Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa
File: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (raw, json)
Hash identifier: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=
Subject key identifier: 27:04:6D:B3:12:AC:1D:C9:5C:04:1F:80:E1:EF:19:67:E8:C3:E0:3D
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0196ECC0431A1303D0E8625F0AA45C7FF84F
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa
Signing time: Tue 20 May 2025 08:12:25 +0000
ROA not before: Tue 20 May 2025 08:12:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 195.248.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:c0:43:1a:13:03:d0:e8:62:5f:0a:a4:5c:7f:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: May 20 08:12:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27046db312ac1dc95c041f80e1ef1967e8c3e03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:9d:43:db:9e:e4:f7:9e:94:25:43:1e:55:
cf:ac:0a:11:9a:c4:44:b5:64:b3:a8:5f:4a:9c:2d:
dd:d3:12:8c:ec:cb:ae:c4:22:14:7d:05:a5:29:7e:
2c:12:12:38:60:15:2b:00:b5:42:14:9d:c7:bd:11:
a0:88:3c:8f:6d:95:7f:0c:8a:d8:fd:bc:85:3b:4b:
ca:7c:c2:6a:fd:68:23:45:ce:5c:1c:54:b3:80:52:
8f:15:01:db:c7:f9:96:a2:70:2d:bc:4c:b3:c1:71:
1c:b8:bc:a8:1c:de:7c:64:e1:6e:85:da:67:99:90:
b1:fc:8a:c6:5a:46:04:9f:28:b4:0d:1d:4d:3c:e7:
10:4c:27:98:90:c1:76:1a:a3:1c:ff:9c:80:0a:52:
4d:93:1f:77:f0:a8:34:59:2b:04:09:76:72:17:e1:
db:ae:46:ef:79:ff:0d:50:57:e9:64:c9:a4:f8:eb:
47:5c:03:46:d6:40:ea:53:12:82:e1:6a:a2:b7:a4:
b5:91:21:da:f1:d3:a0:5a:7e:e9:6a:a2:56:dc:b4:
0f:77:7e:57:cf:02:b2:20:29:fc:d9:b3:d1:e2:75:
92:18:36:4e:26:21:4f:a6:57:53:33:d3:ac:14:6d:
18:0e:d5:00:b9:54:7c:ca:26:93:20:40:06:10:e9:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:6D:B3:12:AC:1D:C9:5C:04:1F:80:E1:EF:19:67:E8:C3:E0:3D
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.224.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ba:e7:c0:38:8e:58:4f:ec:bd:c4:a8:73:ef:8b:68:ae:97:
14:d3:16:72:d3:24:59:ce:49:ce:e0:f0:90:ee:d4:77:b0:23:
7f:b4:25:3d:5f:f2:d3:65:0a:95:25:8f:2d:82:6c:d0:b8:68:
88:cd:55:9f:7e:59:cf:46:ef:e3:c6:f2:dd:43:b5:74:f4:05:
22:0d:1e:c6:74:93:4d:64:67:ee:fa:11:0e:be:88:a7:82:10:
a5:b1:25:d8:7d:23:a8:2a:a0:a8:7b:84:2c:42:5d:1f:55:b7:
c3:e6:11:d9:8f:38:47:3c:11:75:e4:b3:71:9b:33:b9:71:c1:
63:22:47:12:48:f6:76:11:c5:d3:71:d6:8e:e2:99:3b:ae:aa:
cf:67:f7:41:2b:2c:d6:3d:e1:de:29:60:28:fa:f9:1a:9e:eb:
27:79:ac:fe:6f:eb:89:d1:18:86:bd:d8:fd:13:a8:c5:f0:fa:
b6:48:ab:f2:89:d9:f6:bd:13:33:3b:64:98:e2:a8:2e:7a:6b:
08:82:fb:05:3a:a1:2d:eb:66:52:bd:36:75:2c:08:51:40:ac:
e0:98:a0:e6:33:c1:bd:24:c4:1f:f2:74:62:35:ae:1a:24:a6:
9b:81:c0:3f:9c:06:b6:27:60:30:a9:2f:56:fa:3a:02:2d:c6:
d9:1a:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:20 2025 by rpki-client