Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/jh6sy491i9ubg8l56trtkYGw7zk.roa
File: jh6sy491i9ubg8l56trtkYGw7zk.roa (raw, json)
Hash identifier: BnIoldPwL86XPLAq+kUfAo48+cw7Dyre+emQlzYtTmA=
Subject key identifier: 8E:1E:AC:CB:8F:75:8B:DB:9B:83:C9:79:EA:DA:ED:91:81:B0:EF:39
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01966CB39506D0EB27A6AFF9CD451F18ECC4
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/jh6sy491i9ubg8l56trtkYGw7zk.roa
Signing time: Fri 25 Apr 2025 11:27:10 +0000
ROA not before: Fri 25 Apr 2025 11:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 85.85.160.0/20 maxlen: 21
85.85.176.0/20 maxlen: 21
85.86.208.0/21 maxlen: 21
85.86.232.0/21 maxlen: 21
85.87.0.0/16 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:b3:95:06:d0:eb:27:a6:af:f9:cd:45:1f:18:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Apr 25 11:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e1eaccb8f758bdb9b83c979eadaed9181b0ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:fc:dc:92:b3:a9:25:76:c6:eb:eb:37:16:
b1:b1:89:8f:51:c2:6d:56:f1:99:b0:0e:c1:87:38:
ef:e2:29:c6:44:90:65:71:ff:99:a4:dd:aa:6f:24:
35:6a:6c:70:17:9c:d0:ea:37:3b:c8:a2:e6:f5:c1:
cd:b4:79:de:db:e6:34:af:c2:a8:ed:4b:41:c7:81:
0d:c0:1f:d3:5e:bf:08:33:2f:50:7e:56:3d:c0:03:
eb:99:0c:22:40:fe:8c:29:fd:38:99:e0:62:5d:f1:
69:46:5d:31:de:ca:c6:07:27:9e:65:60:43:8f:93:
c3:f9:56:22:77:84:a7:13:0d:a4:ae:ba:00:20:cd:
86:18:cb:3c:aa:39:c4:13:5f:ac:cb:e3:1d:c0:7a:
73:5a:74:86:c5:56:54:a1:e3:f9:1b:5a:a8:50:c2:
c6:9b:f3:15:c7:f6:23:61:d7:93:4d:22:b6:c3:9e:
60:ac:d8:0c:71:77:7d:68:d8:cd:9b:21:dd:b5:fd:
54:bb:13:81:63:fd:64:4b:c7:07:4c:51:50:7e:05:
da:b4:78:62:9c:de:82:c6:6d:b4:bb:43:22:e1:10:
13:14:07:eb:fa:84:3b:ab:7d:97:a3:e9:d4:15:29:
b1:19:b9:e7:44:d9:65:ec:90:35:14:50:09:1d:86:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:AC:CB:8F:75:8B:DB:9B:83:C9:79:EA:DA:ED:91:81:B0:EF:39
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/jh6sy491i9ubg8l56trtkYGw7zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.85.160.0/19
85.86.208.0/21
85.86.232.0/21
85.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:43:84:95:90:06:3d:37:c5:1c:22:19:6d:02:2c:f0:24:e5:
54:3b:53:b3:1a:e5:8a:10:bb:32:5a:21:8e:5e:f9:39:8c:ec:
fb:4e:b1:0f:e2:83:d1:73:bf:23:8a:0c:5e:87:c4:01:a3:7b:
e9:d2:80:67:c1:c5:2b:cb:04:33:1b:a2:13:d8:9e:ac:30:e3:
d6:e3:6f:6d:70:09:63:4a:88:c7:b1:0a:60:6d:62:ac:6a:00:
3f:e2:e6:5b:a8:b0:d8:7e:27:f8:40:e3:36:80:ea:98:de:ae:
ed:8d:f4:f8:1b:28:13:41:0f:1a:83:21:7a:fd:e6:21:24:3c:
35:ff:03:30:ab:e7:8b:26:3b:20:7f:3a:da:bd:63:aa:8f:55:
cf:ce:45:77:b7:53:7e:a5:76:66:19:d6:ca:14:6c:34:8e:6d:
ad:65:62:e7:fb:f4:9f:1a:7c:23:52:ac:eb:53:5c:5f:41:6c:
65:26:92:68:a3:67:7a:80:3e:35:06:98:f5:9b:3d:c8:8a:d5:
65:85:f5:20:93:05:fa:93:07:43:89:a5:19:17:e4:5b:41:3e:
6e:f3:05:5a:d8:13:66:80:68:7d:6d:c1:72:8e:86:90:c3:17:
96:bc:f4:3d:ae:1f:28:25:2b:63:63:92:ae:93:63:34:df:f8:
f5:5f:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:58 2025 by rpki-client