Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/jrhngJH5WqcrHBQKWDaE0mXlivg.roa
File: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (raw, json)
Hash identifier: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=
Subject key identifier: 8E:B8:67:80:91:F9:5A:A7:2B:1C:14:0A:58:36:84:D2:65:E5:8A:F8
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 0194228E33766DC215EA8E13CED00E4212F0
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/jrhngJH5WqcrHBQKWDaE0mXlivg.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24582
IP address blocks: 5.61.80.0/21 maxlen: 24
62.40.27.24/29 maxlen: 29
80.87.160.0/20 maxlen: 24
185.32.32.0/22 maxlen: 24
195.135.178.8/30 maxlen: 30
195.135.178.240/29 maxlen: 29
212.237.160.0/21 maxlen: 24
2a00:5f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:33:76:6d:c2:15:ea:8e:13:ce:d0:0e:42:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb8678091f95aa72b1c140a583684d265e58af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:f7:57:3d:e8:1f:9d:d8:2f:1d:33:b3:c5:
08:24:13:13:d1:d0:b3:e0:44:fe:18:ca:71:9e:60:
43:4c:77:80:8b:e0:ee:86:76:ab:14:e8:96:4a:b9:
3d:96:69:9c:2f:45:c1:a3:07:3f:a6:b0:10:43:6f:
8c:00:b9:07:c0:be:fb:6e:b7:7a:83:b8:41:f9:ed:
45:b1:b0:b5:4f:7c:63:5d:53:1d:50:ba:4b:88:9b:
f1:36:5e:25:bb:7b:2a:59:45:7e:40:f4:9e:1a:68:
fb:5c:ae:d0:15:29:0e:64:df:9b:28:4e:69:8b:08:
5c:1e:b4:9a:15:1d:0f:45:5a:37:71:f1:9c:26:67:
31:03:84:a9:bb:1a:c1:ec:c6:11:23:a1:97:e0:c1:
3c:2a:e8:a3:7f:5c:84:15:00:b1:15:48:0d:9b:e8:
b9:b9:7c:ff:1e:a5:5d:c6:97:bb:3c:63:f3:b2:d1:
18:9c:3a:cf:04:88:52:2c:16:da:05:09:3e:a2:ed:
3e:11:a9:d5:3e:07:f9:a4:16:a0:6c:f4:89:8a:bb:
b0:6d:3e:2b:58:7f:1a:b9:08:8e:9b:74:62:5f:60:
4c:0d:ca:6a:3c:be:61:36:82:2a:ea:cd:c0:85:7d:
55:03:05:26:fd:b6:1a:21:02:28:48:00:5e:72:7f:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:67:80:91:F9:5A:A7:2B:1C:14:0A:58:36:84:D2:65:E5:8A:F8
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/jrhngJH5WqcrHBQKWDaE0mXlivg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
62.40.27.24/29
80.87.160.0/20
185.32.32.0/22
195.135.178.8/30
195.135.178.240/29
212.237.160.0/21
IPv6:
2a00:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:a9:7b:f8:06:a0:82:82:8e:5e:e0:a6:e8:61:23:b5:40:82:
b0:fe:a6:b2:99:95:39:15:82:bd:82:d2:a5:72:49:b0:7f:7f:
13:af:3a:c6:1d:fe:ef:f2:8a:c3:26:24:a8:57:68:f3:00:aa:
61:4d:5e:7e:5e:1f:79:5c:e6:ae:9c:9e:f8:1c:13:f9:d6:2c:
64:9e:96:dc:3e:a7:55:5a:30:e0:f0:81:9f:21:f2:90:d9:b0:
81:40:3c:c7:10:36:2a:e8:36:03:dd:7b:de:55:a9:84:67:9a:
30:f0:8e:98:d4:7d:90:33:b7:a1:84:b3:93:b7:c6:24:5e:b3:
59:66:dd:12:45:58:4d:41:f7:14:06:17:cf:1f:3e:06:b4:fa:
72:67:b6:ca:76:79:76:77:1c:5c:0e:ac:38:4c:cd:3f:89:fb:
19:0e:a4:1d:2e:03:2d:8a:ae:40:20:d4:f2:77:30:bd:97:61:
20:cc:21:07:1c:2b:79:7d:7b:1e:d2:97:c0:96:05:00:c2:e9:
33:1c:6b:c1:a5:78:e8:30:98:eb:34:e9:c7:89:53:d7:cd:fc:
e3:d2:0c:87:13:e0:25:6e:bd:47:42:12:07:7f:19:fd:85:0f:
17:32:84:c8:c6:78:ec:82:92:3f:bd:e1:65:b8:78:8f:1d:c0:
4d:ce:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:07:02 2025 by rpki-client