Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JmAkWv1cJ-_ALpGBIKZ-pjO1QNA.roa
File: JmAkWv1cJ-_ALpGBIKZ-pjO1QNA.roa (raw, json)
Hash identifier: 1jVgVz9fK2eLHH11rM7bbk4xiwfyxJxMqNWr/LsfvEA=
Subject key identifier: 26:60:24:5A:FD:5C:27:EF:C0:2E:91:81:20:A6:7E:A6:33:B5:40:D0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194A0FFCF7E33B06EDC2FA03E45733337B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JmAkWv1cJ-_ALpGBIKZ-pjO1QNA.roa
Signing time: Sun 26 Jan 2025 05:05:06 +0000
ROA not before: Sun 26 Jan 2025 05:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a0:ff:cf:7e:33:b0:6e:dc:2f:a0:3e:45:73:33:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 26 05:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2660245afd5c27efc02e918120a67ea633b540d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:0c:d1:76:b7:74:5f:ea:f9:2a:a7:80:01:
60:d6:36:a6:a2:91:17:95:4a:e2:e3:43:93:60:1d:
51:e2:7e:d6:e4:49:28:13:b7:05:cf:da:69:20:d7:
74:14:20:ff:04:0d:f3:ca:30:64:77:07:81:a3:ad:
c7:48:b5:08:1a:a4:07:4a:bd:51:05:5c:27:bc:7f:
71:ce:87:fa:cd:f6:9c:ec:e4:c9:15:f1:1e:71:f6:
31:14:4b:56:ae:db:0a:b5:21:05:b7:ed:03:21:c4:
66:aa:ec:3f:b4:36:2a:08:65:da:33:2c:1a:00:cf:
14:4e:5c:7a:50:d1:b1:7a:1f:fc:4f:10:2b:64:23:
97:8f:24:a6:e1:ba:cf:c5:d6:2a:79:41:c7:76:d4:
b4:0a:3f:4a:b7:3c:fb:63:6b:1f:2f:2a:26:32:e0:
0c:37:24:1d:6a:77:ea:6f:3f:11:88:f2:6c:04:8a:
b5:e2:b4:50:d4:bc:ab:5d:24:83:3f:b0:86:7b:a8:
68:da:c6:1e:1a:ff:62:59:9f:45:c6:b3:34:6c:10:
38:1d:95:94:63:6b:99:1e:00:66:61:f8:55:df:ff:
c1:9b:39:93:01:f3:dd:2e:54:d5:37:96:ae:5f:b9:
1e:01:9e:36:42:6f:44:4c:cb:e6:86:59:b6:62:3b:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:24:5A:FD:5C:27:EF:C0:2E:91:81:20:A6:7E:A6:33:B5:40:D0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JmAkWv1cJ-_ALpGBIKZ-pjO1QNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:94:36:14:52:a3:e4:bd:4c:88:0b:a1:f1:3c:64:e9:ff:76:
f5:c1:69:2a:07:67:7b:33:26:56:ba:19:0d:e9:91:f3:92:59:
2b:cc:d8:4f:a8:91:32:5f:5b:4b:69:0b:cc:5f:a2:12:73:fc:
fc:29:39:f7:66:d7:34:c0:f7:8f:de:c8:ac:f5:ed:19:f8:83:
d3:bc:0d:8e:33:9a:1d:02:9a:98:9d:b3:0b:f7:aa:e3:8f:57:
35:7c:b1:05:07:fb:00:3d:ef:b3:8d:a0:37:05:72:8a:48:f1:
77:a5:12:2f:ec:69:c4:9f:bd:9f:6e:c0:0d:94:57:7c:ff:bc:
e8:d2:af:9f:40:a4:15:41:c7:24:2e:13:de:f7:38:1c:ed:93:
de:7e:c3:f1:5d:6c:cc:13:3d:e7:ef:e7:c1:03:31:cb:cc:8b:
86:5c:af:3d:b1:ed:12:52:2a:6f:0d:4f:6e:91:3a:83:82:6a:
a6:70:67:b7:b5:a8:6d:7a:08:f0:27:c1:33:fa:d8:aa:c0:23:
54:11:51:e9:58:6c:9f:45:0d:af:ad:4f:ea:8b:6d:48:09:20:
d8:79:f9:16:39:00:e7:c1:a6:14:d8:fe:44:3a:7b:11:f4:28:
8d:d7:c9:46:79:f5:1d:7d:3f:13:73:7b:fc:61:2b:51:df:0b:
1d:dc:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 07:04:19 2025 by rpki-client