Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/jpcHYT_B2cS9VsuU1pVa0wUy-XQ.roa
File: jpcHYT_B2cS9VsuU1pVa0wUy-XQ.roa (raw, json)
Hash identifier: 2CyucQJHHgpUaR0arXUHxX/SRCyvMCkBRcF1E4Jh1SM=
Subject key identifier: 8E:97:07:61:3F:C1:D9:C4:BD:56:CB:94:D6:95:5A:D3:05:32:F9:74
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0195C995270B273C396AEAB601FC14760F67
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/jpcHYT_B2cS9VsuU1pVa0wUy-XQ.roa
Signing time: Mon 24 Mar 2025 19:15:49 +0000
ROA not before: Mon 24 Mar 2025 19:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/22 maxlen: 22
150.40.96.0/19 maxlen: 19
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:95:27:0b:27:3c:39:6a:ea:b6:01:fc:14:76:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Mar 24 19:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e9707613fc1d9c4bd56cb94d6955ad30532f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:07:8e:5c:a8:47:03:32:9d:3f:a0:ef:8b:
c3:eb:1d:83:ae:c2:a6:3f:5e:d2:9a:26:e3:ab:13:
f8:7c:75:84:54:12:38:75:75:28:e0:5e:ff:a5:b2:
22:55:42:b8:6b:36:2d:e2:61:59:55:0c:e4:97:66:
1f:8c:36:a5:2b:8d:f2:5c:e3:b2:86:f1:11:8e:c7:
d7:45:c7:83:36:86:cd:69:48:e8:fe:45:f2:fa:de:
1e:34:b6:9a:37:0d:48:77:0e:c3:7d:c6:c6:89:a5:
d4:e2:81:c6:63:07:25:0e:b8:20:57:b8:1e:27:5f:
c0:24:56:04:cc:af:6b:19:f8:12:b1:48:c0:2e:e1:
d2:c9:70:f0:12:5e:48:23:92:67:12:fc:46:8e:f2:
bf:25:ff:b2:82:24:20:94:e7:ad:99:6b:78:c3:4f:
64:f1:76:cd:f6:80:fe:47:87:25:a2:44:dd:e6:bc:
fd:c6:2c:42:38:6c:a6:a6:c0:b1:a9:a4:54:93:3e:
66:9f:69:25:1b:bf:2b:dd:a8:7b:33:de:d5:7c:f8:
83:ae:09:d1:f1:42:58:6a:a6:1f:22:63:19:0e:cb:
af:9f:25:c6:28:01:ab:d2:9a:ac:2d:95:78:4b:10:
11:f3:fd:07:62:a8:85:2b:bc:91:ed:44:04:b5:cb:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:07:61:3F:C1:D9:C4:BD:56:CB:94:D6:95:5A:D3:05:32:F9:74
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/jpcHYT_B2cS9VsuU1pVa0wUy-XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::-2a0e:bfc6:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:a2:2e:71:f8:c2:9b:39:55:c7:65:3f:27:2f:2d:d1:7c:f1:
b2:bf:af:b6:f0:c1:59:9d:78:09:ab:ac:a4:13:a3:a0:e5:64:
14:8e:68:14:30:5e:54:44:c9:a4:53:e9:13:2c:eb:f5:3a:5e:
14:59:ed:2a:77:fb:1b:81:8f:7b:5a:82:39:d6:f9:43:db:45:
17:1a:eb:0a:7f:b1:ed:14:a4:5c:72:2f:31:f1:8f:eb:cb:53:
f5:e0:9c:6e:d6:ae:e3:cf:8b:79:2a:82:45:90:c2:d6:8d:12:
5c:78:67:d9:02:24:47:c7:db:7b:01:5b:2a:96:4a:72:11:53:
a0:a1:7e:00:67:13:86:a4:f5:90:5a:0a:0f:79:67:c4:50:3a:
23:ee:f9:91:6a:e5:11:5d:6c:8c:6b:a5:b5:86:31:fe:49:ff:
48:27:27:0b:eb:96:97:04:c7:b9:41:09:81:b4:70:5e:6e:40:
d7:d9:87:9b:e0:c0:c8:82:47:c0:e2:4b:1b:07:36:66:40:8f:
7b:64:af:34:a3:0d:79:4e:1b:9b:db:d8:96:ee:16:e1:23:f1:
c2:27:6a:a4:d5:b5:12:c1:5f:f5:11:8d:5d:24:24:c7:2a:ac:
c3:7b:84:83:25:26:04:81:97:20:f6:08:82:ba:38:db:33:32:
93:92:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:41 2025 by rpki-client