Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/5jBhyCclhjBWCSh1O-0WT6aKzvs.roa
File: 5jBhyCclhjBWCSh1O-0WT6aKzvs.roa (raw, json)
Hash identifier: MRjgNDdW46vQb+SgK5+muMmigtF72q9wmhV3HqxuIuc=
Subject key identifier: E6:30:61:C8:27:25:86:30:56:09:28:75:3B:ED:16:4F:A6:8A:CE:FB
Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial: 0194266A2522DEA645D406D35F440D0A96B5
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/5jBhyCclhjBWCSh1O-0WT6aKzvs.roa
Signing time: Thu 02 Jan 2025 09:47:57 +0000
ROA not before: Thu 02 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30811
IP address blocks: 217.114.80.0/20 maxlen: 20
217.114.94.0/24 maxlen: 24
2a00:1c50:1::/48 maxlen: 48
2a00:1c50:5::/48 maxlen: 48
2a00:1c50:6::/48 maxlen: 48
2a00:1c50:7::/48 maxlen: 48
2a00:1c50:94::/48 maxlen: 48
2a00:1c50:2002::/48 maxlen: 48
2a00:1c50:2003::/48 maxlen: 48
2a00:1c50:2004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:25:22:de:a6:45:d4:06:d3:5f:44:0d:0a:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Validity
Not Before: Jan 2 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e63061c827258630560928753bed164fa68acefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:2e:1f:a9:4c:48:b7:fa:25:21:b5:87:f0:
8f:90:bd:ed:55:60:64:64:1e:68:7c:0a:d5:10:da:
f9:82:a7:7f:c6:ff:9c:22:09:f5:91:27:c2:8b:bb:
c3:b4:50:11:7a:eb:2e:a4:8d:a8:2b:de:1c:fc:05:
4f:18:6f:35:53:71:91:e1:ca:a9:d5:53:cb:64:85:
f5:0d:4a:f7:49:7b:10:c1:30:2e:7f:6c:28:53:05:
cf:35:28:df:15:be:17:a7:c6:75:57:6e:d7:35:a0:
66:0f:50:91:cf:2e:9a:0e:9a:6e:74:67:d5:e3:6f:
15:d7:60:dc:6a:5f:ee:1a:68:b0:b0:7c:d5:c9:7d:
87:d8:30:e9:56:b5:54:a3:8e:4e:ff:d6:23:2b:6a:
92:58:50:de:6e:be:b7:f1:f4:96:94:b7:75:fc:47:
00:7e:b4:72:1b:03:41:d8:63:5a:a1:55:1a:e4:fd:
3f:01:c1:67:73:12:62:af:53:36:38:10:85:5c:cb:
d7:41:da:80:fd:c0:c2:0b:2f:3f:fc:5d:8a:20:2b:
7e:91:9e:e2:26:e9:d4:35:1b:b6:e1:49:4a:10:20:
8f:0e:0c:76:32:86:9a:c1:a3:61:0c:b0:0f:0e:6d:
d8:9e:a5:f1:2c:62:2a:9c:4f:00:25:d7:a2:95:0f:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:61:C8:27:25:86:30:56:09:28:75:3B:ED:16:4F:A6:8A:CE:FB
X509v3 Authority Key Identifier:
keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/5jBhyCclhjBWCSh1O-0WT6aKzvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.80.0/20
IPv6:
2a00:1c50:1::/48
2a00:1c50:5::-2a00:1c50:7:ffff:ffff:ffff:ffff:ffff
2a00:1c50:94::/48
2a00:1c50:2002::-2a00:1c50:2004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:5c:0c:ef:4b:69:07:a9:d3:0a:63:cd:cd:38:a0:76:5f:89:
b0:ae:fe:c2:10:87:1d:36:c8:c4:54:f1:db:e8:90:b5:71:54:
ea:72:52:ee:0a:65:c1:a9:39:c4:62:f0:c0:27:f3:6f:5c:2e:
60:91:d2:e2:81:c7:e0:81:dd:7e:f7:86:8a:a7:29:07:74:a4:
ef:67:9b:53:23:86:6f:11:50:09:56:fd:21:e7:6a:f6:94:77:
62:dd:fa:d2:c7:66:a8:f1:9c:f7:47:f9:64:10:51:02:d8:39:
1c:4f:eb:1f:71:69:e8:32:e4:9b:0b:ef:54:ce:b2:b6:cf:bc:
bc:2e:52:2c:95:ae:6c:47:0a:a9:32:34:94:d5:e3:c5:b9:79:
cb:7d:b7:b6:c3:cf:78:c9:f7:89:40:3d:24:d8:53:2e:79:00:
3a:00:cb:b2:62:48:a8:35:54:43:06:82:f9:44:81:49:a7:64:
42:f5:25:62:2e:76:f4:b4:1b:9f:4b:04:62:28:65:72:5e:4f:
1e:4c:cc:d5:ce:30:2f:7d:6e:a5:13:aa:2e:af:5d:a7:b1:ab:
c9:97:ab:ae:a6:0e:8d:5f:db:70:bd:20:73:f7:61:51:00:3e:
85:05:55:de:c4:9a:99:b6:e8:aa:5a:7a:9d:d8:51:4f:e7:3e:
bb:f2:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:16:14 2025 by rpki-client