Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/jlPrG3yw9VWSwdIgD6U56n3FJO4.roa
File: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (raw, json)
Hash identifier: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=
Subject key identifier: 8E:53:EB:1B:7C:B0:F5:55:92:C1:D2:20:0F:A5:39:EA:7D:C5:24:EE
Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial: 0194222029FC56E2AAA668D2634C2D3C2F15
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/jlPrG3yw9VWSwdIgD6U56n3FJO4.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210444
IP address blocks: 194.9.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:fc:56:e2:aa:a6:68:d2:63:4c:2d:3c:2f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e53eb1b7cb0f55592c1d2200fa539ea7dc524ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:0a:0d:20:1a:72:b5:9d:31:d4:7c:6d:b7:
74:58:a2:c7:93:cf:00:b3:fe:f8:ca:d8:76:c6:fb:
5c:fb:9f:5c:1e:ea:44:61:13:aa:ef:f8:a4:61:34:
c7:3e:7b:68:32:9e:ae:66:d8:44:ab:4d:17:da:c8:
ba:b3:86:7d:91:73:cd:61:c0:7f:ce:15:d6:1b:7a:
f6:9b:55:49:06:15:b2:0e:e4:76:d2:6d:21:c4:29:
9d:80:38:f0:90:67:80:ea:e4:1e:c8:80:1a:06:d5:
6c:77:e2:ca:4d:5c:65:a2:b8:bf:ba:ca:c6:04:b0:
54:ac:48:d4:68:22:a9:42:a3:0c:b7:5a:98:6f:7e:
d4:58:97:c2:70:88:55:14:d5:68:6b:d9:6a:f8:d6:
e1:7c:26:e8:f8:82:62:cf:07:dc:24:2e:13:3c:07:
ea:80:93:04:f6:0c:9d:e8:56:96:22:35:93:ab:92:
d7:9d:3c:a6:32:fe:f2:d9:c9:0c:21:4d:fe:c9:af:
eb:8b:50:79:72:e2:a2:b2:a0:01:bf:14:b7:ef:63:
4f:9a:4c:55:4c:29:7c:e9:55:64:b2:ad:52:37:d4:
48:e3:f5:fc:36:d7:33:83:5a:9c:12:7f:4b:44:8c:
21:05:a9:f7:5d:da:52:a0:b9:f7:9f:23:63:e3:c1:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:EB:1B:7C:B0:F5:55:92:C1:D2:20:0F:A5:39:EA:7D:C5:24:EE
X509v3 Authority Key Identifier:
keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/jlPrG3yw9VWSwdIgD6U56n3FJO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:75:6f:ad:ce:69:c9:72:f4:f9:fd:3e:fc:1f:dc:8a:b6:86:
7f:b5:22:da:df:eb:e1:24:25:cd:d7:14:93:68:fe:8f:22:d2:
89:87:d4:3b:9b:63:a4:f4:35:ea:66:2d:3e:96:a4:c5:cc:fa:
37:ec:8a:8d:6b:11:b6:63:9a:d5:ef:3d:6a:a3:20:69:59:c2:
bb:4c:e3:63:c4:8c:86:f0:5c:28:56:aa:47:e0:ff:c0:76:df:
cf:b7:5c:23:b9:65:8f:ba:36:69:d2:56:5b:93:d7:41:a6:0f:
f0:5e:4a:1b:96:df:9b:b0:63:65:31:74:fd:a4:be:7d:1a:ff:
21:b9:1d:de:a1:bf:c0:3b:02:31:40:0a:e9:12:82:c0:eb:76:
5d:fd:60:5a:04:46:45:23:c0:65:32:3f:3b:ff:20:77:c1:7e:
88:85:6f:7d:b9:03:f4:75:f3:b8:2a:e7:bf:22:24:1c:41:93:
4d:59:95:4b:33:5c:fe:eb:f2:11:c6:8b:b3:bc:ea:a3:4d:10:
be:d8:cb:8d:a5:b2:4a:ab:75:3b:a1:2c:05:89:9e:2f:f9:a8:
a3:d4:09:b6:e8:b6:d8:d2:11:2b:00:04:ce:df:13:08:7e:ff:
11:f8:3b:3f:26:a1:89:77:ba:bf:6f:0c:fa:e2:7a:a3:11:a1:
ff:2e:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:06 2025 by rpki-client