Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jAXI716QvkYKh504r-WpbY9ioJY.roa
File: jAXI716QvkYKh504r-WpbY9ioJY.roa (raw, json)
Hash identifier: rXLxYrol+N0kyOwEpdjANCE1WWjy4IQUpBsi2FqTSOQ=
Subject key identifier: 8C:05:C8:EF:5E:90:BE:46:0A:87:9D:38:AF:E5:A9:6D:8F:62:A0:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019695E0F879A1E776C430DE64062911DC14
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jAXI716QvkYKh504r-WpbY9ioJY.roa
Signing time: Sat 03 May 2025 11:21:10 +0000
ROA not before: Sat 03 May 2025 11:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.131.187.0/24 maxlen: 24
94.177.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:e0:f8:79:a1:e7:76:c4:30:de:64:06:29:11:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 3 11:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c05c8ef5e90be460a879d38afe5a96d8f62a096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:9d:76:43:0e:08:c1:54:5c:6b:8c:a2:d3:
36:2f:2f:29:2e:53:a1:29:59:e8:d2:b1:e7:20:85:
42:b2:70:85:38:40:12:e0:1e:68:09:19:58:85:fe:
20:24:72:70:20:38:7a:f5:3b:28:fc:a7:c2:a0:f8:
fb:54:0a:43:96:9d:b4:aa:68:7d:8e:dd:5f:14:02:
72:bf:cc:fd:87:0d:de:37:4f:90:82:da:96:21:e1:
6f:41:dd:4a:df:39:19:8c:e7:65:8d:26:6a:55:2f:
5c:af:d9:ed:36:0c:49:2c:ea:05:04:d7:54:05:c7:
ac:69:68:7e:56:75:b6:db:fc:52:48:3f:2e:b4:7b:
2d:64:aa:e3:40:0d:62:c6:e6:4c:1c:52:bf:f8:c8:
20:51:1f:75:7f:aa:62:27:ed:3d:03:c0:1c:bd:f0:
7a:f4:02:6b:ee:2f:9b:b6:25:b6:58:32:bb:c3:ae:
cd:cb:6b:83:5c:47:1e:a6:42:9b:bb:1b:53:cc:e5:
4c:b2:e0:3f:81:5d:13:5f:49:9b:e0:8f:2b:b5:97:
13:e6:9f:6e:87:38:a3:8f:67:c4:ac:dd:0d:a3:66:
8a:3b:0d:d7:08:96:22:2b:ee:e6:bd:ff:f1:88:3c:
95:16:d9:10:65:d2:30:dc:52:64:63:b6:80:90:2e:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:C8:EF:5E:90:BE:46:0A:87:9D:38:AF:E5:A9:6D:8F:62:A0:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jAXI716QvkYKh504r-WpbY9ioJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
94.177.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:72:c1:98:30:29:96:c1:07:a2:af:20:7d:d0:4a:46:56:45:
5a:b7:92:26:10:fc:31:df:dd:87:7f:43:d4:d1:cc:2e:d8:b2:
a7:d0:4b:eb:ab:1e:53:02:a8:c8:9d:59:b0:8c:65:ff:52:2a:
82:cb:17:b0:b2:88:48:a4:ae:35:2b:f3:9e:e1:9c:ed:e1:cd:
0c:ab:4b:e4:23:f3:92:d5:f0:83:15:af:55:4c:ce:a6:c7:8b:
60:f0:86:e6:15:88:45:ee:cd:09:a0:a4:5e:f5:72:c3:97:7f:
d2:f7:33:d9:bb:f6:b8:73:b6:0b:09:3f:d1:f1:f1:d1:81:0d:
e4:c1:a5:bb:ed:ad:ef:22:cd:f4:1d:8d:b2:de:c4:da:0c:b5:
29:82:aa:a5:d7:1c:1a:ba:30:52:92:81:f6:d6:d4:b8:39:b3:
fc:d6:50:86:a5:87:39:58:a3:38:3a:c9:1e:51:23:d9:c2:5f:
1b:a1:3c:ea:a4:2e:d7:e6:d2:aa:b0:3a:22:84:5b:4a:d3:a3:
81:1c:6d:79:54:2b:ef:65:85:7c:45:16:d7:0d:90:84:a6:cd:
a1:00:ca:67:35:f6:4c:33:1a:a4:eb:00:1a:f5:f0:f8:59:34:
5d:86:2a:c1:ea:4c:32:ea:2c:fa:8f:40:39:a6:3b:c1:ff:42:
a0:41:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:08:33 2025 by rpki-client