Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/jlPcCTRsHvziUq2lkqlj4JDAVB4.roa
File: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (raw, json)
Hash identifier: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=
Subject key identifier: 8E:53:DC:09:34:6C:1E:FC:E2:52:AD:A5:92:A9:63:E0:90:C0:54:1E
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 019421B2381ADBE80E66E7EB33C2E93F21DE
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/jlPcCTRsHvziUq2lkqlj4JDAVB4.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30844
IP address blocks: 5.11.8.0/21 maxlen: 24
46.17.232.0/21 maxlen: 24
77.246.48.0/20 maxlen: 24
185.25.208.0/22 maxlen: 24
217.15.112.0/20 maxlen: 24
217.74.224.0/20 maxlen: 24
2a01:410::/32 maxlen: 32
2a01:410:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:38:1a:db:e8:0e:66:e7:eb:33:c2:e9:3f:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e53dc09346c1efce252ada592a963e090c0541e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:21:7e:16:2c:3c:7e:4f:85:75:5e:1a:80:
8e:cb:e6:a3:8f:39:c9:69:cb:7f:9f:e2:17:1c:28:
75:5f:03:39:b5:eb:1d:ae:68:d4:4e:fe:d5:88:c3:
61:94:12:04:b4:6f:04:4c:6a:fd:7f:bf:1e:ce:69:
c1:25:77:bc:7a:7c:12:5d:fe:a4:e9:a6:1a:1b:47:
08:d7:6e:c1:12:eb:1a:5b:4c:b7:c2:c5:59:c4:d9:
7e:9c:fd:be:a5:86:ae:aa:ab:93:fe:0e:0f:27:c9:
29:d4:ec:c7:90:49:ed:c5:89:39:c9:c8:43:4f:43:
5a:1f:b7:ad:7a:4e:05:05:ea:a9:1e:e5:d2:d2:09:
63:8a:fa:0e:21:49:f4:49:1a:ab:a6:0d:a9:ca:f5:
d7:be:90:55:08:48:9f:48:e0:ea:1d:6f:6a:7b:37:
92:42:05:7d:59:0b:dc:a7:f7:98:bc:10:66:41:a7:
92:5e:50:44:d6:ef:02:a7:82:6b:d7:d4:ca:30:80:
6f:e5:99:9b:66:18:c3:d0:7f:49:cf:e7:61:a0:c1:
5e:88:21:65:ba:2d:24:19:27:31:e3:cf:90:2e:7d:
42:50:27:af:bd:14:57:ff:9a:fc:72:36:89:fd:af:
02:35:f1:3e:14:c0:7a:e1:2e:5e:97:4a:65:cd:25:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:DC:09:34:6C:1E:FC:E2:52:AD:A5:92:A9:63:E0:90:C0:54:1E
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/jlPcCTRsHvziUq2lkqlj4JDAVB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.8.0/21
46.17.232.0/21
77.246.48.0/20
185.25.208.0/22
217.15.112.0/20
217.74.224.0/20
IPv6:
2a01:410::/32
Signature Algorithm: sha256WithRSAEncryption
66:d3:10:15:66:ac:6a:62:e0:4b:af:70:c5:49:12:16:5b:5f:
c7:aa:72:86:dc:53:6c:34:62:db:60:fe:8d:53:e4:40:4a:d3:
46:91:35:cb:19:09:2c:b3:aa:5e:ee:14:03:63:67:70:a0:07:
9a:af:57:e5:7c:f3:a8:c3:ad:2d:10:ab:e6:65:0e:ca:db:84:
e5:6f:42:93:79:ad:23:b6:f5:d8:03:12:2c:ef:b1:76:65:14:
45:86:63:ee:67:86:43:88:1f:e3:74:50:26:d6:ca:79:18:56:
b5:67:61:24:ed:b3:8a:ec:01:12:7b:1c:7c:ae:39:bd:d0:13:
f7:67:57:82:b2:47:41:c7:74:64:45:74:ed:76:e7:4a:69:d2:
53:a5:5e:1a:9b:90:9a:7b:e8:d1:ca:7d:20:ad:8b:39:b9:c8:
14:cf:6b:ee:f1:6c:bf:5e:1b:3c:b4:ba:5d:e7:05:96:b7:2a:
b7:44:ed:4b:76:ed:20:cc:05:42:e9:97:b0:e1:f8:13:3a:e9:
77:c3:bf:93:13:32:05:46:68:20:a8:a6:8a:4c:4c:ee:d7:ed:
1a:45:d0:05:87:ec:ca:35:ec:f5:2f:84:47:15:70:d1:58:2e:
fc:8b:c2:12:8c:01:68:30:3f:03:12:aa:83:b1:0d:72:53:93:
35:3b:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:11:38 2025 by rpki-client