Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/jfgLmk_8BZt8FNL99fA-Isnp7jU.roa
File: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (raw, json)
Hash identifier: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=
Subject key identifier: 8D:F8:0B:9A:4F:FC:05:9B:7C:14:D2:FD:F5:F0:3E:22:C9:E9:EE:35
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 0194228D977676ED30D9DC541E65F9E75851
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/jfgLmk_8BZt8FNL99fA-Isnp7jU.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31416
IP address blocks: 2a00:18f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:97:76:76:ed:30:d9:dc:54:1e:65:f9:e7:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df80b9a4ffc059b7c14d2fdf5f03e22c9e9ee35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:f9:c9:88:1f:6f:5e:54:1f:cf:f2:c5:4d:
f9:84:a8:a0:91:18:90:bf:ae:0b:e5:6b:32:85:31:
4c:6c:21:6d:05:10:fd:37:41:60:5c:73:48:3e:5f:
14:ed:86:6d:9f:b5:20:e2:f4:0c:86:fa:55:b3:80:
dd:9a:89:4f:b9:6a:40:98:35:ad:fb:ce:75:c1:02:
78:ee:8a:15:1f:63:e1:e1:ce:42:81:97:d2:85:cd:
8d:1a:d5:64:15:62:74:bd:27:0f:01:07:b0:58:af:
40:88:39:a9:5e:00:73:09:bf:a9:64:92:e3:fd:b9:
54:cc:c2:33:0d:26:a3:30:7c:72:a9:bf:90:47:61:
8e:e1:e5:62:56:c1:f1:fa:8e:54:fa:a1:21:ca:bd:
d9:bb:5e:2b:df:c3:47:50:47:c9:8c:42:77:54:fe:
bc:8e:da:ed:9b:8c:c4:8c:a1:a5:52:9b:7b:cb:c8:
2d:a1:05:45:e9:41:46:70:4d:18:2b:f6:bc:51:02:
7c:0a:ab:68:c9:09:d4:e7:91:7a:47:52:0d:b8:99:
a6:9f:6b:a4:60:07:2f:21:be:60:e8:15:2c:af:a2:
88:c6:5c:fe:53:49:61:2f:26:67:ef:82:f3:d6:9a:
71:c9:05:55:ab:e2:d1:95:53:bb:99:e0:f9:aa:bb:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:0B:9A:4F:FC:05:9B:7C:14:D2:FD:F5:F0:3E:22:C9:E9:EE:35
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/jfgLmk_8BZt8FNL99fA-Isnp7jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:18f8::/32
Signature Algorithm: sha256WithRSAEncryption
8e:4f:d0:1c:d3:df:f7:c7:f0:04:f6:0b:bf:dd:0e:00:ad:27:
e8:a6:6f:42:d1:59:9e:6e:82:83:0a:60:b8:9c:61:b1:14:f3:
af:ee:63:98:c2:c1:ed:b8:a6:ab:34:7a:98:4b:2f:90:75:c2:
9e:28:d7:0f:1c:17:5d:65:48:59:1d:ef:58:b7:48:6a:c5:92:
09:e4:9a:14:41:de:d3:a4:8e:5c:72:02:da:5f:2a:54:ca:d7:
94:85:2f:34:16:1b:f4:b0:3e:79:f8:25:97:2f:c6:4c:fa:07:
52:de:42:0d:23:26:e1:48:f4:e6:74:12:d2:b5:22:ec:40:bd:
fb:68:04:6a:af:d0:2a:c4:d3:23:34:67:39:07:44:f3:71:9f:
c5:f7:00:b5:56:a1:df:2a:d8:d6:71:53:9c:59:25:04:d1:52:
0e:9c:93:b8:f0:95:03:91:8d:28:d5:1c:85:2a:cd:d6:3c:74:
d5:23:73:b8:be:93:ae:ba:79:be:da:4c:94:c1:56:e4:7d:6b:
89:71:3b:1e:aa:2b:7a:71:cb:ce:0a:b4:5b:06:2c:0b:8b:50:
72:f1:f6:8f:07:bf:4b:9a:80:50:4c:3d:8d:5e:d1:46:23:ee:
e9:e8:7a:ed:27:0b:a6:49:10:2f:85:89:7f:8e:b7:01:d9:11:
15:8e:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:52 2025 by rpki-client