Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AJpw_2i3EoQNYD9kunMPYOdByi8.roa
File: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (raw, json)
Hash identifier: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=
Subject key identifier: 00:9A:70:FF:68:B7:12:84:0D:60:3F:64:BA:73:0F:60:E7:41:CA:2F
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58E0001C67DA870367EECAF0383C6
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AJpw_2i3EoQNYD9kunMPYOdByi8.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202580
IP address blocks: 185.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8e:00:01:c6:7d:a8:70:36:7e:ec:af:03:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009a70ff68b712840d603f64ba730f60e741ca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:3e:26:b3:98:44:fd:bd:5c:80:95:7c:0b:
af:99:7d:78:ac:0d:f6:d9:dc:e7:2f:52:88:01:14:
ff:f0:85:5a:4a:2c:91:8a:bb:9e:f8:47:8e:4c:e0:
21:e8:30:46:7b:91:74:7c:08:e9:33:9e:3b:f6:eb:
8c:53:df:17:fc:20:1d:5e:49:df:19:d4:58:74:f0:
c7:ea:3d:06:cf:26:c7:0b:ec:2f:3b:58:41:6e:2f:
0c:9f:0c:a9:c1:ae:25:aa:3b:ae:93:88:7d:fc:99:
37:74:e9:ee:39:c1:25:99:0d:a8:df:ae:b6:d9:5d:
99:20:0b:b0:36:6e:87:56:f9:52:dd:08:b1:e4:5e:
6d:66:10:c3:b2:c2:7b:53:6c:17:dc:aa:8d:9a:1f:
43:76:3e:5f:2e:be:d0:3a:42:84:15:a8:28:75:85:
89:56:02:d6:48:f5:be:ca:75:83:f6:ae:05:77:d6:
00:cd:1a:cc:40:28:c3:55:f3:6a:fa:13:a9:b3:60:
e6:5d:8f:48:7f:7d:88:48:12:0b:68:e3:d7:64:7c:
16:4c:8f:ec:52:6f:8c:c1:dd:ab:a7:4a:d0:97:b5:
d5:c6:f3:1e:5a:ed:99:d4:ed:2c:5f:37:d2:07:38:
cc:15:76:43:44:fa:4d:e5:7e:f0:87:e6:93:96:2f:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:70:FF:68:B7:12:84:0D:60:3F:64:BA:73:0F:60:E7:41:CA:2F
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/AJpw_2i3EoQNYD9kunMPYOdByi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:f9:c9:43:71:7d:e6:1b:96:c0:6e:a4:31:87:af:7e:3b:
33:75:2b:35:c9:a7:3e:b7:3f:68:e0:16:8d:45:c0:8b:af:60:
5a:8c:33:07:6d:28:d1:8a:de:96:f8:6e:78:06:71:92:96:52:
52:1f:36:28:37:1f:2d:87:96:8b:3d:a6:6e:9f:92:83:ad:35:
13:6c:cf:47:71:13:e6:4e:bd:ff:63:40:c0:27:16:ba:c8:f7:
8a:34:f1:ab:ae:85:91:93:d8:19:1c:4d:6d:8e:27:64:78:3f:
38:58:0e:63:bb:42:2e:5d:b2:9d:5a:23:25:75:a8:be:5b:9a:
53:b7:f5:44:21:b4:8b:be:74:5d:97:2f:3a:df:2d:5b:95:9b:
e3:1f:3f:e6:11:d6:2b:99:30:cf:95:fb:e1:9c:10:a8:33:d4:
83:49:dc:ae:ea:1f:3c:96:a5:ec:89:50:5a:86:3c:fc:3b:a5:
12:6e:94:06:0d:bd:0e:28:43:e4:7e:4a:86:be:c5:25:2a:36:
9e:3f:ba:8d:74:f8:fe:5a:05:12:4f:27:71:26:fc:27:08:64:
29:91:5d:05:4b:a1:9f:ae:e3:fe:cb:7a:50:24:85:bb:ee:7d:
f4:75:b9:57:8e:08:e3:c6:b7:55:a3:a4:40:56:8d:9d:a4:d9:
b8:05:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:54:28 2025 by rpki-client