Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Jo5pcIjwfG6nQSLFHP6kQnNRmnU.roa
File: Jo5pcIjwfG6nQSLFHP6kQnNRmnU.roa (raw, json)
Hash identifier: EkaSnISMfc8+JhAdcRRsLW9pFDfixNkEvnL06KOf3So=
Subject key identifier: 26:8E:69:70:88:F0:7C:6E:A7:41:22:C5:1C:FE:A4:42:73:51:9A:75
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01963673080E14B112B085B5D0BBF9321DD6
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Jo5pcIjwfG6nQSLFHP6kQnNRmnU.roa
Signing time: Mon 14 Apr 2025 22:37:10 +0000
ROA not before: Mon 14 Apr 2025 22:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:73:08:0e:14:b1:12:b0:85:b5:d0:bb:f9:32:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 14 22:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268e697088f07c6ea74122c51cfea44273519a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:5a:f5:11:b3:78:48:0f:17:aa:8d:17:0e:
65:92:4b:20:5e:42:6d:07:5c:da:a3:b6:86:0a:67:
b2:73:76:a6:42:16:d0:53:a8:dc:d3:75:6b:96:66:
16:de:6c:57:54:c2:15:81:ac:f6:18:41:be:5e:a7:
78:5e:5b:d0:6d:2b:02:72:59:0f:90:57:5e:3a:65:
f1:8b:2f:b6:17:34:b4:8e:c4:a4:47:aa:9e:df:57:
57:e9:2a:75:42:a4:3e:10:36:91:dd:10:26:74:46:
25:ba:c0:bb:c8:07:c8:96:8c:3b:ae:4c:2d:ea:c3:
fd:93:3a:f7:5c:2d:36:c3:4b:8f:2e:29:08:2d:02:
6f:ed:c5:dd:1d:0e:e2:ae:cc:bc:99:23:55:f2:3a:
50:7b:26:8c:cf:ee:26:c1:84:09:5c:23:a5:25:00:
33:41:c1:c5:d9:a8:77:54:cf:7d:70:22:89:16:92:
1f:48:f7:62:fa:53:a5:1d:d8:8c:62:89:92:e3:9d:
13:02:b0:6b:79:2b:98:25:d7:f5:81:4a:c2:66:56:
96:d0:d2:e3:51:36:fa:3c:2c:df:ee:d1:ce:c9:6b:
44:87:98:4b:1c:57:a7:36:db:b9:15:97:3d:51:e6:
85:13:2c:61:8f:ba:1a:80:e0:92:9c:30:45:6a:94:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:69:70:88:F0:7C:6E:A7:41:22:C5:1C:FE:A4:42:73:51:9A:75
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Jo5pcIjwfG6nQSLFHP6kQnNRmnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2e:d0:65:39:0c:bf:af:6e:57:f0:64:83:a5:8d:a0:ea:6e:
af:50:91:27:70:d4:57:7c:a1:24:8c:83:84:b4:5f:67:60:9b:
4b:7c:6b:c4:6a:a4:ca:78:c6:06:0f:58:a6:25:43:d4:6a:27:
a2:4f:75:b9:ed:98:f4:38:09:95:5f:e4:4c:e4:ad:1c:99:09:
b2:fc:3c:c5:30:91:4d:ea:9d:1f:54:11:62:b1:62:4b:13:92:
36:f3:0a:f8:d3:91:66:e1:b1:3f:14:26:71:fa:04:ca:d4:67:
47:d6:f4:2b:32:54:c9:b7:78:9c:1b:03:eb:55:d8:31:76:61:
58:11:8f:66:9c:ef:d9:9d:7b:65:e0:32:ca:c2:42:42:42:84:
4b:61:bf:08:64:2a:f5:2b:60:62:57:5a:be:04:4a:8a:52:09:
a0:b7:5d:a0:97:16:12:7d:f7:ac:f2:09:60:e5:d5:a8:2c:c3:
61:da:bc:8b:26:de:fb:80:1c:47:3a:70:33:50:dc:e8:c3:67:
f2:bb:cf:ae:de:fe:4a:3f:8f:fb:b0:62:45:fe:11:56:39:54:
c2:8b:92:33:57:bb:74:7d:03:90:7c:6f:9e:2c:75:80:5e:1c:
dc:79:45:70:23:f8:a0:cc:11:1b:63:d9:28:d9:93:f8:9c:b1:
42:5b:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:28 2025 by rpki-client