Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa
File: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (raw, json)
Hash identifier: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=
Subject key identifier: 25:F9:96:B5:FD:F6:75:98:51:57:02:50:D5:9B:4A:42:B4:10:01:F8
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A44D71B3E07DE180BE4B3C34C028F
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.131.228.0/22 maxlen: 24
45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
62.3.60.0/24 maxlen: 24
62.233.52.0/24 maxlen: 24
146.19.123.0/24 maxlen: 24
176.116.11.0/24 maxlen: 24
194.104.239.0/24 maxlen: 24
212.18.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:44:d7:1b:3e:07:de:18:0b:e4:b3:c3:4c:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f996b5fdf6759851570250d59b4a42b41001f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:f9:9e:f2:ab:92:18:b6:8d:6a:9d:c4:d0:
2a:72:fa:e8:a8:aa:d9:f9:c0:27:0a:95:73:c7:87:
3b:93:55:66:a7:e2:b6:6a:04:07:79:8c:d0:27:f9:
1b:35:0c:27:79:4d:33:55:af:cd:ea:15:e4:dc:db:
b0:b2:0a:0a:cc:08:0b:7a:84:fc:76:fd:e3:3b:36:
a2:2e:85:7c:26:4d:70:c3:a5:72:4c:64:af:10:56:
4d:e8:37:51:f8:0e:30:3c:03:54:b1:81:10:7e:e7:
1f:91:a5:05:03:1a:d4:78:66:05:20:a2:83:da:87:
e4:e6:49:de:35:b9:a2:e2:cc:c9:f6:ed:1d:04:86:
dd:6c:41:82:c4:c4:00:be:b1:c0:c4:af:9a:67:54:
df:25:65:f6:17:aa:83:29:25:43:b2:46:5b:da:4d:
81:9c:e0:3d:4d:ad:39:98:dc:63:b3:ef:7b:45:44:
ab:c8:72:91:30:c1:fa:13:c6:87:8a:72:75:72:77:
36:98:f6:50:9b:da:63:ea:95:38:b2:e3:f8:cd:4d:
ca:d4:df:5d:8d:c1:20:ca:14:dc:10:54:7f:6b:55:
eb:03:0e:ed:52:2d:bd:04:df:93:7a:32:64:02:80:
fb:50:e7:2d:d5:18:0e:7c:2e:ba:d9:f8:92:ef:22:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:96:B5:FD:F6:75:98:51:57:02:50:D5:9B:4A:42:B4:10:01:F8
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
45.139.228.0/24
45.139.230.0/24
62.3.60.0/24
62.233.52.0/24
146.19.123.0/24
176.116.11.0/24
194.104.239.0/24
212.18.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:91:8b:64:f9:57:2d:d9:22:6e:95:81:b2:b5:69:a3:96:df:
21:b9:f6:64:33:00:c1:e2:ea:b9:25:c4:fe:df:e7:6d:51:e5:
cf:40:4e:06:52:e0:9b:a0:d6:49:55:67:91:c4:76:af:01:5b:
e1:1a:79:f7:03:16:6f:f0:39:ea:73:6d:3b:1c:18:ae:2b:df:
4d:25:38:25:aa:fa:d9:2a:d7:51:fc:6b:78:b9:63:a7:1d:a6:
0a:a0:91:34:e0:b6:43:b2:c4:a0:b6:6b:7b:95:4a:a4:15:0b:
69:c5:a2:5b:27:12:b5:08:d7:e1:68:dc:66:fe:4b:e0:ab:77:
b5:44:27:eb:08:02:55:10:1d:7e:f8:82:5c:c2:77:e9:30:b0:
7c:60:de:10:dd:4b:9a:6d:b5:c0:1f:e9:e0:82:5b:17:94:19:
bd:7d:d8:4e:a6:9e:89:ca:9f:c3:d0:5d:73:7d:0b:f6:8d:c0:
81:39:bb:63:4a:bc:c0:4c:e6:2f:e9:69:56:64:8f:b8:f8:44:
0b:76:bd:40:0b:80:82:28:97:d6:44:12:9d:88:97:56:7c:a5:
02:b7:02:41:8d:1b:69:89:6d:41:6c:46:4d:8c:cb:21:44:29:
1a:29:00:ec:91:a8:dd:eb:72:3d:0e:fd:77:d6:46:5a:78:95:
eb:da:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:34 2025 by rpki-client