:1e:5f:43:cd:da:13:f1:89:91:ba:10:ae:
1b:33:e0:1e:04:a7:89:ea:16:fc:6b:80:a1:12:8e:ac:ff:77:
1a:bb:6e:0d:65:43:0c:75:77:06:65:f7:c3:d5:f5:49:ae:4e:
a9:0f:4d:2f:cc:65:da:f8:9b:8c:da:97:72:0f:be:dc:f6:40:
88:1d:49:96:f3:f9:48:3a:f1:5d:ed:04:35:60:72:22:f6:3b:
00:c3:12:38:c9:1d:15:01:c1:f9:6b:d5:2f:fb:67:2d:6e:42:
10:8c:9c:ac:b4:23:1d:cb:e6:7a:6e:25:5e:7d:1c:04:29:23:
dd:88:70:ec:13:f8:45:9e:48:25:10:8a:99:50:4d:05:57:db:
01:57:32:b7:22:ee:e7:a7:42:bc:ad:7f:6d:1b:22:71:dc:7d:
b1:5b:5e:4b:80:46:44:87:c8:90:ba:c6:15:6f:6e:da:72:62:
96:3d:d5:92:ee:44:98:ff:ab:ac:24:6b:ce:3a:28:21:d8:3b:
36:f5:39:58:0c:b2:9f:14:e4:87:cf:42:20:4b:3e:e4:67:61:
b6:28:70:2e:d8:c6:df:a4:58:26:f6:43:6d:89:7b:5a:f8:47:
9c:36:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:06 2025 by rpki-client