Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ij_jY1B8G7JPOxZEgHI2au9jigs.roa
File: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (raw, json)
Hash identifier: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=
Subject key identifier: 8A:3F:E3:63:50:7C:1B:B2:4F:3B:16:44:80:72:36:6A:EF:63:8A:0B
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0194228E3156399B15B6D8B275510B76703D
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ij_jY1B8G7JPOxZEgHI2au9jigs.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29500
IP address blocks: 193.26.4.0/24 maxlen: 24
193.31.252.0/23 maxlen: 23
193.134.160.0/20 maxlen: 20
193.134.161.0/24 maxlen: 24
193.134.164.0/24 maxlen: 24
193.134.165.0/24 maxlen: 24
193.134.170.0/24 maxlen: 24
193.135.102.0/23 maxlen: 23
193.246.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:31:56:39:9b:15:b6:d8:b2:75:51:0b:76:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3fe363507c1bb24f3b16448072366aef638a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:b2:9c:77:50:ba:8d:de:df:6b:8e:4d:56:
ad:a5:8e:50:ed:95:b1:f0:ea:d6:6e:82:ad:b0:e5:
6f:28:17:ca:37:1b:a8:a1:9e:a6:5a:f5:45:e1:97:
cb:ca:e6:ee:ae:cb:33:96:c1:30:78:e1:ea:19:ca:
87:f0:46:8d:b8:79:2a:25:c4:b9:f2:90:65:56:21:
d1:64:55:08:b3:bb:93:84:9e:c6:9c:df:fb:06:36:
d3:3a:b6:f0:36:f3:ba:cd:02:5d:96:3b:8c:83:ea:
59:56:67:8f:59:a8:3b:17:8f:e0:96:67:1a:18:2d:
84:da:ba:e3:fd:4e:ca:d7:8f:bd:43:8e:9b:26:bf:
cb:57:bb:ae:71:7d:08:de:12:16:bb:88:b6:f7:03:
16:e8:99:ed:16:ec:04:50:d9:20:e8:9a:13:5a:95:
da:ab:9f:3f:fc:02:5b:d9:ac:40:88:ba:f0:a0:8c:
38:9d:07:10:5f:a5:59:b6:81:47:16:ee:f2:91:43:
8b:4e:f7:82:88:24:16:5b:5a:36:7a:d3:54:dd:be:
2a:13:5a:ec:df:44:b9:5c:b0:6f:aa:a2:39:81:a1:
a5:78:aa:32:41:61:85:1e:10:82:e8:e9:90:7a:43:
00:38:da:44:36:ef:93:72:06:28:4c:0d:a1:90:82:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:E3:63:50:7C:1B:B2:4F:3B:16:44:80:72:36:6A:EF:63:8A:0B
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ij_jY1B8G7JPOxZEgHI2au9jigs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.4.0/24
193.31.252.0/23
193.134.160.0/20
193.135.102.0/23
193.246.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:2f:d6:bd:1e:3d:ca:2b:f7:2b:6e:cf:06:24:85:58:00:eb:
8e:61:95:16:2c:50:21:60:ee:f9:35:ea:9b:d6:d0:f2:a3:1f:
49:a3:ed:af:5d:7d:ed:13:00:8b:72:76:eb:4c:33:a6:0a:a9:
71:57:af:fa:5a:82:47:1c:02:9f:53:82:95:50:a6:cc:83:5b:
9a:61:9b:a0:93:4f:c2:83:7e:3f:26:f9:96:f6:55:9d:ad:c9:
85:b3:88:d4:8d:a6:da:4d:04:9b:bb:ad:c0:80:83:e5:76:94:
ce:d4:53:41:f7:0c:7b:d7:44:47:13:a0:71:99:b3:e6:1f:8e:
07:ed:2f:ef:2c:2c:f1:9a:07:70:61:e9:2e:54:93:d7:ed:95:
52:95:e8:55:a2:15:f5:19:18:61:c7:c4:e7:79:c4:6a:57:74:
f4:33:3c:7c:b3:d5:6e:a6:5f:5a:20:f7:be:3d:e4:1b:bd:73:
83:db:5a:df:72:ae:a1:ad:3f:3c:5a:3e:4c:78:25:8c:88:e0:
3a:3c:6a:1d:4d:84:26:50:63:b8:55:79:c3:47:5f:5f:b5:ed:
dc:0a:c5:44:fb:28:fc:ee:47:5b:e0:18:70:a6:94:23:12:9f:
a5:0c:86:94:30:7b:ae:4e:ae:d2:db:ac:cd:01:07:98:23:64:
55:04:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:22 2025 by rpki-client