Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jpmc_EHNjS6ufNWmoyj9hppw44Q.roa
File: Jpmc_EHNjS6ufNWmoyj9hppw44Q.roa (raw, json)
Hash identifier: 57JvkDOaGpJwcuJhDN6A2Re8cKsEXrfo4mcWuivMIKU=
Subject key identifier: 26:99:9C:FC:41:CD:8D:2E:AE:7C:D5:A6:A3:28:FD:86:9A:70:E3:84
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019539C0AD252A0551F1FE1324063C5A2FA3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jpmc_EHNjS6ufNWmoyj9hppw44Q.roa
Signing time: Mon 24 Feb 2025 20:58:03 +0000
ROA not before: Mon 24 Feb 2025 20:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 147.45.45.0/24 maxlen: 24
193.233.112.0/23 maxlen: 23
193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:c0:ad:25:2a:05:51:f1:fe:13:24:06:3c:5a:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 24 20:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26999cfc41cd8d2eae7cd5a6a328fd869a70e384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:ce:66:5d:a3:06:fb:5b:30:6d:4e:a3:5b:
a2:58:8b:bd:7f:ea:4b:c8:28:f6:b6:82:44:68:d1:
14:f8:0d:78:40:16:a3:56:b1:19:6c:ad:af:00:c3:
03:a2:2f:35:2c:74:b3:16:ad:d4:5c:35:ea:52:24:
0e:9e:bf:c4:9f:56:bc:7c:6d:ea:b2:4a:73:81:01:
a1:2a:2d:57:68:32:cc:2c:90:3f:13:02:19:e7:13:
44:5e:90:a5:49:d8:58:2a:d5:76:a5:a1:fb:75:df:
ba:a0:5c:dc:91:79:5b:6b:43:1a:75:65:37:ab:17:
23:e4:72:58:93:90:19:62:e5:fe:2a:11:76:12:98:
6f:1b:aa:3e:31:3f:f5:46:b5:0f:33:74:57:58:72:
b2:90:3e:5d:1d:cc:bf:09:0d:92:41:78:24:52:bc:
c8:16:91:0c:07:e9:62:e4:e1:25:6f:fc:51:bd:ba:
99:4a:97:54:5b:02:40:f3:65:36:67:ab:7e:8b:c9:
e9:ce:88:f7:ea:1a:d1:5e:07:56:f6:51:51:37:19:
0b:d3:55:0a:33:73:11:58:8d:46:88:09:88:56:2f:
57:f4:95:ea:4a:13:7c:f3:07:0e:02:4f:9c:2b:a6:
c6:53:e2:a9:fb:1a:81:e6:87:2d:4b:ce:f0:85:ac:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:9C:FC:41:CD:8D:2E:AE:7C:D5:A6:A3:28:FD:86:9A:70:E3:84
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jpmc_EHNjS6ufNWmoyj9hppw44Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
193.233.112.0/23
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6c:2f:c3:e9:65:12:6f:23:36:54:10:60:6b:36:c3:f5:4d:
7b:eb:d0:19:75:00:83:44:e5:b1:34:90:0f:4a:6c:1a:5e:3b:
b6:a7:cd:f5:28:93:46:a5:1f:8c:67:6f:ba:63:67:71:a1:ab:
f8:45:36:15:00:61:a5:81:32:fc:cd:7b:48:9d:85:b6:68:f4:
90:fb:f3:04:0b:12:d7:e9:4b:40:f0:63:52:f6:38:e0:71:ab:
76:7b:a8:2c:00:60:62:73:e9:18:27:3d:05:10:b9:f7:97:25:
8a:9d:b2:33:96:1e:be:b6:15:82:09:54:d1:c5:de:ce:7f:19:
34:f0:ba:51:b8:3b:3f:6f:de:ec:d7:25:75:20:04:7b:e8:51:
1c:8c:32:7f:ff:d0:cd:66:07:cf:cc:8b:48:0b:61:5b:a0:32:
48:d0:da:ed:42:1e:5b:a5:ea:11:f4:6b:b6:36:09:06:1d:34:
4c:9c:41:eb:cf:3f:fa:58:bc:84:d8:d1:2a:e5:ce:58:5e:52:
80:4a:3b:4a:37:2c:0e:28:7a:c6:5f:b2:29:86:b9:bc:38:d5:
10:d6:54:d3:18:56:3e:a3:e2:24:41:24:7d:c5:2b:a7:d7:1e:
85:02:3c:b7:05:2e:97:1a:53:e6:8e:d2:63:8a:d6:50:1c:d5:
29:81:80:81
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZU5wK0lKgVR8f4TJAY8Wi+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMjI0MjA1ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk5OWNmYzQxY2Q4ZDJlYWU3Y2Q1YTZhMzI4ZmQ4NjlhNzBlMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx3OZl2jBvtbMG1Oo1uiWIu9f+pL
yCj2toJEaNEU+A14QBajVrEZbK2vAMMDoi81LHSzFq3UXDXqUiQOnr/En1a8fG3q
skpzgQGhKi1XaDLMLJA/EwIZ5xNEXpClSdhYKtV2paH7dd+6oFzckXlba0MadWU3
qxcj5HJYk5AZYuX+KhF2EphvG6o+MT/1RrUPM3RXWHKykD5dHcy/CQ2SQXgkUrzI
FpEMB+li5OElb/xRvbqZSpdUWwJA82U2Z6t+i8npzoj36hrRXgdW9lFRNxkL01UK
M3MRWI1GiAmIVi9X9JXqShN88wcOAk+cK6bGU+Kp+xqB5octS87whaxpswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCaZnPxBzY0urnzVpqMo/YaacOOEMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvSnBtY19FSE5qUzZ1Zk5XbW95ajlocHB3NDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAky0tAwQB
welwAwQAwemGAwQAwen+MA0GCSqGSIb3DQEBCwUAA4IBAQAdbC/D6WUSbyM2VBBg
azbD9U1769AZdQCDROWxNJAPSmwaXju2p831KJNGpR+MZ2+6Y2dxoav4RTYVAGGl
gTL8zXtInYW2aPSQ+/MECxLX6UtA8GNS9jjgcat2e6gsAGBic+kYJz0FELn3lyWK
nbIzlh6+thWCCVTRxd7Ofxk08LpRuDs/b97s1yV1IAR76FEcjDJ//9DNZgfPzItI
C2FboDJI0NrtQh5bpeoR9Gu2NgkGHTRMnEHrzz/6WLyE2NEq5c5YXlKASjtKNywO
KHrGX7Iphrm8ONUQ1lTTGFY+o+IkQSR9xSun1x6FAjy3BS6XGlPmjtJjitZQHNUp
gYCB
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:48 2025 by rpki-client