Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/JoXcYev6DySlst62DTDcDz1JN0Q.roa
File: JoXcYev6DySlst62DTDcDz1JN0Q.roa (raw, json)
Hash identifier: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=
Subject key identifier: 26:85:DC:61:EB:FA:0F:24:A5:B2:DE:B6:0D:30:DC:0F:3D:49:37:44
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0194221F52A7E00F363CDBA8D2B81ACCA45F
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/JoXcYev6DySlst62DTDcDz1JN0Q.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 87.236.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:52:a7:e0:0f:36:3c:db:a8:d2:b8:1a:cc:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2685dc61ebfa0f24a5b2deb60d30dc0f3d493744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:63:63:59:1e:5a:fe:1f:cc:6c:4b:40:71:
e7:7a:7c:4f:84:b8:2e:bc:a1:b5:02:83:e1:65:6d:
cd:d9:45:95:4a:bc:70:9b:6e:9f:f0:1f:e3:f8:7a:
13:20:ee:a6:52:57:bb:f3:47:8f:51:ef:a4:58:a7:
de:a4:9e:63:34:19:a2:0e:37:bc:e9:4a:df:10:51:
82:b5:54:e4:1f:02:53:46:37:f9:b8:a7:26:2f:bb:
1f:cd:71:d2:97:56:f5:ec:31:5f:b0:11:11:77:b5:
cd:97:07:af:93:37:82:47:8f:1e:55:ab:c7:c7:24:
df:d9:11:6f:d1:77:8d:0c:c7:31:c2:4a:2d:8e:29:
df:a0:2b:25:c8:e6:39:27:78:45:1c:9d:31:76:b9:
7a:02:0a:4d:ce:fe:0d:43:00:92:32:aa:8d:cb:6d:
e1:83:1d:3a:d2:4f:3a:a9:8a:22:be:10:e3:c8:79:
49:bf:80:62:9f:14:7b:fb:88:bf:36:5c:82:ec:87:
a1:cd:f4:ba:fd:bc:ad:c6:e3:c7:43:d4:b9:8a:04:
2e:dc:d6:b0:3b:85:23:7f:f7:b8:51:c2:02:9b:f1:
3c:dc:9f:ec:69:b0:a5:73:9d:ef:42:61:ac:cf:9a:
15:52:f4:5d:67:48:fd:bd:bb:83:97:57:a4:8c:98:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:DC:61:EB:FA:0F:24:A5:B2:DE:B6:0D:30:DC:0F:3D:49:37:44
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/JoXcYev6DySlst62DTDcDz1JN0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1c:b1:9f:64:8b:c0:c3:15:53:42:3e:06:65:a0:9d:b9:a4:
7a:00:1b:97:02:df:86:e3:1b:0c:f7:51:9e:ba:35:3d:e0:e1:
c8:92:d9:32:90:38:a2:8c:fc:2e:ce:b2:fd:92:2b:67:3b:df:
a9:e3:5b:6e:ef:8d:3a:41:61:0d:71:67:e4:dd:83:d0:3e:e2:
19:de:c4:37:ce:ee:b8:a9:66:a6:e5:5d:05:36:ee:16:dc:a9:
25:a5:5f:8f:b8:15:b3:9a:1e:ff:d4:e3:ba:ac:e9:64:0d:68:
c0:40:0e:c4:21:85:ff:6e:43:c7:6e:f8:e0:a1:9b:08:eb:18:
4a:2c:da:79:17:b6:f0:73:c2:6c:84:ce:76:74:55:9f:34:3e:
0c:a8:fa:18:74:5f:b4:91:9f:0b:1a:2e:ae:c7:f0:a7:b1:ca:
6d:ed:d1:af:ea:e6:5d:c5:32:47:aa:d4:45:de:d6:66:bc:82:
29:0c:c6:49:27:55:64:a8:ea:be:d6:77:b4:e3:2f:ce:c0:c7:
4c:9e:3f:99:fa:58:48:31:e2:28:1e:cf:81:47:fa:08:ba:8b:
d4:09:dc:54:c1:08:62:ab:62:bc:1a:57:2b:eb:72:b9:18:a9:
fe:1b:e7:da:7e:aa:79:e8:fc:58:5b:91:99:4d:97:3c:a6:75:
f6:1f:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:17 2025 by rpki-client