Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/JyxghoeF6hDC8N6SVjWRhYxsMBM.roa
File: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (raw, json)
Hash identifier: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=
Subject key identifier: 27:2C:60:86:87:85:EA:10:C2:F0:DE:92:56:35:91:85:8C:6C:30:13
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01965E7C5C05587E1CA22F957B3CC98628F9
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/JyxghoeF6hDC8N6SVjWRhYxsMBM.roa
Signing time: Tue 22 Apr 2025 17:12:10 +0000
ROA not before: Tue 22 Apr 2025 17:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6085
IP address blocks: 57.250.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:7c:5c:05:58:7e:1c:a2:2f:95:7b:3c:c9:86:28:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Apr 22 17:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272c60868785ea10c2f0de92563591858c6c3013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:3b:31:07:71:82:b7:6b:a1:67:9e:41:35:
20:24:6d:c1:50:92:bc:96:34:8e:64:ae:8d:a5:f6:
2a:ec:67:be:e4:6f:a5:95:9a:e8:ef:6e:71:95:44:
76:8c:cb:b4:40:8d:86:83:6c:5d:19:94:91:99:37:
00:f3:cf:75:61:a1:fa:07:e0:ef:de:51:3e:1f:f3:
65:20:9c:17:bd:18:35:c0:25:7b:cc:69:07:92:37:
68:63:46:e3:c9:18:49:a0:7d:f4:5f:57:ac:e4:bc:
df:7c:7a:71:c4:ed:76:61:e1:90:2c:34:28:e9:ee:
a4:1a:96:a8:bf:bd:c3:09:2b:a2:4b:bf:7e:91:52:
27:c0:fa:59:72:c1:4d:3c:ea:f2:54:93:eb:b3:d8:
24:4d:47:0f:c0:17:55:ee:56:6b:57:d9:da:48:07:
16:b4:78:cb:e9:93:97:dc:37:fe:62:28:cd:6c:71:
1e:bd:98:4f:aa:14:06:c9:9b:f9:88:51:1a:e4:0f:
9b:8f:86:ca:db:cf:90:ee:7d:77:3e:90:bd:66:c1:
1c:93:ba:55:c4:29:5a:9f:62:31:bb:15:4f:7b:d4:
5f:7e:9c:a4:7b:d9:9e:8d:dc:a4:69:87:eb:1e:d7:
b9:12:77:a7:d7:6b:8e:43:05:3a:49:8d:8a:3e:fb:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2C:60:86:87:85:EA:10:C2:F0:DE:92:56:35:91:85:8C:6C:30:13
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/JyxghoeF6hDC8N6SVjWRhYxsMBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:30:df:ea:09:f7:c7:19:6d:5f:91:6e:67:d5:84:96:b9:
a2:56:3e:69:be:98:ff:8c:99:ab:5a:a5:3c:79:91:02:67:75:
66:51:21:f2:6c:d3:db:2e:82:74:58:5e:d9:a1:7d:b2:a8:f3:
d6:2b:a5:86:5f:0d:94:85:21:ae:cc:32:8c:71:31:22:f3:10:
72:30:b8:c7:30:8a:8c:5f:f2:d4:5f:c3:a5:3d:8f:d8:da:d2:
8f:6d:5c:12:84:e9:ba:1d:74:ee:63:ad:0e:7c:31:7e:a8:de:
18:09:cb:32:49:07:ae:31:33:4b:e9:d2:0c:e4:ac:00:48:6f:
56:89:cf:88:8a:2f:41:88:a5:e4:54:73:b2:81:a3:bd:fa:86:
0c:da:7c:bd:cb:2c:c1:d0:d4:56:df:0b:79:7f:5d:13:d9:24:
37:5a:56:23:3b:29:b3:cc:68:94:19:6d:84:41:d7:5d:cf:c1:
04:7b:12:4b:86:e8:db:b2:9b:63:0c:8f:61:02:02:ee:f2:33:
59:b8:f9:1e:fc:ca:40:94:9d:11:8b:99:ed:d0:f1:fe:e3:c7:
66:d6:01:16:30:06:5c:5a:d5:be:3a:d9:9c:2b:8e:c4:51:c9:
d3:92:0e:90:29:72:29:d7:14:be:ad:62:60:07:b7:a0:25:b7:
b3:42:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:19:53 2025 by rpki-client