Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa
File: Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa (raw, json)
Hash identifier: IpIfcWNQZBdZ9PxdPrzjdBDVJEsfhwVsQP6UVO83urM=
Subject key identifier: 26:1F:3D:95:2F:BB:70:92:56:C7:CC:EF:BE:4C:F8:3F:2F:90:BE:30
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55DA0E400EE0472790397E6D7FC47
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20771
IP address blocks: 89.23.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5d:a0:e4:00:ee:04:72:79:03:97:e6:d7:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=261f3d952fbb709256c7ccefbe4cf83f2f90be30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:72:35:fc:20:d4:9d:67:18:84:df:2a:15:
73:36:c2:ac:e5:2c:11:cc:aa:06:77:3a:12:68:84:
28:3d:13:3a:ea:7a:34:33:bd:78:89:9d:12:cd:eb:
b4:55:d0:ae:93:b7:ee:21:0b:90:4c:6f:fc:95:65:
4e:26:e9:1f:d1:9c:8c:a8:82:8f:c6:cf:d4:5e:24:
3b:ab:17:b1:e6:c8:ea:ee:36:57:0b:ce:0c:99:c0:
a6:71:ac:25:68:d8:73:c7:a1:16:fa:cf:d3:a3:7e:
0e:6e:31:c2:37:b7:73:c0:02:aa:e9:ca:4f:68:29:
bf:ee:8e:94:24:be:3e:5b:be:1c:8c:8e:e9:26:ed:
d9:63:85:66:7f:18:17:19:25:9d:8a:7a:4d:3d:40:
b0:21:07:f8:78:2f:38:0a:b6:21:5f:85:94:fa:5e:
ee:ee:84:78:dd:95:97:32:3f:44:b9:fd:0d:39:20:
04:f9:4e:c6:2c:64:6c:dc:04:93:4b:f4:83:e2:0a:
5a:b1:dc:54:66:08:1f:44:a3:60:96:d0:8e:b8:a0:
26:84:e2:e9:12:ae:04:8b:6e:dd:da:3c:cc:d9:1d:
16:77:80:19:31:0d:b6:b9:2e:8d:69:c7:bf:81:ce:
b2:22:a7:f1:80:08:b3:d2:28:54:e1:92:eb:3c:e0:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:3D:95:2F:BB:70:92:56:C7:CC:EF:BE:4C:F8:3F:2F:90:BE:30
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.107.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5c:09:0d:2c:a0:2b:53:18:44:53:65:4d:40:1f:63:37:ca:
d7:0e:01:d6:8d:4a:40:45:7a:f6:bd:85:86:9f:60:41:4b:f7:
1f:f7:25:18:68:99:76:d2:74:42:9e:25:c3:8a:99:1c:1f:0a:
f7:ff:c9:ec:18:41:25:af:d6:c2:05:c4:08:40:8e:f5:0b:72:
b7:22:6e:7e:1c:bc:97:8a:b4:68:4d:c6:17:4d:8a:fc:0b:b3:
2c:4a:f6:92:f1:51:dd:81:7f:62:d3:60:90:01:3e:54:8b:5d:
18:ba:b5:ea:6f:0c:af:fe:df:cb:5f:50:10:45:c0:90:1e:51:
9b:64:b4:7d:f8:cf:5e:bd:49:83:2b:d6:98:8e:8f:2c:f0:55:
82:62:43:eb:b6:0a:a3:37:2c:ab:e2:7b:49:87:69:61:d1:cd:
89:53:21:c7:8e:b8:f8:eb:11:54:72:fd:04:59:dc:85:79:fd:
dc:d1:06:de:c7:7c:aa:38:47:56:64:a5:d4:d7:f3:ef:58:d6:
47:0f:ca:b1:92:ec:04:46:23:95:64:72:d9:64:fb:f8:cf:a2:
b8:23:40:72:02:8e:75:54:b2:d2:b4:d2:8d:0a:a6:d9:4a:37:
bf:41:dc:2c:71:c6:9b:c4:cd:32:c5:b8:0a:ee:13:fd:9c:a3:
44:47:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:49:07 2025 by rpki-client