Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/J4YI5g5mnxg3856b92eNNuGmrIU.roa
File: J4YI5g5mnxg3856b92eNNuGmrIU.roa (raw, json)
Hash identifier: iF5A1tE6chTfu+MDb2qdGUAfiEdE/dj1ZjnKqYMexPc=
Subject key identifier: 27:86:08:E6:0E:66:9F:18:37:F3:9E:9B:F7:67:8D:36:E1:A6:AC:85
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64BEE704E19BA94A7AE684DC499658
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/J4YI5g5mnxg3856b92eNNuGmrIU.roa
Signing time: Thu 09 Jan 2025 09:28:23 +0000
ROA not before: Thu 09 Jan 2025 09:28:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202543
IP address blocks: 91.148.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:be:e7:04:e1:9b:a9:4a:7a:e6:84:dc:49:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278608e60e669f1837f39e9bf7678d36e1a6ac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:ca:a6:29:10:fd:41:d2:80:44:f8:da:fc:
33:71:a0:5b:14:af:91:8a:fc:44:63:1e:0c:e2:62:
61:e9:5b:4a:69:9a:c3:9e:87:88:b9:bf:86:33:f7:
4a:47:78:44:9d:d7:40:e9:47:5e:13:cf:1b:19:e4:
9e:39:16:9d:60:25:95:20:f6:97:1a:0c:66:f1:c9:
50:a0:86:b6:34:01:ae:10:30:e6:0c:9f:d8:70:9f:
3d:3b:db:9a:2e:a4:d6:69:90:8a:32:ae:4e:44:05:
01:11:fd:3c:3e:e6:47:93:f8:57:0c:35:01:81:a8:
c5:82:57:05:2c:6c:b9:89:64:c3:e4:a1:c4:77:c6:
95:0c:f0:9a:32:4f:66:c6:c9:71:c6:ba:c8:0e:c8:
9a:9a:8a:74:31:d1:8f:f2:c5:91:b1:af:43:98:ab:
fc:54:fe:35:93:87:5d:14:ef:ea:3a:39:48:d5:6e:
af:de:db:da:e0:5f:f4:a2:d0:cb:c5:b4:8d:be:92:
4a:04:28:0d:04:0c:e5:28:40:3b:e1:5f:c2:31:b8:
45:df:d6:a5:84:97:b2:71:e4:06:af:d0:67:df:7e:
6c:70:35:b3:15:54:19:16:63:28:28:1c:c3:c8:59:
2a:78:95:56:d1:13:8c:21:59:b7:4a:ca:16:c6:8c:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:08:E6:0E:66:9F:18:37:F3:9E:9B:F7:67:8D:36:E1:A6:AC:85
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/J4YI5g5mnxg3856b92eNNuGmrIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.185.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8c:42:6b:7d:e9:b2:2c:6e:ff:97:48:cc:e9:7f:cc:36:e4:
a8:1c:e4:b4:b0:91:5e:70:fc:fa:8c:44:09:3a:dd:27:cd:b7:
59:d5:50:40:9d:66:8e:20:41:dd:4c:c1:4c:74:7c:11:cb:62:
5a:a4:47:56:2b:06:dc:cf:a8:d6:6a:84:d6:b6:5b:38:a1:3d:
25:ed:1a:b2:07:2a:30:e2:2f:58:48:77:b5:5e:4d:c3:08:dd:
83:2a:df:fc:e8:2a:9d:65:e0:8f:da:21:78:b8:bf:0e:1d:d2:
ad:32:82:f9:49:2b:d2:80:3b:ce:34:51:39:cb:62:7e:49:39:
8b:3c:28:ef:dc:88:52:d2:0b:6d:ce:54:9e:5b:ba:b3:19:7b:
58:69:fd:80:db:66:f7:57:45:21:58:22:c8:03:50:b3:20:d2:
22:26:4d:bb:68:88:65:57:82:a3:f3:21:f2:cb:aa:c8:ac:31:
e0:63:88:bd:1a:02:c8:e0:b0:e3:72:bd:6b:54:44:dd:c2:52:
af:91:a9:5d:08:aa:8f:c2:e5:7f:ae:fd:65:4e:0d:b1:40:d6:
70:21:68:39:53:78:48:c0:59:e5:17:71:a2:42:05:b5:c2:ce:
15:6e:8d:19:e7:07:79:a1:fc:0a:c9:38:a5:44:cf:8a:76:9d:
3c:10:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:21 2025 by rpki-client