Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/jugqzSPR-0ldHom0_xkR53XyLHs.roa
File: jugqzSPR-0ldHom0_xkR53XyLHs.roa (raw, json)
Hash identifier: +3psaXdJuyPggmQWBeIUw9hKrdTT6O3Z6jepxI5OERo=
Subject key identifier: 8E:E8:2A:CD:23:D1:FB:49:5D:1E:89:B4:FF:19:11:E7:75:F2:2C:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0194282B12F85AB13B16343991D4160A6105
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/jugqzSPR-0ldHom0_xkR53XyLHs.roa
Signing time: Thu 02 Jan 2025 17:58:19 +0000
ROA not before: Thu 02 Jan 2025 17:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35575
IP address blocks: 209.42.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:2b:12:f8:5a:b1:3b:16:34:39:91:d4:16:0a:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Jan 2 17:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee82acd23d1fb495d1e89b4ff1911e775f22c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:b7:c1:84:59:b5:89:c0:05:48:1b:4c:e5:
e9:7c:09:47:1b:0c:10:18:2f:93:5e:49:40:56:e3:
74:d3:57:49:b5:f7:bc:b6:7d:34:5a:ec:76:32:3c:
ca:21:02:38:24:6b:cd:df:82:10:b0:d6:81:7f:42:
e8:34:89:8d:30:93:f6:58:47:58:ca:cb:17:4b:4e:
ad:30:69:5a:6b:28:e8:74:3b:e5:68:73:0d:37:e8:
44:4c:a7:d4:44:be:c7:e5:76:bb:7f:3e:46:bb:2f:
29:26:9d:48:f5:22:74:8e:d3:fe:fe:e9:80:05:f1:
87:5f:29:43:3d:af:c9:ad:3b:9e:5e:07:fa:b2:23:
00:9f:94:61:c1:e0:eb:04:b7:cf:f5:31:e2:e7:3c:
58:31:d9:fe:cb:ec:02:1b:00:c8:b8:69:c1:26:ab:
d5:cc:1e:f7:c1:38:56:af:c8:1d:b0:3c:6d:2c:3f:
e9:b7:f3:72:c0:1b:ac:16:02:18:37:b7:f0:91:13:
f9:1c:b6:34:8e:a7:c3:ce:83:87:f3:4e:f9:1c:02:
43:04:1a:f5:38:4c:bf:b8:c6:75:60:f6:eb:b5:0f:
a2:84:71:fe:98:4a:79:0c:4c:e0:97:61:74:68:85:
8c:23:7d:69:d7:58:02:ad:04:e7:23:b1:e3:c6:0d:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:2A:CD:23:D1:FB:49:5D:1E:89:B4:FF:19:11:E7:75:F2:2C:7B
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/jugqzSPR-0ldHom0_xkR53XyLHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.42.2.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a2:6d:59:0b:ab:ff:21:45:dd:cc:45:af:be:5a:14:50:7f:
5b:a3:10:a6:7a:b4:42:a2:4f:54:4e:d3:d5:4d:45:eb:51:5c:
9a:a5:d8:60:22:32:eb:f9:45:01:db:15:76:6e:f7:ef:14:84:
85:07:f7:6f:62:e4:9b:8d:11:70:fb:d8:61:02:6c:90:71:92:
40:47:04:da:7c:52:08:dc:0a:49:e1:f8:4d:5f:c5:18:77:0c:
bf:e6:8c:dd:ea:d0:51:06:f2:b0:05:58:08:5e:5d:c4:99:5c:
29:0c:58:dd:67:56:7b:b4:5b:ae:4b:1d:17:1b:59:1e:32:9a:
f3:7a:37:d4:48:69:ff:b2:d8:32:02:89:d5:bf:fa:b4:97:47:
b6:77:36:55:fe:04:03:c9:d0:bd:74:e0:4a:14:8a:2f:be:c8:
68:06:b5:14:90:fd:63:64:9e:1a:d9:99:6e:45:71:18:9d:b4:
01:a5:08:fc:f6:23:5f:f2:4a:c9:1a:0f:6e:27:47:39:34:82:
37:9d:ab:b5:2e:1a:d2:db:ca:76:6f:5f:1b:6b:c9:e3:ce:01:
de:70:e1:3b:5c:bf:5d:38:1a:61:8b:6b:dc:b1:a2:ba:55:38:
3d:c7:b0:0d:b1:e8:1e:7b:17:b6:6d:bc:53:b6:86:7a:5a:a9:
1b:0b:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:20:33 2025 by rpki-client