Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jvff6WGoYFxaA4PYboUwWnOfv3c.roa
File: jvff6WGoYFxaA4PYboUwWnOfv3c.roa (raw, json)
Hash identifier: +TXfc4B1fLIeKgxG681JTLQSo3SYOu7646Py3pWF6TA=
Subject key identifier: 8E:F7:DF:E9:61:A8:60:5C:5A:03:83:D8:6E:85:30:5A:73:9F:BF:77
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019425FD51311BE8D8675224A88C7FEB43D9
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jvff6WGoYFxaA4PYboUwWnOfv3c.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.122.0/24 maxlen: 24
2a10:d501::/32 maxlen: 32
2a10:d503::/32 maxlen: 32
2a10:d505::/32 maxlen: 32
2a14:2500::/29 maxlen: 29
2a14:2700::/29 maxlen: 29
2a14:2b00::/29 maxlen: 29
2a14:2d00::/29 maxlen: 29
2a14:2f00::/29 maxlen: 29
2a14:3300::/29 maxlen: 29
2a14:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:51:31:1b:e8:d8:67:52:24:a8:8c:7f:eb:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef7dfe961a8605c5a0383d86e85305a739fbf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:db:41:eb:78:28:c3:b1:ff:c1:26:72:51:
21:94:7c:2c:98:2a:e8:fa:08:c9:d4:27:ce:2d:ff:
3f:eb:ec:81:f6:18:38:3a:77:b6:75:0d:52:88:dd:
e7:5e:fa:1d:bb:56:92:84:c8:10:40:be:3e:92:3f:
2b:a3:e3:ca:a7:b8:e0:ac:00:fd:d8:9c:f9:49:85:
22:8e:14:14:51:4f:f4:ed:e9:ad:08:67:46:a9:d4:
cd:77:61:88:11:22:a3:39:53:72:24:7d:0b:72:fe:
2e:d2:78:2b:bf:53:4c:7e:60:79:c3:e4:5d:cf:c9:
bb:ae:db:4b:7b:ab:bb:aa:1b:3b:7a:a3:4c:b2:c1:
ab:69:c7:37:70:22:05:c7:99:a1:00:19:29:95:65:
20:63:47:08:1f:f3:22:eb:1d:e3:f0:3e:47:fd:c1:
d4:70:0f:09:ff:ad:17:e7:63:82:55:2b:ab:85:05:
2a:e0:59:1c:15:58:a1:8c:c9:6d:9f:b5:8d:15:ed:
38:a5:4e:ab:5d:ce:0b:e1:c4:75:a8:78:aa:39:a8:
32:dd:c0:1a:bc:8f:32:b1:01:9e:e7:3d:19:c8:07:
ae:38:f6:31:f5:b2:ac:2e:55:5d:6f:e8:e7:3e:e1:
ba:cb:2d:41:86:59:b7:a9:79:57:8e:d8:9c:6b:3b:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:DF:E9:61:A8:60:5C:5A:03:83:D8:6E:85:30:5A:73:9F:BF:77
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jvff6WGoYFxaA4PYboUwWnOfv3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.122.0/24
IPv6:
2a10:d501::/32
2a10:d503::/32
2a10:d505::/32
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
6f:4a:d4:fd:1e:6e:08:1f:cc:07:46:fa:6d:31:f4:1a:44:fd:
c7:d5:40:f5:da:89:21:21:64:48:ee:23:96:84:c4:08:f0:6c:
4b:84:b6:d5:38:6a:a5:af:8d:70:83:3d:f8:d2:a5:3f:17:10:
22:a0:13:a5:d2:a0:6a:6a:43:5d:fe:36:ed:11:95:f1:d1:6b:
c3:bb:cf:78:14:f3:43:d3:ee:bd:a2:ca:93:94:0e:8a:b0:16:
75:1a:39:64:95:df:1b:f3:62:8b:24:16:b7:39:8b:2e:34:93:
e7:7a:32:b2:4b:02:c5:87:a3:de:63:04:d3:49:92:34:a0:91:
88:30:e6:fb:9d:70:f5:6c:b6:cc:aa:55:01:04:a6:60:2c:5a:
f1:bb:69:23:c7:72:54:b4:b7:6f:c9:fc:bc:f5:a8:a6:97:ee:
ab:21:d0:15:4a:13:07:36:74:ac:ab:39:4b:bf:cb:43:6b:5d:
a6:8a:fd:ca:f9:cf:c3:b0:53:3e:b6:69:64:0f:e8:e4:01:f6:
71:4f:fb:c8:d2:85:90:6f:f5:3a:28:94:47:eb:0e:ca:6a:eb:
0e:5f:f8:18:3b:26:9e:c1:81:84:66:39:5f:b2:e8:26:6d:61:
32:04:32:c1:51:6f:be:d7:18:56:8b:87:ad:20:10:8a:5e:6a:
69:40:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:52:58 2025 by rpki-client