Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/jGDq7XeDL7xgNWWN5nOoMROqQIw.roa
File: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (raw, json)
Hash identifier: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=
Subject key identifier: 8C:60:EA:ED:77:83:2F:BC:60:35:65:8D:E6:73:A8:31:13:AA:40:8C
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019426D8C5B16702F9BC7F5E79542E1C55FF
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/jGDq7XeDL7xgNWWN5nOoMROqQIw.roa
Signing time: Thu 02 Jan 2025 11:48:48 +0000
ROA not before: Thu 02 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49283
IP address blocks: 46.182.160.0/21 maxlen: 21
89.18.224.0/19 maxlen: 19
109.68.248.0/21 maxlen: 21
178.21.192.0/21 maxlen: 21
2a00:17b8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c5:b1:67:02:f9:bc:7f:5e:79:54:2e:1c:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Jan 2 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c60eaed77832fbc6035658de673a83113aa408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:30:ad:94:d1:38:26:dc:dd:80:ad:41:88:
47:6a:1a:b5:48:12:c3:bc:e5:d2:2f:d3:ae:91:5b:
8b:83:99:44:f0:19:3c:1e:1f:db:55:e6:74:2d:2f:
34:a2:c0:46:d8:f4:60:5d:c4:f4:56:91:33:b2:dd:
4b:38:cf:e8:a2:57:b0:61:d7:c0:49:b7:03:7f:82:
c6:14:20:27:0a:fd:8e:21:21:a8:fc:ab:ef:06:4d:
ba:5e:9c:3b:5e:f4:3d:e2:4b:f0:e9:9b:68:b6:32:
81:6e:7f:86:c6:83:99:b1:bb:ca:e9:74:8a:8c:98:
3a:a5:d7:1a:92:86:15:aa:e3:5e:85:eb:20:bc:fb:
3d:84:5b:d0:f4:f8:5f:65:88:7a:90:9e:10:cc:c8:
65:02:0f:cc:0d:82:96:f6:6d:b6:18:4d:2f:63:fa:
a3:48:c7:97:e9:85:7d:af:d4:4d:79:85:d0:85:f8:
b5:a9:1d:23:0d:17:92:96:3f:81:10:d0:17:ee:10:
9c:8b:b6:c4:3f:dd:14:99:99:97:08:5e:c0:04:0e:
1b:3d:39:c0:09:06:82:11:4b:7a:f3:bd:ff:82:30:
46:b6:70:d6:d4:6b:c2:ff:60:92:8d:3d:5b:33:3e:
e9:ec:6b:c9:e0:0c:dd:98:92:07:fe:17:7b:df:0f:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:EA:ED:77:83:2F:BC:60:35:65:8D:E6:73:A8:31:13:AA:40:8C
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/jGDq7XeDL7xgNWWN5nOoMROqQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.160.0/21
89.18.224.0/19
109.68.248.0/21
178.21.192.0/21
IPv6:
2a00:17b8::/29
Signature Algorithm: sha256WithRSAEncryption
7d:2d:14:90:79:6e:3b:ab:7f:8b:dc:28:fe:be:8d:2c:e6:ec:
78:d2:51:84:ae:15:52:f5:c7:44:f4:59:46:ee:c9:48:bb:17:
30:7c:66:1e:90:cf:65:6a:98:82:36:16:bb:32:5c:42:9a:a3:
de:11:d2:e8:49:69:b9:89:e0:30:17:59:9f:ec:c4:f3:26:af:
79:05:55:8f:3c:f2:a1:5b:25:02:13:16:d9:3d:1b:2a:9d:78:
e1:bf:e3:57:21:da:f7:ee:bd:5c:ec:74:3f:d0:cd:23:3f:86:
55:71:ec:53:ee:7d:d3:ed:ba:dd:1e:9b:a0:19:e7:3f:ab:78:
82:d2:49:f9:1a:7c:00:13:ab:9f:9b:40:66:80:19:7a:4c:6a:
c9:21:47:e4:59:5c:cd:57:2c:08:ac:34:ed:59:b0:b4:a5:e8:
b6:5b:3b:64:d6:48:5d:84:53:16:4a:f6:35:d7:ef:8f:79:8e:
d5:2a:38:dd:51:75:a2:bb:d3:b2:50:f9:54:fb:8d:63:aa:54:
65:d9:d5:9c:2f:9b:2a:63:0f:12:eb:54:50:98:67:f1:9e:09:
cb:0f:b5:48:69:38:6c:7c:87:32:12:62:3b:5b:b5:cf:2b:8f:
38:3e:aa:25:ee:6a:6c:47:d3:49:6b:8b:5f:76:cb:f2:3f:17:
3d:e2:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:50 2025 by rpki-client