Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa
File: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (raw, json)
Hash identifier: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=
Subject key identifier: 8E:6B:BE:45:4C:00:1A:57:DD:8F:2B:88:5F:8A:5D:83:0A:76:4B:F7
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 019428279FB6C0D5FF87E2A69450DC611AA7
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa
Signing time: Thu 02 Jan 2025 17:54:32 +0000
ROA not before: Thu 02 Jan 2025 17:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201551
IP address blocks: 5.149.155.0/24 maxlen: 24
5.149.156.0/23 maxlen: 23
5.149.156.0/24 maxlen: 24
5.149.157.0/24 maxlen: 24
2a02:1710:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:9f:b6:c0:d5:ff:87:e2:a6:94:50:dc:61:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 2 17:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6bbe454c001a57dd8f2b885f8a5d830a764bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:5c:2f:98:0a:03:46:a2:95:52:3d:00:4e:
c0:d9:61:79:2a:89:6c:c7:37:35:78:31:25:c2:e8:
00:97:7f:c2:40:90:54:53:f9:92:67:f7:ed:da:e8:
07:8e:be:3e:3c:1b:11:87:2e:30:a5:01:6a:db:35:
cd:01:12:9b:6a:09:7c:32:d6:1a:4a:3c:5a:8a:6d:
68:df:90:3d:b4:a6:c9:41:14:d6:d1:20:af:78:7a:
31:e3:4d:df:26:44:95:67:02:2b:c7:53:c9:5e:0f:
cc:21:4c:95:a5:04:86:8f:29:22:fe:05:d7:c5:02:
7e:7e:a7:25:6d:51:03:1e:36:46:fb:f9:e4:f6:b0:
c1:5d:9a:f7:e8:1a:53:9a:f8:34:e5:80:b4:a9:02:
cd:65:b4:64:71:b1:57:9f:82:56:dd:a9:43:be:b1:
a9:2d:0b:08:e7:c3:0e:b6:a7:7e:c0:e9:63:37:e1:
e4:73:65:8b:10:6b:d9:6e:d9:4d:9c:de:29:e3:b0:
fb:ff:b0:2a:5a:5b:70:47:c6:7b:97:9b:2a:34:ee:
bf:a3:5b:15:0c:16:e8:fe:18:b5:1d:82:94:4a:a4:
0f:f1:b0:f7:c3:19:4e:24:78:ce:15:0c:27:0a:5a:
8c:7c:d0:3b:f9:63:e1:f8:25:85:cc:66:2b:01:f8:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:BE:45:4C:00:1A:57:DD:8F:2B:88:5F:8A:5D:83:0A:76:4B:F7
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.155.0-5.149.157.255
IPv6:
2a02:1710:6::/48
Signature Algorithm: sha256WithRSAEncryption
2e:b2:16:a6:c3:48:35:89:2b:14:5d:df:72:9f:47:d6:d0:d5:
34:15:30:1e:f3:0f:b0:0d:1c:dc:79:d8:9c:d9:f7:f5:92:35:
1b:3e:c6:95:ca:62:cd:27:8f:4e:20:af:e7:ee:87:24:9f:5b:
21:59:16:ef:6c:66:28:ce:5a:d1:4d:0a:2f:93:32:8a:90:b2:
e2:d7:fc:93:94:5a:55:cf:9e:81:92:b9:78:f0:cf:fd:f9:22:
ea:b0:4a:49:2e:5e:8d:e2:61:73:60:e2:0c:c0:a0:15:15:1e:
a7:0f:d5:1c:18:c5:df:58:10:eb:21:bd:19:1e:4d:e3:5c:ee:
b8:ce:8a:3f:7a:4f:55:32:9e:76:0f:7d:81:c0:c9:6d:c3:51:
19:e2:36:1b:b1:90:18:b6:19:32:c4:21:66:61:58:8a:62:4a:
6f:17:11:b3:02:4c:36:00:2c:91:dd:c2:21:57:95:0a:5f:de:
74:c2:23:2c:3f:c8:b5:12:50:79:b5:67:9e:da:8b:3f:9f:de:
a2:ec:cd:eb:c7:80:dc:eb:77:f4:3f:90:16:45:8e:32:e7:19:
09:fe:5b:19:57:23:fa:a7:ba:af:55:67:32:f2:37:e7:7a:ff:
c0:25:4f:f4:71:3d:01:df:74:2a:f7:59:67:32:07:a8:b5:68:
83:47:28:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQoJ5+2wNX/h+KmlFDcYRqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjUwMTAyMTc1NDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTZiYmU0NTRjMDAxYTU3ZGQ4ZjJiODg1ZjhhNWQ4MzBhNzY0YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOlcL5gKA0ailVI9AE7A2WF5Kols
xzc1eDElwugAl3/CQJBUU/mSZ/ft2ugHjr4+PBsRhy4wpQFq2zXNARKbagl8MtYa
Sjxaim1o35A9tKbJQRTW0SCveHox403fJkSVZwIrx1PJXg/MIUyVpQSGjyki/gXX
xQJ+fqclbVEDHjZG+/nk9rDBXZr36BpTmvg05YC0qQLNZbRkcbFXn4JW3alDvrGp
LQsI58MOtqd+wOljN+Hkc2WLEGvZbtlNnN4p47D7/7AqWltwR8Z7l5sqNO6/o1sV
DBbo/hi1HYKUSqQP8bD3wxlOJHjOFQwnClqMfNA7+WPh+CWFzGYrAfiYyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5rvkVMABpX3Y8riF+KXYMKdkv3MB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvam11LVJVd0FHbGZkanl1SVg0cGRnd3AyU19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAAFlZsD
BAEFlZwwDwQCAAIwCQMHACoCFxAABjANBgkqhkiG9w0BAQsFAAOCAQEALrIWpsNI
NYkrFF3fcp9H1tDVNBUwHvMPsA0c3HnYnNn39ZI1Gz7GlcpizSePTiCv5+6HJJ9b
IVkW72xmKM5a0U0KL5MyipCy4tf8k5RaVc+egZK5ePDP/fki6rBKSS5ejeJhc2Di
DMCgFRUepw/VHBjF31gQ6yG9GR5N41zuuM6KP3pPVTKedg99gcDJbcNRGeI2G7GQ
GLYZMsQhZmFYimJKbxcRswJMNgAskd3CIVeVCl/edMIjLD/ItRJQebVnntqLP5/e
ouzN68eA3Ot39D+QFkWOMucZCf5bGVcj+qe6r1VnMvI353r/wCVP9HE9Ad90KvdZ
ZzIHqLVog0coLg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:05 2025 by rpki-client