Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jioPSApDTojUKI1OAKDQ1vyqBhQ.roa
File: jioPSApDTojUKI1OAKDQ1vyqBhQ.roa (raw, json)
Hash identifier: DSlGJj0BhYkuOJq4O6rF4J+lClA/b8ne9/5E/McI9VU=
Subject key identifier: 8E:2A:0F:48:0A:43:4E:88:D4:28:8D:4E:00:A0:D0:D6:FC:AA:06:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223EBC3A7ACEA7F71819E7CB446EB8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jioPSApDTojUKI1OAKDQ1vyqBhQ.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210397
IP address blocks: 2a0e:97c0:780::/44 maxlen: 48
2a0e:97c0:780::/48 maxlen: 48
2a0e:97c0:781::/48 maxlen: 48
2a0e:97c0:78b::/48 maxlen: 48
2a0e:97c0:78c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3e:bc:3a:7a:ce:a7:f7:18:19:e7:cb:44:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e2a0f480a434e88d4288d4e00a0d0d6fcaa0614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:88:53:e2:bb:a4:de:c1:6f:d8:33:a6:03:
3c:4a:bd:4d:02:b1:fe:34:68:ab:6c:70:71:e6:97:
08:02:d7:f8:7c:d8:84:dc:3b:6e:36:e2:46:32:36:
3f:d2:10:95:9f:19:46:d8:08:02:16:eb:f8:82:5b:
37:15:61:e0:72:9d:57:5c:9f:6a:ee:b1:2e:90:fe:
62:9d:30:61:31:6f:bf:be:12:7e:95:ba:8a:df:f5:
13:a7:d0:7b:e6:56:fc:6f:6f:92:e1:4e:65:10:37:
58:24:31:6d:69:db:6c:71:e9:a4:68:bf:04:9e:0e:
39:bb:06:a9:b0:46:93:6b:bb:0e:33:38:99:88:ef:
df:04:9d:f8:5e:b6:04:8d:cb:48:be:01:0a:99:93:
46:40:b8:c2:4a:a1:08:e9:2c:81:80:55:22:b6:d3:
ee:06:cc:ef:fa:72:ba:5a:fa:23:75:fb:b7:71:d1:
b2:31:b6:68:e7:d2:0f:6e:f0:2c:40:42:cb:c6:d3:
35:d4:66:3e:6a:ef:bb:52:0e:35:a3:bd:6d:a4:62:
4b:4b:9e:54:cd:fc:62:d6:e0:c6:89:b9:22:00:57:
86:39:28:0a:56:72:e5:ad:80:fa:e6:27:11:54:12:
f4:09:3d:4e:37:a9:6e:94:a5:b8:6a:34:79:97:ac:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:0F:48:0A:43:4E:88:D4:28:8D:4E:00:A0:D0:D6:FC:AA:06:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jioPSApDTojUKI1OAKDQ1vyqBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:780::/44
Signature Algorithm: sha256WithRSAEncryption
64:25:69:9b:92:38:f0:a7:91:97:81:5b:73:68:cc:5a:b7:b5:
31:3a:6c:3e:c8:f9:e3:ba:8a:68:15:6d:7f:1f:5e:ab:8b:0e:
8b:2e:5a:01:cc:a6:e1:35:76:c1:f0:34:9b:be:8a:63:a1:95:
12:76:e3:ba:9d:59:bd:f0:f4:e9:e3:38:4f:e5:d4:60:6b:29:
49:89:dd:48:22:14:df:b7:6a:6f:c2:cc:54:8d:0a:9b:9c:77:
05:52:b1:3d:11:9b:46:89:d6:b3:98:15:55:77:0d:78:e5:8d:
cc:76:a2:96:36:e4:56:75:81:3f:39:3e:47:44:2c:a0:ef:e6:
1f:61:17:53:d7:50:2e:a6:cd:2f:71:bd:69:a3:1d:7e:4e:f7:
5e:56:fd:0d:07:c0:da:83:68:f0:a5:a1:60:3b:fe:03:9e:df:
2e:49:94:cb:5f:f6:c3:ef:ca:70:42:36:7b:f3:1b:b4:18:89:
3c:38:ac:4c:a4:a3:ee:d8:62:cc:cb:aa:22:0c:2b:d9:1a:85:
8d:c2:18:f0:0b:3c:08:77:2b:63:fb:48:1e:a7:88:4a:0a:1a:
54:cf:cf:13:30:5d:21:4e:32:50:ed:a7:c2:96:17:f6:14:8a:
a6:3d:b9:a8:f8:db:2c:47:91:45:42:6d:d6:56:4d:76:d1:e8:
df:f4:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:54:53 2025 by rpki-client