Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6NxlAVIU74eWj_l_CWYaAGSI.roa
File: JBu6NxlAVIU74eWj_l_CWYaAGSI.roa (raw, json)
Hash identifier: aJGDIHG6xM7V7X5ixw/5TyhV7WgigqfyB2HGF4rj+TA=
Subject key identifier: 24:1B:BA:37:19:40:54:85:3B:E1:E5:A3:FE:5F:C2:59:86:80:19:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EBC65F8685EC3F8A62097E6023B0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6NxlAVIU74eWj_l_CWYaAGSI.roa
Signing time: Thu 02 Jan 2025 17:51:35 +0000
ROA not before: Thu 02 Jan 2025 17:51:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:eb:c6:5f:86:85:ec:3f:8a:62:09:7e:60:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=241bba37194054853be1e5a3fe5fc25986801922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:aa:23:d1:f6:ac:9f:57:83:18:a2:48:e9:
8a:8b:ec:dc:8d:d5:c5:63:67:ce:6e:a2:1e:2c:10:
36:21:b4:06:4e:7e:a1:94:b0:85:ce:5d:35:17:38:
ea:85:b9:10:b8:2d:16:e0:6d:53:58:2d:80:b4:aa:
f1:c3:cb:8a:8e:21:f1:39:bd:87:f7:bf:bb:f1:f8:
ae:9a:78:5b:c5:e5:02:f0:d7:f0:08:f2:15:3a:c6:
b7:9e:95:28:65:86:72:eb:92:13:d2:4b:2f:88:9b:
74:63:89:76:95:3e:d2:28:64:47:f8:2e:9c:f4:0c:
77:62:99:4d:a8:c5:98:b1:7e:bb:6d:3e:9d:59:7b:
d2:7b:d9:79:32:33:a4:77:9d:fe:7a:3c:65:f4:ba:
fc:9a:ed:da:fb:39:ec:9b:1d:3b:56:1a:03:f8:a9:
2e:8d:3f:65:1c:23:20:06:29:2e:b2:7b:a9:e0:1e:
c7:3a:f2:0d:6b:4a:52:dd:2b:52:9e:51:89:a7:6c:
df:11:bf:70:03:49:de:e3:b7:bc:d5:43:89:12:20:
23:8e:86:ed:74:07:c4:f5:09:48:64:e0:79:2b:73:
b8:87:e2:f3:2b:24:06:46:e5:d1:7b:be:8f:7d:d4:
8f:d4:31:09:20:9d:7a:74:92:2b:f9:f1:81:92:d7:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:BA:37:19:40:54:85:3B:E1:E5:A3:FE:5F:C2:59:86:80:19:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JBu6NxlAVIU74eWj_l_CWYaAGSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.91.0/24
193.124.94.0/24
193.124.133.0/24
193.124.226.0/24
194.58.43.0/24
194.58.58.0/24
194.58.60.0/24
194.58.67.0/24
194.87.6.0/23
194.87.16.0/24
194.87.34.0/24
194.87.42.0/24
194.87.63.0/24
194.87.78.0/24
194.87.116.0/23
194.87.120.0/23
194.87.160.0/24
194.87.163.0/24
194.87.176.0/23
194.87.180.0-194.87.182.255
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.58.0/24
195.133.80.0/24
195.133.82.0/24
195.133.195.0/24
212.192.210.0/23
212.193.10.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d1:7e:d2:cc:e5:54:93:04:ef:a9:72:2b:93:f7:00:b7:f0:
83:79:4e:c6:96:08:d5:0e:ce:73:f2:86:05:46:f7:01:79:ef:
b9:cc:2c:ec:16:b6:68:78:3e:48:ed:34:60:96:59:f4:aa:d1:
34:af:bf:0f:c0:00:4b:3e:0e:33:7f:e1:d7:eb:e1:89:66:94:
e9:61:c0:9e:51:37:1b:53:da:5e:07:3b:fb:e2:4e:a0:d0:5a:
08:88:be:03:7f:21:fa:0f:32:03:61:b8:1d:0a:de:bd:7f:8a:
87:ef:08:72:4f:2b:59:9a:a3:87:a1:9f:29:2e:10:43:82:dd:
09:5a:c4:27:78:39:84:29:fa:d1:a9:00:ba:3a:6c:9e:43:ef:
db:d0:18:1c:a5:74:0a:12:72:6b:b9:b3:6f:53:ba:1e:47:26:
71:12:66:1b:44:7f:80:ed:93:fb:f9:3f:95:df:2e:32:13:93:
e6:dd:4b:12:07:35:e8:f2:67:e8:a6:52:9e:e5:a8:b7:bc:dd:
25:e5:d7:a0:6b:bc:2a:c4:f3:e3:ea:4e:67:d5:10:c4:14:c2:
bd:25:89:f7:1a:c5:c7:0f:f8:2d:72:0c:e1:ce:9c:84:be:15:
a1:28:3e:cf:cf:7c:36:98:75:7f:b2:6f:08:d0:1d:af:72:27:
d5:e8:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:53 2025 by rpki-client