Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5JJ6e9sw_mSCIHbXUFVmITnHDKY.roa
File: 5JJ6e9sw_mSCIHbXUFVmITnHDKY.roa (raw, json)
Hash identifier: rFRlGKEDQDr1A/xRF1J8xSlGYla2YZQMGzgWc6T/xik=
Subject key identifier: E4:92:7A:7B:DB:30:FE:64:82:20:76:D7:50:55:66:21:39:C7:0C:A6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469E15C9243A88817C70FAA33B2F30
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5JJ6e9sw_mSCIHbXUFVmITnHDKY.roa
Signing time: Thu 02 Jan 2025 13:48:46 +0000
ROA not before: Thu 02 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 31.210.39.0/24 maxlen: 24
31.210.44.0/24 maxlen: 24
78.135.84.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9e:15:c9:24:3a:88:81:7c:70:fa:a3:3b:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4927a7bdb30fe64822076d75055662139c70ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:73:6f:71:60:51:3b:4d:d8:5a:85:00:57:
17:32:b6:96:1d:18:19:18:46:d9:26:27:fb:24:50:
a2:32:7e:69:8a:df:50:b9:9a:3f:d4:e9:e8:02:42:
90:ba:40:2e:af:5a:48:c5:d3:d4:ca:e3:7d:e7:ba:
e9:2d:d6:34:45:b8:27:5d:c9:cd:58:c7:35:bf:8d:
62:df:65:10:48:b2:c8:fb:60:81:59:74:f6:3e:67:
b8:29:d7:db:c2:c6:4c:26:36:33:6f:0f:ff:98:a9:
90:78:17:1e:4a:58:a9:92:13:79:35:1d:1a:9b:00:
fb:73:e2:6f:08:20:6e:bd:c6:a4:e5:5e:45:b7:19:
cf:75:43:fd:b6:2a:73:22:8b:48:bf:15:a6:41:e4:
08:6d:8e:5b:75:42:39:ee:4e:59:64:03:db:a4:09:
da:40:11:c9:91:8b:1e:19:96:10:9c:6c:b5:40:47:
49:80:f6:65:b3:4f:0e:27:12:9b:e1:49:80:2a:14:
a6:15:e6:94:8c:9f:ab:1b:ae:33:91:9c:40:30:59:
96:bc:35:c0:5f:b4:a9:7b:19:c6:a5:3c:49:85:64:
a0:b7:74:9e:48:c4:f2:08:54:62:8e:df:7a:04:09:
83:b1:4a:fc:f8:27:26:ae:bb:23:be:54:b2:aa:f1:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:7A:7B:DB:30:FE:64:82:20:76:D7:50:55:66:21:39:C7:0C:A6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5JJ6e9sw_mSCIHbXUFVmITnHDKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
31.210.44.0/24
78.135.84.0/24
78.135.98.0/23
Signature Algorithm: sha256WithRSAEncryption
75:71:cd:83:eb:d5:c8:7c:55:f8:0f:82:04:86:94:80:b4:f9:
db:4f:54:8d:ad:ec:67:37:af:ea:e9:7a:e3:dc:ea:d5:ae:4c:
87:3d:0a:9f:83:2e:70:fa:cb:f4:71:4b:b4:79:04:01:88:45:
c5:26:f6:91:44:2e:48:95:96:e6:ab:08:7e:81:38:8e:74:6a:
8d:57:f6:a2:f2:f0:3b:54:10:2f:c4:65:69:da:d0:af:7d:8a:
d6:15:ed:fb:f6:68:fd:61:05:02:58:19:52:4e:1f:06:9f:0d:
18:d2:7d:5b:b2:f9:4d:e5:05:c6:21:2a:42:b6:be:fa:25:8c:
77:b2:c7:5f:9a:b5:c4:2e:b1:c6:e4:19:44:ba:5b:1f:88:a4:
02:a4:9b:64:96:2a:dd:44:df:2e:12:db:ae:c3:ca:29:8b:94:
cf:4e:93:98:83:b3:49:33:52:7e:55:78:e9:9e:28:52:10:9f:
eb:8e:8b:59:da:c4:2f:9f:e9:a3:a5:1f:e0:80:e7:74:c6:58:
06:46:48:1e:a8:0a:e6:9d:c4:1c:10:4e:61:5d:f5:e8:2e:03:
b1:6b:3b:4f:c6:58:3a:85:1c:96:4b:dc:c4:5d:45:ba:b4:e5:
db:09:17:e3:0f:4b:5b:02:b4:db:0e:84:a1:13:83:f0:31:d1:
d2:98:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:27 2025 by rpki-client