Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa
File: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (raw, json)
Hash identifier: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=
Subject key identifier: 01:A3:09:38:90:11:FE:35:42:57:03:18:0F:06:08:DE:09:83:F6:5D
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA365CD2DE18A8051032D670F75B83
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 37.114.35.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.44.0/23 maxlen: 24
103.252.89.0/24 maxlen: 24
103.252.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:5c:d2:de:18:a8:05:10:32:d6:70:f7:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01a309389011fe35425703180f0608de0983f65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:41:65:5d:50:1c:ed:5b:52:a2:d7:5b:f4:
49:63:25:c2:6f:53:51:af:c5:ee:28:16:7e:9a:f2:
97:48:cb:12:ce:37:47:2e:f2:87:e2:09:06:3f:2b:
54:cd:22:07:70:2a:0c:c3:24:ac:bc:fb:97:2e:4c:
a6:69:5e:d5:45:c5:4f:6e:4d:2a:76:50:1e:be:9d:
0d:6c:98:72:a8:7f:95:ab:4e:6e:36:ce:eb:77:40:
76:93:9e:14:49:d6:7b:9c:6e:95:ad:54:c0:85:d9:
9a:96:00:9b:93:80:22:b5:ca:c4:e2:87:05:ae:6f:
0f:8c:03:09:95:82:88:7f:bf:5d:83:11:d1:da:50:
33:d3:a7:ca:bf:9f:5d:ea:fa:e2:03:e7:ae:cc:49:
44:cf:83:2d:64:7e:75:a2:8d:55:e8:ea:65:be:9b:
2a:7d:5c:8c:29:91:e2:82:e9:e0:e9:24:63:1f:f7:
46:2a:66:9b:e8:11:7a:62:ce:9f:5a:e0:86:fa:e3:
12:ed:4c:af:d8:86:98:ae:08:6d:f7:cc:9a:b3:07:
80:ed:72:15:71:13:ec:72:72:c4:04:78:31:df:e4:
5b:a8:16:f4:29:8d:43:20:df:95:3f:20:f4:67:26:
d9:f2:75:9b:5c:4d:72:ab:37:4c:ce:c9:71:6e:d0:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:09:38:90:11:FE:35:42:57:03:18:0F:06:08:DE:09:83:F6:5D
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.35.0/24
37.114.43.0-37.114.45.255
103.252.89.0-103.252.90.255
Signature Algorithm: sha256WithRSAEncryption
ac:74:f8:3e:7a:3f:ee:21:59:c0:a9:17:cf:99:f0:e0:8a:e1:
e9:7e:6a:23:f0:f6:cf:ca:88:a2:c6:4d:dc:74:78:23:98:e5:
5c:d2:0a:2c:c4:a5:1f:06:59:ac:f5:c2:fc:f5:5b:f8:7a:7d:
f2:5a:26:d3:e3:5c:8f:19:26:f0:a9:60:8e:1b:76:a8:ec:f3:
7b:ad:83:d0:c1:7f:52:10:c0:ed:ac:37:84:72:b4:a5:aa:f6:
ee:43:df:27:0d:3f:ff:d6:c9:72:aa:06:e3:5d:a1:f5:1f:e9:
0e:84:6c:6b:d2:81:24:54:b3:bc:1a:fa:7c:c9:14:9c:f3:7b:
ed:c6:3d:62:d2:35:8f:46:0c:ec:17:83:2a:21:1c:ed:fb:1f:
cb:e2:0f:bb:13:8a:87:a3:60:68:fc:ac:68:70:42:c1:a7:da:
69:ee:f0:9e:18:8a:a5:45:9a:75:a8:0e:61:ed:72:c0:bb:21:
dd:25:41:a1:ba:1b:40:4c:4b:de:1f:5b:13:8d:d2:a5:21:c1:
96:67:74:38:78:0d:50:3c:bf:4f:7e:8e:19:a8:01:21:c3:8a:
17:ae:7d:f1:f6:ba:ad:fb:ed:95:e4:99:6f:34:d2:00:40:77:
ee:ad:0e:fc:91:92:d3:9a:a9:4e:00:37:6c:4f:b1:08:0c:67:
f3:2f:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:08:10 2025 by rpki-client