Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/JqsmpwtOqjyRz6vPptUiZgce7K8.roa
File: JqsmpwtOqjyRz6vPptUiZgce7K8.roa (raw, json)
Hash identifier: pfrW2tfjY6bKg2OyQ0AT6gz0/WFDKcYI71ThpGRK95k=
Subject key identifier: 26:AB:26:A7:0B:4E:AA:3C:91:CF:AB:CF:A6:D5:22:66:07:1E:EC:AF
Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial: 0194252205474485469C5259607705AC3E2F
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/JqsmpwtOqjyRz6vPptUiZgce7K8.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 45.141.28.0/22 maxlen: 22
91.199.167.0/24 maxlen: 24
2a0e:c9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:05:47:44:85:46:9c:52:59:60:77:05:ac:3e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ab26a70b4eaa3c91cfabcfa6d52266071eecaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:3d:e4:6a:5d:a8:d4:86:9f:27:0e:7d:65:
e4:1e:20:70:55:dc:9d:ca:5d:46:e2:2c:12:81:d4:
fb:6e:96:90:04:f8:f1:0c:8b:5f:c1:8a:f4:f4:17:
f1:ca:72:87:9b:08:51:be:3f:15:5f:3d:4e:41:cc:
e1:e1:57:f9:5e:6e:70:86:17:c7:20:6d:42:4f:d6:
e0:e9:dd:86:0f:d7:2f:94:9f:26:c4:11:5e:47:4e:
ee:20:d4:cb:2a:31:2a:71:08:cb:de:ad:59:c5:e9:
46:49:7d:d4:58:71:bb:1a:27:24:9f:7e:d3:63:8f:
f8:ac:2c:e1:11:de:d2:30:07:b6:9b:4a:a7:58:f7:
9c:b7:0e:1d:65:26:08:0e:2c:79:87:c6:a9:b2:1c:
4a:45:03:98:7e:9b:fe:63:98:73:c7:2f:2d:fc:de:
1d:e7:a6:53:8b:1c:ac:40:37:4b:4c:75:7d:11:09:
90:d0:93:e7:c2:58:f6:94:51:6d:57:cd:a6:2a:ea:
c6:38:cb:c2:3d:6c:be:fe:38:14:b0:c0:50:d6:74:
61:ab:ec:ea:48:44:8e:63:dc:c0:be:6e:3f:1a:0c:
d4:74:7b:2e:38:ab:72:b1:70:11:07:6f:ea:11:74:
8d:ec:32:38:49:6a:79:7c:94:10:06:9e:8e:38:1b:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:26:A7:0B:4E:AA:3C:91:CF:AB:CF:A6:D5:22:66:07:1E:EC:AF
X509v3 Authority Key Identifier:
keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/JqsmpwtOqjyRz6vPptUiZgce7K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.28.0/22
91.199.167.0/24
IPv6:
2a0e:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:c6:78:fe:0c:7a:06:ac:f3:a3:37:f2:c6:a9:78:73:bd:4a:
8f:86:13:04:49:58:0a:92:4e:99:3f:3b:ed:c6:b9:95:ec:8b:
98:64:a0:ee:41:82:f0:88:1b:e9:e2:f6:bd:00:a9:e1:f8:28:
a0:88:1e:6f:fe:17:b6:b4:af:66:c2:88:55:b9:ca:67:6c:2a:
5f:29:55:6f:bd:fd:29:52:1e:0a:39:c1:b9:d5:08:9a:02:98:
64:a5:c9:9b:f0:f5:9f:6b:03:fc:2c:cb:c4:e7:5f:dc:f1:7e:
0d:17:61:df:9e:03:b6:06:27:0d:b7:04:07:0e:2b:5d:91:21:
5e:0b:51:9d:67:51:ca:a0:2e:8b:16:97:81:9d:5b:51:9f:6d:
fb:97:ad:4b:93:3d:e1:8c:02:78:3e:ef:a4:1b:0c:71:cc:3b:
43:1b:5b:b6:5b:bc:d5:c8:cb:4f:42:ed:60:5f:7e:fb:6c:2a:
73:2b:be:f3:55:51:22:bd:6c:b7:3b:ed:95:fb:a8:e7:2c:af:
b7:dd:27:29:20:3f:2f:c9:40:0b:e5:5e:e2:aa:0f:d1:d6:d5:
9e:bc:b4:e1:05:29:91:81:a4:77:e3:1d:f5:e6:11:77:f4:3c:
84:6a:1e:80:04:fc:3e:94:a9:85:f3:7c:31:d5:37:9b:4e:88:
d4:e5:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:53 2025 by rpki-client