Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/jYsRIvoDURhQER-g8gsgtrlE-uw.roa
File: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (raw, json)
Hash identifier: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=
Subject key identifier: 8D:8B:11:22:FA:03:51:18:50:11:1F:A0:F2:0B:20:B6:B9:44:FA:EC
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019424B402EE21EEC2CB86E77AFDC1E92543
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/jYsRIvoDURhQER-g8gsgtrlE-uw.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44138
IP address blocks: 193.109.218.0/24 maxlen: 24
193.200.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:02:ee:21:ee:c2:cb:86:e7:7a:fd:c1:e9:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d8b1122fa03511850111fa0f20b20b6b944faec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:88:08:b2:90:b7:d9:d6:85:ce:bd:f4:7c:
3d:0e:69:4f:00:ea:a8:94:30:02:ac:cd:41:94:3e:
21:3a:c1:4a:12:c9:fd:50:a8:a5:ed:44:2e:ae:60:
71:44:3d:80:d0:8d:4d:8d:63:cf:ab:1d:10:c0:87:
7b:aa:02:7f:71:09:a5:07:ea:05:da:66:9d:d0:56:
28:71:31:bd:7b:5f:e5:cb:dd:57:2e:9f:83:3f:3a:
e7:23:51:75:51:8b:65:62:df:3d:2d:a1:e1:3c:ea:
1e:56:30:35:a8:d4:bc:43:24:2a:37:ae:7c:27:b7:
b4:a8:b1:72:8c:d8:a6:e4:9d:e5:68:fe:c6:4f:f2:
fb:4c:6c:d7:e8:7b:dd:c2:52:ac:cf:81:62:db:e2:
16:65:ec:5a:13:2e:ea:ba:0a:a1:71:10:7f:e0:d5:
af:5d:de:36:07:74:71:fc:19:eb:8b:22:80:dc:05:
a8:a3:46:08:fb:4b:e7:60:df:b6:a1:fd:f9:2a:2d:
01:d8:d1:39:14:9c:d6:fc:d2:e1:f8:f3:a1:9e:c4:
e6:89:13:cc:8e:ea:a5:d4:6d:e4:e1:cf:94:ec:7d:
c3:5a:04:5a:15:03:00:92:64:ab:70:50:8f:46:50:
48:ac:6a:20:5c:5c:4c:42:65:c2:71:98:7a:d2:d1:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:11:22:FA:03:51:18:50:11:1F:A0:F2:0B:20:B6:B9:44:FA:EC
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/jYsRIvoDURhQER-g8gsgtrlE-uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.218.0/24
193.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
29:49:92:8f:cb:ff:f8:4f:f0:75:56:02:b1:27:81:cc:aa:f4:
d3:33:7f:ef:9c:11:c3:e3:eb:07:5e:ca:f9:45:ce:93:99:60:
f0:93:f2:2d:53:29:3f:81:43:10:cd:a4:dc:1e:40:fb:0c:f2:
e3:74:0c:b9:4a:d1:a3:22:d0:62:23:ad:65:1f:86:78:13:70:
0b:bb:eb:58:fd:46:ab:c4:90:20:56:c9:b3:55:f7:f9:89:30:
3e:7b:6a:17:90:01:eb:70:61:61:24:63:bd:c2:5d:ce:61:68:
61:af:23:41:49:d8:ad:a3:2e:ca:64:25:89:34:5f:f6:61:1b:
9c:e6:4b:ae:69:f9:fb:68:30:92:65:75:8b:32:53:ff:c9:94:
56:07:eb:a5:06:92:a7:b2:e9:7d:90:88:22:5b:a0:5a:bd:89:
ee:aa:e3:1f:f0:fb:d8:2b:2c:0a:ac:76:f8:e7:93:46:a8:37:
2f:29:47:19:5c:8d:48:4a:e1:b3:1b:78:c5:f8:a9:5b:66:28:
df:44:0b:bc:84:29:a3:b8:36:9e:df:61:9a:22:5a:92:2a:52:
c7:66:f1:2d:a6:b3:2c:3c:53:98:b5:9c:4b:17:3f:04:a6:00:
4f:ad:a0:cf:7c:a7:e6:f4:31:c4:7b:a3:c1:46:e3:11:ac:d0:
fe:98:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:50 2025 by rpki-client