Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/JmahROWNlzzWLOhj6faRjwc1jmM.roa
File: JmahROWNlzzWLOhj6faRjwc1jmM.roa (raw, json)
Hash identifier: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=
Subject key identifier: 26:66:A1:44:E5:8D:97:3C:D6:2C:E8:63:E9:F6:91:8F:07:35:8E:63
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0194228DBF9ED40DFFD43CEFA5DCE43009AA
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/JmahROWNlzzWLOhj6faRjwc1jmM.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15506
IP address blocks: 62.169.0.0/22 maxlen: 22
62.169.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bf:9e:d4:0d:ff:d4:3c:ef:a5:dc:e4:30:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2666a144e58d973cd62ce863e9f6918f07358e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:b3:94:85:70:72:c0:ab:8c:c5:fc:3f:c1:
cb:35:0c:60:2f:83:1f:bb:fb:51:6c:da:7f:27:9c:
22:90:6d:21:9c:e6:9b:35:43:25:62:48:36:7c:0c:
34:7b:16:ed:8a:85:fb:c7:b6:8d:5f:f6:bb:d6:df:
7f:df:81:5e:fc:5e:9c:ec:8a:74:37:62:71:b4:41:
11:9b:01:b8:1c:7b:c3:77:6d:c9:a4:98:d3:da:06:
e8:69:a7:9b:62:b9:30:88:37:d2:09:0e:12:5b:36:
c5:ff:39:d8:ef:4d:46:b2:fe:e6:ff:09:82:56:10:
35:23:bd:94:9f:52:b8:40:8d:1b:7c:21:8b:0c:e7:
53:9d:f2:42:eb:5a:31:d0:e2:05:e0:10:88:e6:ce:
19:02:63:b7:cd:f7:91:19:58:b3:3f:d5:f5:25:fd:
4e:a2:cb:06:16:9b:58:91:ad:12:84:23:3d:3e:ac:
71:be:16:da:17:ac:af:80:a7:55:f1:94:38:af:74:
6a:c1:44:53:ac:11:5d:f4:86:ae:de:3c:10:9c:7f:
63:37:25:0d:52:25:92:be:71:95:d0:bf:50:f8:22:
e0:ca:d7:af:ee:9e:5d:99:96:34:34:de:75:46:e4:
91:c9:63:88:16:3d:ee:8b:37:23:7c:f9:34:7a:b2:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:A1:44:E5:8D:97:3C:D6:2C:E8:63:E9:F6:91:8F:07:35:8E:63
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/JmahROWNlzzWLOhj6faRjwc1jmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:2d:f6:c0:7f:b7:e8:46:75:6c:65:57:94:46:51:0a:01:72:
c1:f7:19:2b:71:aa:97:ea:4f:dc:82:8f:f9:89:b6:81:a9:87:
0c:02:ae:53:5c:a6:df:75:44:05:92:2d:10:15:c8:7c:85:51:
b6:5c:de:6c:bf:01:b1:70:a9:f3:78:a3:1f:58:0d:a9:9a:2b:
3b:ad:10:7d:ca:97:db:8d:3b:c2:41:cf:54:7c:f0:7c:5f:b3:
fd:cd:88:27:b2:dd:36:96:4f:ea:65:b0:f8:31:17:a1:15:3a:
a8:6f:5e:b0:13:65:e1:28:98:6b:c5:fc:07:8d:e8:92:1b:19:
d7:19:16:c6:ab:ea:1a:0f:77:4e:4e:e3:4c:40:4c:87:b9:a5:
82:13:70:6d:a7:44:d4:c8:2f:cf:26:e8:fe:97:2b:12:85:26:
d3:b7:5b:9c:a2:49:1b:d0:c8:09:10:92:35:6a:15:25:6e:00:
9d:95:7d:ea:11:83:8b:48:3e:e5:b7:68:e8:55:1c:5f:60:20:
b1:f6:15:49:e6:9c:0a:75:25:0f:79:11:24:c4:ec:88:28:f4:
4a:1f:40:a5:0b:6c:8f:01:0e:53:a8:0b:80:9a:01:39:e8:06:
09:e3:f9:2b:93:19:0a:40:59:42:50:da:25:07:c5:20:af:4f:
57:47:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:57 2025 by rpki-client