Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/j_UhRom1_CjoZ8ktPpSsCzemlX0.roa
File: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (raw, json)
Hash identifier: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=
Subject key identifier: 8F:F5:21:46:89:B5:FC:28:E8:67:C9:2D:3E:94:AC:0B:37:A6:95:7D
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0194258F3546DD59F2A257848775D6A93039
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/j_UhRom1_CjoZ8ktPpSsCzemlX0.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 217.169.192.0/20 maxlen: 24
217.169.192.0/24 maxlen: 24
217.169.194.0/24 maxlen: 24
217.169.195.0/24 maxlen: 24
217.169.196.0/24 maxlen: 24
217.169.197.0/24 maxlen: 24
217.169.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:35:46:dd:59:f2:a2:57:84:87:75:d6:a9:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff5214689b5fc28e867c92d3e94ac0b37a6957d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:55:af:1e:97:69:45:c9:5d:42:1d:dc:7c:
8b:4e:87:cd:19:33:9b:c1:f2:97:48:8b:6e:ea:e2:
64:6c:db:c0:08:bd:f8:53:f4:88:38:e8:19:a4:5f:
60:ef:9b:92:54:e5:ef:0a:b9:a2:a4:0c:93:07:92:
95:73:c3:b1:a3:7c:43:4b:31:1b:be:92:5f:52:23:
28:79:4f:e0:d7:4c:45:29:45:46:7d:57:c2:81:ae:
a8:40:5a:d8:d3:4e:e2:6f:4a:48:ae:e6:37:25:95:
59:46:1b:74:5c:65:96:2c:36:f2:6e:f5:0a:d2:d3:
b5:5c:27:dc:b4:bf:b0:99:9e:cf:1a:57:2a:e7:b8:
c6:41:61:56:78:10:ad:57:2c:c2:52:47:b6:df:b9:
a5:af:e6:df:c8:54:41:0c:fd:2b:be:8f:96:24:0b:
cf:f7:35:db:73:bf:ad:36:73:08:42:ad:c5:e2:a0:
2b:8f:fb:87:2a:65:9b:75:71:12:11:07:a1:e5:bf:
45:a3:c1:23:96:6b:85:db:8a:dd:5a:1d:7e:ec:b3:
5d:85:68:70:f6:c1:46:5b:d1:a4:7e:5d:b8:5a:a6:
85:e8:1e:c2:e9:4d:68:1f:1c:86:12:b0:56:25:0d:
9c:c1:75:cc:a6:e1:0a:69:6b:68:6c:9f:81:64:e0:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:21:46:89:B5:FC:28:E8:67:C9:2D:3E:94:AC:0B:37:A6:95:7D
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/j_UhRom1_CjoZ8ktPpSsCzemlX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.192.0/20
Signature Algorithm: sha256WithRSAEncryption
72:da:50:1b:65:7d:10:47:de:21:3a:50:66:76:f2:3b:24:35:
2c:34:27:e5:d0:2c:24:73:e8:04:56:4b:5f:f0:aa:d4:37:64:
34:79:39:55:03:c8:37:b7:11:b5:f4:47:4e:2a:1f:55:14:98:
6f:b1:00:ce:20:e8:5c:f8:fa:a8:48:40:37:2f:cd:50:e3:30:
4d:90:80:fb:2b:78:b6:fb:80:92:af:d8:b4:31:43:9d:9c:7d:
ad:9d:bb:9c:76:4d:72:82:47:08:67:9d:d8:5e:b1:69:90:30:
a5:80:54:75:f4:e4:6e:60:48:fa:87:9a:9d:73:6e:87:9b:f7:
8a:09:28:01:fc:62:51:c2:c3:b0:5c:29:e5:f8:0a:27:a7:e5:
1c:99:2e:56:a2:af:66:7f:ed:e0:b2:8a:13:fd:c1:ab:e7:a3:
8a:6a:94:fc:17:d3:7f:29:ab:3d:d6:d1:51:5b:42:af:f9:b5:
66:f2:cc:21:c3:27:c3:23:a1:77:1b:07:99:9c:54:93:34:08:
a6:0b:ed:73:58:af:ac:62:5e:17:04:e7:b5:08:ce:da:ff:4e:
19:5f:d8:30:19:97:a0:5a:95:88:41:20:8e:13:02:12:d8:75:
9f:cb:1f:74:04:c4:26:1b:ee:a9:81:e1:94:7e:d7:f9:a9:06:
94:a3:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:19 2025 by rpki-client