Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa
File: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (raw, json)
Hash identifier: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=
Subject key identifier: 73:E8:D8:B4:A4:9F:6B:85:48:57:47:5C:ED:25:47:1A:2D:70:A4:33
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01942521E50D58825081C2993144E28CA3FB
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49455
IP address blocks: 46.249.224.0/19 maxlen: 19
82.194.192.0/19 maxlen: 19
109.108.192.0/19 maxlen: 19
188.113.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:0d:58:82:50:81:c2:99:31:44:e2:8c:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73e8d8b4a49f6b854857475ced25471a2d70a433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:86:a9:a5:b8:db:11:9f:22:a4:7c:6a:cd:
ab:30:b1:4d:f7:2a:53:19:e3:e7:2c:b4:74:32:45:
45:69:e2:f0:77:ea:43:e4:f2:25:7b:b6:cf:9c:82:
2e:f8:4a:7b:f8:84:f1:27:fa:df:d0:b7:26:8b:00:
61:87:84:e8:5e:47:97:f9:58:5e:8f:4c:d2:24:35:
32:ae:7b:04:d8:57:d5:0f:42:6c:3f:9b:ba:f8:ed:
da:33:d3:0c:7f:40:e0:b1:8d:e3:50:fd:d8:14:e4:
ce:aa:71:53:8e:35:c2:19:2a:e4:9d:29:96:87:b9:
82:72:94:d0:4d:7f:28:b0:fd:40:0c:a3:4b:e3:37:
59:c6:e8:c4:73:84:f1:1e:49:98:2e:9a:b7:07:e6:
bc:ac:91:07:2a:f1:6d:ef:d4:d4:64:d0:69:13:fb:
1a:a2:52:a5:1e:28:e3:31:13:78:28:21:fa:2b:99:
a0:41:5b:73:b4:21:0c:d4:13:c7:c2:14:c3:cc:97:
3e:85:2f:2e:88:04:23:66:10:00:d7:f7:6f:b8:60:
be:19:45:c7:5b:b0:80:01:9c:13:2d:90:3e:28:69:
b1:43:47:0d:a8:11:57:b9:be:c2:f0:80:4c:35:c6:
97:63:0c:25:34:20:db:c7:de:58:a3:d3:25:f9:9c:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:D8:B4:A4:9F:6B:85:48:57:47:5C:ED:25:47:1A:2D:70:A4:33
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
82.194.192.0/19
109.108.192.0/19
188.113.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:a5:7f:bb:71:6a:77:8f:e0:1f:9f:23:1a:05:ce:ef:46:7c:
cb:7a:d6:60:0a:20:fc:6f:1b:1f:a4:cc:4a:03:0b:4f:bc:d6:
c3:50:11:53:19:72:ec:af:7c:96:f4:a3:31:e0:19:8a:c7:02:
24:ff:8f:c2:c2:cf:c4:d0:1d:e8:93:ec:93:2c:e2:cd:bd:55:
32:1f:eb:31:73:32:86:4a:a7:ea:a6:b0:63:f0:39:28:ec:28:
4f:c2:67:1c:d3:c0:a6:5b:13:a4:4a:8c:9c:25:55:ac:0f:b1:
ae:c8:0c:af:0d:e2:f4:16:b4:e7:fe:81:05:59:94:6b:de:d6:
66:25:01:65:76:9d:b6:5e:55:0f:64:19:dd:b9:b0:4a:a2:5e:
93:36:c9:9c:12:57:97:a2:e4:10:52:02:0e:b0:b2:77:ce:59:
63:3c:84:33:35:92:9d:8f:33:bf:9f:cb:18:bb:4f:6f:4f:95:
02:1e:71:1e:fd:f3:c5:ee:2b:a6:2c:6e:cf:6e:73:b6:66:f2:
1a:68:7d:f7:26:5e:b3:01:9f:52:63:b3:9c:c5:c8:44:82:03:
1b:c7:45:24:b3:61:33:fd:e4:60:23:c3:be:63:6e:9d:a1:c4:
12:81:7b:83:b0:1d:29:4d:d1:11:a9:02:16:6b:5f:b1:94:70:
2a:92:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:45 2025 by rpki-client