Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jgVHZwye6FZuV_n_vkDhgZjIpB4.roa
File: jgVHZwye6FZuV_n_vkDhgZjIpB4.roa (raw, json)
Hash identifier: FyzzwZ29vZa5FnJWXJmQx8ns3uHZunXRQO5IqbEIaYI=
Subject key identifier: 8E:05:47:67:0C:9E:E8:56:6E:57:F9:FF:BE:40:E1:81:98:C8:A4:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B15606C894A8F5806D4AE13E89B54CC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jgVHZwye6FZuV_n_vkDhgZjIpB4.roa
Signing time: Thu 09 Jan 2025 12:41:19 +0000
ROA not before: Thu 09 Jan 2025 12:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.30.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:15:60:6c:89:4a:8f:58:06:d4:ae:13:e8:9b:54:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 12:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e0547670c9ee8566e57f9ffbe40e18198c8a41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:69:88:3c:cf:75:7a:ff:10:c5:a0:bc:fc:
75:19:47:f1:5b:3e:78:78:51:27:07:d0:2b:ff:52:
d5:68:75:94:01:c6:d3:22:7b:a6:2b:3d:82:dc:1f:
23:41:75:be:27:96:a8:d2:69:f8:fb:e3:69:36:e6:
01:8b:b8:bc:a2:b2:a1:de:05:bb:b2:e8:34:61:2e:
1d:c6:e6:de:11:e5:fc:35:07:d4:80:2b:fe:4e:9c:
04:c4:3d:b7:f9:9d:1f:02:eb:87:0e:9a:32:da:ae:
a9:c2:de:5c:f2:eb:2a:b5:2b:00:04:85:a5:e6:c2:
6e:18:49:07:3f:08:6c:8c:26:78:2c:78:69:16:24:
15:34:c0:75:8c:09:49:d9:e7:80:28:38:f3:c8:51:
90:df:4f:51:ae:a8:91:4d:dc:93:83:96:3e:7c:0f:
ad:94:53:4f:97:58:a3:ea:c5:9b:0d:47:5d:48:0f:
3d:ed:06:26:a3:75:6d:47:97:af:c2:c2:7e:bb:28:
8c:f2:98:b1:c5:dc:e8:56:99:e2:8c:16:76:0e:74:
81:66:8f:e8:f1:1e:6f:9f:64:07:e0:f7:21:cb:6a:
a1:f7:0e:31:60:25:5d:ab:20:b9:34:56:b1:d8:89:
79:8b:61:28:1c:62:b4:b8:e5:07:d3:ab:75:ac:36:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:47:67:0C:9E:E8:56:6E:57:F9:FF:BE:40:E1:81:98:C8:A4:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jgVHZwye6FZuV_n_vkDhgZjIpB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.30.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5c:39:a3:91:fe:92:cf:98:f8:4d:43:a8:39:02:e8:25:43:
6d:4b:e3:39:b4:14:dc:d5:c6:f5:67:de:57:3d:88:41:aa:a8:
f0:02:38:05:b8:c6:c2:bd:dc:d1:4b:3c:74:da:bb:d3:d5:7e:
8a:21:f3:24:f4:de:f2:1a:75:e2:ea:fa:da:2d:6c:39:36:34:
74:65:0e:39:4d:ba:7f:6d:62:3a:33:e7:b1:46:a9:bf:b4:ae:
13:86:b9:ee:93:fb:32:2b:9b:a5:68:e7:6c:2b:bd:e4:e1:e1:
ae:e0:87:d5:52:8c:ba:b0:09:c4:ef:32:c7:a9:24:9c:27:a4:
4d:7b:1e:cd:bb:af:bb:73:bf:b9:a0:0c:25:c6:6f:0b:61:79:
ad:7b:b2:8a:09:88:7f:ad:11:a7:00:3e:12:04:b3:0d:0e:c9:
09:58:7e:b7:fa:af:1f:d8:43:27:73:3c:94:ce:bd:e9:1a:e6:
a6:2f:86:5b:83:ce:b5:08:55:58:1a:ea:ac:9a:1c:36:d9:f0:
ca:8b:1a:cd:6e:9c:6a:74:5b:dd:55:56:3a:36:44:91:fa:6e:
e0:3e:bd:35:22:5b:4c:91:28:3f:14:1d:aa:ef:35:69:2d:e0:
6e:44:53:13:f7:32:09:3f:71:26:b0:46:55:2c:34:ae:4a:e5:
91:d4:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:05 2025 by rpki-client