Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JljJiSWFuhVdyGXatEB9x9JdnZk.roa
File: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (raw, json)
Hash identifier: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=
Subject key identifier: 26:58:C9:89:25:85:BA:15:5D:C8:65:DA:B4:40:7D:C7:D2:5D:9D:99
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01942068337369F50CFC377A93796F101C02
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JljJiSWFuhVdyGXatEB9x9JdnZk.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209732
IP address blocks: 193.151.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:73:69:f5:0c:fc:37:7a:93:79:6f:10:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2658c9892585ba155dc865dab4407dc7d25d9d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:1b:32:f0:81:a6:32:ca:24:21:df:f9:ae:
75:1d:e7:bb:3e:fb:b8:bc:30:7b:86:29:4b:8c:ad:
e8:e0:ff:c7:05:8a:a1:3c:8a:b8:96:a1:16:dd:23:
ee:28:af:13:1d:6f:63:e5:af:a9:9b:85:b5:eb:95:
06:32:0b:a2:b6:84:f8:a4:b3:b0:72:97:24:df:a9:
3c:6c:30:28:25:4a:4b:f5:94:2f:72:ff:f2:f0:9f:
00:7c:08:43:49:84:e7:3c:92:27:68:e3:9d:e7:97:
55:b0:48:c3:c3:7b:3b:6e:30:21:70:6e:c2:24:4c:
de:12:c9:16:5b:6f:d9:cf:1f:94:02:2d:41:aa:75:
71:6a:e5:6d:5f:ef:45:38:9a:03:7f:ab:73:18:9b:
59:37:31:14:66:bf:48:e4:d4:20:c7:79:b5:f9:2a:
fe:ac:27:09:cf:25:20:9f:87:24:c5:8f:1f:5e:9c:
e1:a5:5d:37:fe:e1:7e:4a:00:e5:fc:08:e3:97:a9:
37:32:c0:db:60:03:cb:2d:fa:9f:bb:b3:ff:93:6f:
bb:f5:92:56:37:45:bd:6c:fb:ab:1f:be:ac:e8:17:
87:39:87:0e:e4:e8:7f:1a:6b:f0:ae:3d:7f:8e:db:
8d:c6:38:d7:fb:a1:89:e2:c8:f6:0b:cb:49:68:8d:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:C9:89:25:85:BA:15:5D:C8:65:DA:B4:40:7D:C7:D2:5D:9D:99
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JljJiSWFuhVdyGXatEB9x9JdnZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.165.0/24
Signature Algorithm: sha256WithRSAEncryption
70:43:73:f5:37:ee:d3:e7:cc:ad:e8:e0:d4:56:48:45:6d:7a:
27:95:f6:e8:59:60:97:a4:db:76:26:2a:51:18:cd:87:4d:c2:
64:17:b8:1e:c4:aa:8a:ba:9a:29:eb:63:c9:f2:6a:c0:4c:33:
2a:ec:c7:51:88:62:fd:59:e8:80:93:a4:74:ab:e7:69:b1:92:
1c:e4:d2:99:4e:1d:99:4e:1e:13:a6:45:e4:de:10:71:83:38:
27:dc:e1:dc:7c:02:cf:02:e0:57:71:35:a2:99:11:0f:ee:63:
5f:6d:03:54:04:a8:62:4e:1c:3e:72:ba:41:41:c5:19:5a:19:
fc:aa:81:df:65:bb:3e:67:11:a3:26:97:9b:5f:02:ee:cc:92:
ea:39:af:f1:d4:45:62:03:1a:dc:67:e3:4f:c8:ba:f9:56:0e:
5c:52:9d:12:42:6a:c9:ed:96:59:0e:c3:a8:c3:83:4c:af:31:
09:ba:1d:34:33:5a:b6:aa:50:9e:dd:22:86:75:03:e5:91:cf:
1d:f1:41:dd:ce:be:ee:c6:e2:98:44:b7:d3:51:8e:5c:33:db:
47:a4:b5:ef:46:24:0c:b5:72:1a:6a:22:7f:a7:93:42:a9:7d:
dd:89:3c:1d:f2:2e:5c:48:3d:c5:8d:6f:15:15:fd:a1:7b:f2:
57:dd:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:49 2025 by rpki-client