Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jb3i9dYOfLeNJJaD1MI-_tDdRts.roa
File: jb3i9dYOfLeNJJaD1MI-_tDdRts.roa (raw, json)
Hash identifier: X0HAeNEyzYVz1f3Z6M4VCvs7fNGhO9oDAnv4i0D/H0I=
Subject key identifier: 8D:BD:E2:F5:D6:0E:7C:B7:8D:24:96:83:D4:C2:3E:FE:D0:DD:46:DB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486A9DE246117A2780D277EC3C05F5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jb3i9dYOfLeNJJaD1MI-_tDdRts.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199520
IP address blocks: 194.132.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:9d:e2:46:11:7a:27:80:d2:77:ec:3c:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dbde2f5d60e7cb78d249683d4c23efed0dd46db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:e5:df:19:50:8e:90:e3:80:a9:fd:0d:bd:
c0:00:a0:d9:81:2b:9e:21:e1:94:f0:01:21:5f:f1:
f3:6d:08:b9:b5:c4:7d:92:bf:fd:2c:9d:7c:c2:ed:
6a:ee:1c:53:8c:9b:df:1a:90:6b:d6:70:f8:d5:45:
e2:d7:48:c0:90:db:f6:47:9c:27:95:83:da:24:e1:
6f:ea:d8:16:1a:92:26:63:c2:e2:68:ac:2b:56:cf:
66:f3:85:f6:6a:5d:cc:a5:5f:ee:dd:72:e8:10:05:
ec:6b:ed:65:c6:12:0c:d7:3d:43:9e:f1:43:dc:8a:
e5:11:f1:22:55:77:0b:6e:1a:2d:d9:56:d6:d0:d8:
fe:f4:7f:6a:58:6e:06:0a:44:87:b3:89:d0:bb:bd:
23:5b:8a:de:7c:a5:a9:0b:56:c3:0b:18:cd:8a:9b:
24:b1:da:e8:84:82:72:a6:25:0f:92:b6:7f:91:3f:
63:21:17:a1:3f:0e:e1:a2:83:1d:ae:c5:5b:2d:84:
3b:5a:e2:c9:80:f8:57:e3:2f:80:40:82:c9:86:47:
a3:21:28:a1:50:d0:76:ac:01:aa:78:79:76:45:c4:
94:f7:48:4b:46:10:db:22:b5:de:28:69:a5:7c:29:
13:b4:23:0f:5b:92:f8:38:5c:49:a4:ef:c1:ce:cc:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:E2:F5:D6:0E:7C:B7:8D:24:96:83:D4:C2:3E:FE:D0:DD:46:DB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jb3i9dYOfLeNJJaD1MI-_tDdRts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.19.0/24
Signature Algorithm: sha256WithRSAEncryption
33:57:a4:55:17:b5:b6:4d:cb:81:af:54:6d:71:a6:49:13:38:
18:aa:f9:38:0a:e6:59:76:36:21:1c:80:bf:7d:2c:fc:8f:51:
78:1c:3b:5d:82:30:b2:44:5c:3e:fe:3e:de:96:9a:ba:ca:76:
46:6a:ab:41:8f:0f:fb:5e:e4:4a:8e:82:d9:92:ce:29:83:b9:
88:70:3f:db:3f:27:a2:a9:9a:15:ec:3d:45:ea:b4:9a:f7:22:
09:65:e9:94:a8:4d:e7:44:17:b6:7e:36:60:41:3d:78:3b:dd:
2b:e2:75:4e:85:53:e3:f4:9b:70:75:4c:e1:72:0f:0e:9e:f5:
d2:da:a6:36:2f:12:9c:73:00:62:34:9d:c0:6c:fd:3e:a0:b1:
a5:5b:64:00:35:b8:35:18:22:1d:20:0d:14:87:ce:52:fc:da:
65:5e:67:8c:5a:22:28:1c:51:eb:77:53:2b:78:57:e1:d3:66:
56:65:b6:25:b3:0d:c7:3d:11:e4:01:c1:f4:29:70:3a:ec:53:
7a:cd:d3:e1:3e:87:d0:78:18:93:46:74:13:dc:4c:5b:08:c2:
05:05:25:32:57:58:e8:35:39:d6:1f:4a:4f:b2:08:48:c9:94:
5d:c1:61:7a:b9:0f:42:4c:de:a7:70:89:59:42:3f:e0:7d:86:
df:8b:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:22 2025 by rpki-client