Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa
File: JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa (raw, json)
Hash identifier: ErYlkkNh49mz7B2O46c+uSN3yYpaocdKkRzHsCd2I3A=
Subject key identifier: 26:81:70:4F:00:2F:FB:F7:3D:64:B5:8C:C8:13:44:58:33:EF:7D:AB
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 0194274841D075F16E373AD6B567A14177B4
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210891
IP address blocks: 83.97.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:41:d0:75:f1:6e:37:3a:d6:b5:67:a1:41:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2681704f002ffbf73d64b58cc813445833ef7dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:04:99:fb:b1:d1:d6:a1:7a:3d:60:cb:60:
37:26:5d:c7:4c:42:5a:62:da:ed:0c:fa:8d:b7:8f:
27:3e:58:bc:46:f6:eb:34:66:94:a6:48:13:5c:d0:
01:98:c1:01:84:38:cb:84:2f:87:9c:d6:2a:d6:59:
b9:7f:10:7d:5a:ee:1c:da:c6:91:a2:9a:3e:f2:3d:
2e:89:8f:3e:aa:2c:d9:d5:de:9a:bc:bb:32:08:54:
86:9a:cf:bd:24:30:1a:d1:f7:fa:71:b1:3f:d0:2d:
9c:31:92:7b:68:42:e9:d6:90:d2:fd:53:4a:cd:b2:
2b:4d:0d:fc:53:ca:8f:08:79:bc:99:b0:bd:03:94:
1e:3e:53:99:ea:fb:00:9d:35:c9:91:bb:b7:77:27:
9f:a5:35:64:fc:35:bf:b5:60:67:37:03:2e:d6:a0:
24:05:8b:ac:6a:27:01:f5:9c:fe:f2:bf:ac:46:20:
4d:d0:8f:9a:55:51:a5:d9:d1:1e:e7:98:c8:db:c9:
23:27:1b:ab:11:8b:d8:db:83:41:e7:35:c0:55:cb:
36:17:3f:66:c8:da:84:d2:0c:11:04:e8:b4:cc:26:
8a:6b:68:e5:b8:85:45:49:80:a8:9d:59:b1:f3:5b:
67:c7:cd:5d:37:35:f3:df:a0:3f:bb:79:31:c1:51:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:70:4F:00:2F:FB:F7:3D:64:B5:8C:C8:13:44:58:33:EF:7D:AB
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:04:6c:0a:48:dd:2b:30:f8:14:91:1b:5b:f9:61:8a:e1:b8:
a1:14:d9:e6:6b:e7:58:12:82:79:1f:7f:2c:14:a2:24:75:a1:
7c:7f:6e:4a:45:3c:7c:15:db:99:ca:ca:20:86:3c:b4:a4:fc:
ba:30:e6:bc:2d:15:d0:94:10:d4:b2:8b:3f:8e:91:5b:63:33:
95:4d:32:31:d7:32:65:00:12:6a:3d:85:1d:53:62:63:bf:d7:
a3:c6:4c:c7:ff:bf:47:c0:be:6c:bd:ab:c8:95:8c:0a:f9:80:
61:6c:d4:17:bf:96:12:80:b9:20:d6:40:81:72:cd:cb:ef:c0:
7f:2c:35:63:02:52:32:2b:96:a9:d0:87:e1:19:75:1b:fe:2f:
0c:dd:e4:e0:ce:65:3c:c1:32:5c:74:48:63:f9:af:21:a0:ab:
c2:90:7e:5a:26:b3:ba:2f:f6:72:60:fe:e0:f0:d3:03:f2:70:
5d:15:4e:e3:56:a3:dc:51:1e:fa:f5:0a:50:98:7a:94:4a:6a:
21:c7:30:40:53:d3:ed:80:69:03:23:0b:66:41:b0:fa:83:1c:
32:e7:9d:5b:55:06:3c:19:8b:73:18:b3:ee:32:f3:4c:05:b5:
81:ba:6a:38:6b:a3:1a:54:c1:6e:41:70:cb:a2:bf:5f:7c:1a:
00:ca:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:48 2025 by rpki-client