Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J8wmndnHiEZNXp8DYIgBCHyHSv8.roa
File: J8wmndnHiEZNXp8DYIgBCHyHSv8.roa (raw, json)
Hash identifier: M6L/CLfR1PlNZ1SxXaiVQSD+lT/X8ue6vfFtc68HaHA=
Subject key identifier: 27:CC:26:9D:D9:C7:88:46:4D:5E:9F:03:60:88:01:08:7C:87:4A:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196C9CF593ADE034504D8ADD5FAEFB309BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J8wmndnHiEZNXp8DYIgBCHyHSv8.roa
Signing time: Tue 13 May 2025 13:22:11 +0000
ROA not before: Tue 13 May 2025 13:22:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149513
IP address blocks: 37.202.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:cf:59:3a:de:03:45:04:d8:ad:d5:fa:ef:b3:09:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 13 13:22:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27cc269dd9c788464d5e9f03608801087c874aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:e9:fa:b5:fe:37:95:21:67:cb:38:95:15:
c4:01:c6:a0:38:f6:7d:8f:cc:af:fb:18:ce:4b:f5:
eb:34:77:d4:bb:01:dc:8a:06:a6:23:18:d4:c4:54:
43:b1:11:87:b5:04:86:56:f5:f1:61:f4:38:18:b8:
ac:e9:eb:22:f3:9c:89:20:1c:a3:ad:06:f1:96:bb:
57:c3:37:63:30:79:20:4a:74:2c:7c:4d:81:d9:50:
d1:c9:98:ff:c9:65:11:29:ef:5c:6d:7f:2d:f9:1b:
e8:03:09:cd:7a:9e:ea:f3:69:fa:ee:d0:c2:8e:af:
1f:4a:a5:95:bc:35:87:c7:05:af:f7:9f:18:f6:ba:
d5:c6:bd:ec:81:bd:d5:62:d3:4e:23:64:85:93:32:
25:d3:81:f9:b0:a2:f7:7b:d2:c4:87:d8:98:88:d9:
49:e6:58:32:f8:00:d5:2b:49:7e:08:c8:0a:fe:6c:
94:ba:3a:cd:b5:2e:75:0e:d4:20:1b:2c:07:82:bc:
9b:b9:f7:ee:34:d1:94:6b:9e:8c:47:59:8f:69:12:
07:75:5c:d1:85:b1:dd:ea:04:89:71:86:5a:ad:30:
04:fb:9e:5c:45:60:74:f7:c1:57:20:1f:40:66:ea:
2b:b8:d4:e9:fe:d4:60:1c:1d:3e:c8:67:47:cc:a7:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:26:9D:D9:C7:88:46:4D:5E:9F:03:60:88:01:08:7C:87:4A:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J8wmndnHiEZNXp8DYIgBCHyHSv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.200.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e2:d1:13:a3:79:cd:87:3d:dc:db:8c:68:83:0e:e8:5b:d2:
88:b3:0d:60:42:3b:88:2b:8f:28:39:e5:ae:0b:fb:3a:cb:90:
6f:ce:1e:87:da:72:ca:20:1b:60:7c:22:a3:3f:e9:7b:56:da:
aa:b1:65:c4:1c:c1:b7:f9:8c:31:db:da:a6:2f:df:69:8d:0b:
ca:5a:2d:55:9c:57:e5:46:f5:2a:68:79:a4:ff:d7:b4:54:71:
0d:ba:99:96:bd:7a:dd:6b:59:75:22:0e:85:65:1e:84:8a:5e:
d2:ad:c9:fc:03:20:f8:bb:d4:a5:6b:8a:69:15:5f:08:6a:7b:
4e:b3:1d:0c:9b:fa:de:6c:0d:2d:08:74:e8:78:a2:e8:e6:c0:
fa:e4:95:a5:de:e6:0a:ef:56:24:b5:4c:06:95:f4:e3:62:2f:
b5:ad:99:f9:77:e8:d5:25:0d:75:5e:48:28:f3:ad:8e:51:8d:
00:95:8f:08:f3:c3:e1:a6:cc:e0:b3:fb:03:60:2d:0b:41:fd:
c7:1f:68:8a:32:29:5d:58:97:4a:9b:41:1a:d3:5e:82:28:9c:
03:96:2f:b4:db:27:8f:85:b7:c6:7d:4e:7a:0d:1c:c6:7c:df:
bf:67:20:b6:fc:ec:13:37:03:d5:a3:78:47:97:0c:b1:d1:bf:
ef:58:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:41 2025 by rpki-client