Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jUEYHb-GuhXwiI1SopLXVRt5GiY.roa
File: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (raw, json)
Hash identifier: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=
Subject key identifier: 8D:41:18:1D:BF:86:BA:15:F0:88:8D:52:A2:92:D7:55:1B:79:1A:26
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019644F811D5958DEE26C78D439F85D14909
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jUEYHb-GuhXwiI1SopLXVRt5GiY.roa
Signing time: Thu 17 Apr 2025 18:17:10 +0000
ROA not before: Thu 17 Apr 2025 18:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:f8:11:d5:95:8d:ee:26:c7:8d:43:9f:85:d1:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Apr 17 18:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d41181dbf86ba15f0888d52a292d7551b791a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:32:d9:4e:64:f2:ae:11:47:de:a6:8f:5d:
54:8c:9b:80:0c:f5:c4:9a:80:30:2b:25:a9:dc:e5:
dd:9d:ee:6f:00:a9:98:89:76:cc:d1:7e:32:36:03:
da:60:84:35:9c:95:20:02:44:f5:45:4b:d8:24:76:
b7:d1:3e:a6:fc:4e:f2:6f:53:3e:da:99:82:61:2e:
1e:64:46:4f:7a:cb:05:cb:70:cc:98:8d:b1:90:c6:
5a:37:ae:fc:94:76:ca:63:1e:39:15:2d:5a:59:d8:
2c:bd:30:dc:cc:c8:85:59:6e:d0:d2:e8:cc:e9:02:
b2:25:05:b9:00:68:78:f5:f9:71:b0:e1:e8:32:b8:
40:ce:b4:1c:f7:4d:dd:3f:22:9e:3a:15:96:53:2f:
ac:a6:43:c6:11:91:41:44:d1:92:84:54:57:3f:9b:
81:28:46:b9:af:ed:d4:f1:d5:34:27:c2:b6:fd:e8:
f3:2a:b0:8b:11:e4:38:32:1e:76:30:3d:ab:4d:76:
a8:f1:69:34:71:d3:5e:fa:fe:d7:99:fb:8d:6c:87:
ef:dc:da:e2:88:c5:ad:12:c8:8a:ce:75:3c:60:19:
ff:78:21:b1:f3:51:71:8e:36:85:8f:7e:0c:cf:dc:
e5:5b:01:64:d5:ee:f4:99:9f:36:d1:59:42:6d:7b:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:18:1D:BF:86:BA:15:F0:88:8D:52:A2:92:D7:55:1B:79:1A:26
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/jUEYHb-GuhXwiI1SopLXVRt5GiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
48:10:a6:bf:64:bc:85:80:fc:7b:b5:c2:aa:99:2c:b6:94:57:
ab:ee:7c:ac:1d:33:df:52:4e:8e:85:7c:ed:16:5e:47:a3:f2:
97:52:6b:51:d6:ce:6d:c7:e7:55:52:84:da:5d:5f:b5:ac:f9:
94:1c:f1:a1:fc:a7:d8:5a:51:34:a2:ce:1e:53:7a:73:0e:f8:
d4:c6:67:2b:51:04:f4:74:62:01:18:c7:ff:a2:0e:1c:7e:4b:
bd:57:06:c8:db:e3:46:5f:c4:a1:08:d9:dc:18:f2:81:da:de:
29:47:02:7b:f6:8d:84:64:62:c8:8f:d5:57:2f:8a:02:3a:c2:
45:2e:d9:43:55:d7:15:4f:1f:df:29:5c:0b:23:c6:bb:80:7c:
d6:46:ed:92:8f:75:5e:1d:5c:34:23:94:53:01:eb:30:ac:80:
c2:6a:df:e5:7b:5b:84:e3:ee:20:36:4a:1b:9e:c1:88:fd:3d:
2d:56:67:9c:db:8f:43:4c:ff:ed:f1:75:59:b7:14:c3:a5:70:
51:72:2c:ca:fc:bb:71:fe:85:be:88:32:db:b0:c2:db:64:3a:
8b:01:c3:03:57:7b:a2:8f:e2:87:0e:e7:9a:58:30:9a:e8:a3:
82:46:3a:b0:81:f5:e1:a7:71:e2:e2:a5:58:c1:67:7e:94:c1:
d6:e5:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:40 2025 by rpki-client