Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/JpQoMr07IMCnzpUf3J5IOOFupZQ.roa
File: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (raw, json)
Hash identifier: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=
Subject key identifier: 26:94:28:32:BD:3B:20:C0:A7:CE:95:1F:DC:9E:48:38:E1:6E:A5:94
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01942369CB78797553FCFABA4351E391EC48
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/JpQoMr07IMCnzpUf3J5IOOFupZQ.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 378
IP address blocks: 132.76.0.0/15 maxlen: 15
132.76.0.0/16 maxlen: 16
132.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cb:78:79:75:53:fc:fa:ba:43:51:e3:91:ec:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26942832bd3b20c0a7ce951fdc9e4838e16ea594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:b2:75:14:6c:6a:6a:d5:cc:66:6a:1f:15:
4b:6a:1d:6b:85:fb:3c:c7:cd:ef:e2:dc:42:29:97:
ee:09:5e:61:6a:df:8a:2a:22:1a:c0:6b:bb:f7:11:
9e:4d:92:7d:f4:f2:8b:56:92:f3:9b:cb:42:e6:9e:
a2:ff:be:94:f2:36:0b:06:91:c6:9f:27:9b:ec:71:
ff:6b:22:78:00:22:02:15:1f:3f:4a:dd:65:ea:52:
ad:45:3b:11:ba:2e:35:e7:7f:0d:99:21:cf:3c:bc:
66:ae:1a:10:25:0d:cc:d8:43:6c:38:a6:13:4c:3e:
01:b7:2e:2f:9f:64:72:2e:bb:90:b3:ca:f2:64:d7:
82:79:d7:56:77:fa:7d:1e:56:69:a7:88:be:e0:39:
0e:31:54:04:64:89:34:d6:ff:f7:83:4d:57:97:f0:
1f:a3:41:00:d6:fc:f6:fe:a1:fa:26:dd:ea:66:2d:
51:e7:56:5e:c0:2b:39:34:a5:4e:59:d7:60:79:20:
01:b1:a1:86:60:d9:6b:a7:ca:81:ee:45:08:c1:13:
c7:0c:ed:dd:55:28:16:d4:e1:28:a9:29:35:6c:7c:
9e:5e:a6:e6:78:97:94:8b:e7:b5:5e:54:1c:f3:bb:
49:da:59:fe:d1:81:e7:28:24:bf:73:06:6d:19:9f:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:28:32:BD:3B:20:C0:A7:CE:95:1F:DC:9E:48:38:E1:6E:A5:94
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/JpQoMr07IMCnzpUf3J5IOOFupZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7c:b9:22:2e:e7:fb:0e:f0:1d:16:3f:a5:e3:dd:4e:4b:2c:9e:
7f:5f:4a:4b:ee:95:01:e0:88:f9:f8:95:14:0b:10:46:3c:d9:
17:3c:ff:ca:fe:1a:50:78:c6:82:83:f5:a9:a8:a0:a1:51:a5:
60:44:23:89:2c:12:d1:c9:94:12:d8:a2:d0:74:31:f5:a9:13:
5c:e6:f0:c5:18:51:15:e1:ed:d7:5f:13:84:4b:20:11:c5:ce:
21:52:68:4e:92:76:9c:1d:8f:d1:01:37:c8:fb:90:64:d0:23:
18:13:c3:2b:5e:55:6f:27:4e:0f:21:88:5b:5f:dd:94:e4:66:
33:0f:3a:6d:9c:5b:a9:13:93:82:6e:7c:84:62:4d:fe:f0:40:
cf:3a:f1:bb:0d:cc:69:ad:7d:7a:11:e1:61:bf:aa:a8:1f:35:
97:48:bd:db:c1:b7:bf:c4:46:ef:cb:7d:36:6b:9d:ce:1b:01:
ad:4c:a2:21:33:49:f9:d1:5a:b2:14:71:48:9c:e8:2e:69:06:
cc:7d:bb:5c:19:48:78:fe:8c:b4:9c:db:96:69:c4:f5:0f:a5:
a0:ed:85:48:7c:a3:fa:2a:ed:b3:f5:0b:17:f8:92:e3:39:f3:
41:e9:df:d2:eb:4a:69:79:66:64:6e:37:f5:7e:44:79:a8:24:
8f:a8:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:12 2025 by rpki-client