Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa
File: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (raw, json)
Hash identifier: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=
Subject key identifier: 25:CE:30:29:D6:6E:8E:D0:50:96:7B:19:48:66:7E:32:C8:77:B7:E5
Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial: 019421B256369B2E72E6D327DECE82CFB499
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198453
IP address blocks: 2001:67c:13e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:36:9b:2e:72:e6:d3:27:de:ce:82:cf:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ce3029d66e8ed050967b1948667e32c877b7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:b0:ee:dc:ba:b0:e9:e4:3e:87:c2:2a:3e:
c5:ee:b8:7f:a6:79:2d:b2:86:4f:ee:9c:3d:eb:64:
ea:69:9a:7b:ed:85:d8:08:f3:f6:b7:7b:43:fa:ee:
eb:f4:44:18:70:b2:f8:52:be:fb:cf:a3:aa:2c:d8:
1d:ab:82:c0:bc:b6:a3:da:b2:c8:2b:e1:61:e9:70:
e2:3c:d5:62:a2:7c:d3:88:21:49:18:e1:ea:7b:5b:
28:f1:14:37:1e:f7:96:37:67:90:f9:cc:20:08:28:
5e:39:c9:f5:32:e4:93:8d:b4:99:83:dc:ce:b1:ed:
aa:86:5e:01:72:ac:b2:24:09:0e:cb:0c:8e:73:dd:
a5:0c:fa:41:b1:7b:32:68:73:8d:80:df:00:59:fc:
1b:1b:66:55:eb:8e:70:6a:82:b1:66:33:e6:df:58:
47:91:b8:8e:78:67:d3:98:f1:b2:39:ba:b8:16:9b:
0c:d4:b4:12:e5:d9:85:59:69:dd:6b:85:28:9d:5c:
f7:18:07:9c:22:5d:01:a6:f4:0e:6a:b9:1a:60:f7:
d8:2e:d9:36:ab:3d:d2:5e:7a:9b:f7:8b:b4:f8:f5:
55:df:2a:50:cc:95:1b:1a:72:5c:05:4b:3b:74:3c:
cb:86:46:84:a6:41:9a:d9:c6:6d:b8:f2:3c:84:8f:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:30:29:D6:6E:8E:D0:50:96:7B:19:48:66:7E:32:C8:77:B7:E5
X509v3 Authority Key Identifier:
keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:13e0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:6b:04:35:23:9c:28:d7:6d:02:27:7b:ce:23:1b:97:8e:a0:
13:e4:0a:f8:ef:f9:cf:b6:5b:5e:d1:a5:6c:0e:67:3f:c2:dd:
61:ca:e6:02:00:ed:68:39:b5:30:c0:d6:ef:07:8d:fa:ca:24:
0a:ce:9b:a5:d5:af:fb:a0:84:53:56:b0:49:77:c5:78:69:19:
a9:68:fa:d6:04:87:ec:32:9e:c8:a1:89:f9:de:40:0f:fd:44:
f1:0f:cb:49:59:a4:20:e2:2f:fc:75:43:f6:ae:bf:28:bb:7e:
c8:12:94:9b:fd:b0:8c:d7:f3:77:b5:a8:8a:1e:79:25:61:ab:
a1:ba:5e:d7:ad:31:a3:22:5f:6f:7b:7b:49:16:e1:cb:24:3c:
12:b8:ed:28:9a:0c:c0:ea:95:36:80:af:2a:b1:b3:9e:a7:49:
fb:a1:81:6f:a4:ce:fe:ed:1b:23:ed:75:5a:db:56:df:80:0e:
cd:42:14:73:59:43:70:75:1b:4d:c5:0c:f6:40:01:8c:10:29:
6b:e2:73:fd:38:ed:4e:10:ff:d7:4c:80:85:21:86:d6:bb:35:
bf:b9:16:50:cf:be:ba:fc:5a:11:d4:8d:fb:e9:ff:e8:a8:d9:
13:64:df:76:bf:66:f5:77:66:85:2d:65:48:d1:0e:e2:c5:47:
01:50:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:14:33 2025 by rpki-client