Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/o-JKFkGOw7b9iS81cGqL_sPqhTE.roa
File: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (raw, json)
Hash identifier: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=
Subject key identifier: A3:E2:4A:16:41:8E:C3:B6:FD:89:2F:35:70:6A:8B:FE:C3:EA:85:31
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019420D6134B5A78050E75194A78C14BC8E2
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/o-JKFkGOw7b9iS81cGqL_sPqhTE.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31221
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:13:4b:5a:78:05:0e:75:19:4a:78:c1:4b:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e24a16418ec3b6fd892f35706a8bfec3ea8531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:88:ae:a1:51:a8:93:5e:6d:3d:9f:0a:d4:
3b:39:93:c4:be:03:97:d0:ad:ff:ed:a0:e4:24:e8:
aa:6b:ac:4c:80:b8:6d:0a:82:7f:ee:eb:d5:f3:a3:
46:12:45:37:d8:3e:28:d2:0c:57:cd:74:dd:85:f4:
c1:24:b8:fd:48:4d:ac:4b:99:1a:53:43:56:fc:bd:
b0:9e:7b:71:94:1f:f6:17:34:c1:7b:4d:b6:98:93:
a7:66:d5:af:a5:a7:db:64:71:55:1c:55:d9:dd:2a:
67:8b:37:b2:6e:64:d3:35:83:52:6e:ff:71:23:34:
0e:05:23:a0:9c:02:ca:b3:e0:42:70:c6:28:81:b4:
91:3e:af:a2:8d:7a:7f:fd:be:df:95:25:cb:ee:a2:
cc:94:f7:cf:e4:32:02:84:55:53:59:73:6b:c0:8d:
06:f1:9b:7b:c4:12:bb:f4:58:e6:ae:6a:b8:31:e2:
14:28:28:e4:c6:bd:ec:90:36:3a:0f:53:87:e7:7f:
77:44:aa:5f:11:d4:01:05:94:d6:6e:b4:aa:8e:2b:
ea:3f:2c:ff:2b:e4:29:1b:05:fb:d4:3b:df:f8:07:
41:bc:37:0e:f2:67:bb:42:44:ef:ec:05:32:bd:16:
eb:22:b8:ef:4d:e7:eb:5d:44:8b:40:bf:8f:f6:03:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:4A:16:41:8E:C3:B6:FD:89:2F:35:70:6A:8B:FE:C3:EA:85:31
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/o-JKFkGOw7b9iS81cGqL_sPqhTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f3:3a:7c:71:c9:97:12:0e:8a:5b:e1:50:02:b0:57:a0:c2:
c0:4c:a8:cf:22:d4:62:5a:da:f1:9c:8a:6c:5a:f8:73:4e:ce:
ab:5c:73:0b:47:72:26:6f:6f:16:3b:24:39:b9:c8:b3:5a:97:
2e:71:c3:d9:63:39:b5:a3:54:87:62:5f:43:d2:3a:78:91:c4:
1d:a1:e5:b8:82:06:a0:67:da:44:c3:4f:a1:5c:7f:3f:fe:90:
c4:61:ec:2c:dc:f5:5f:56:14:e9:b9:99:85:dd:d9:dd:27:39:
fc:50:67:d6:86:5d:20:56:3b:86:4b:f5:c3:08:d4:e7:11:21:
54:99:27:8e:be:53:7b:52:f0:c3:f8:a7:5b:e7:13:50:a1:b2:
1c:82:9c:4d:b8:d1:49:06:ab:2c:be:d5:81:4e:09:db:2a:5a:
05:6b:6b:21:31:2a:f9:1f:71:9b:8d:ed:52:86:b9:b8:f1:ae:
5e:fc:31:02:ac:d9:e8:92:86:e6:0a:23:0f:c8:e2:d6:55:25:
0a:09:c3:c4:ae:7a:34:1a:c9:86:e0:14:b5:94:b1:17:1c:77:
d5:a1:70:aa:54:a3:3f:04:08:02:14:a6:86:ee:aa:42:20:09:
85:f4:33:4b:a5:22:e8:d5:37:72:1d:4d:52:6e:26:95:5b:63:
9a:14:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:39 2025 by rpki-client