Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa
File: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (raw, json)
Hash identifier: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=
Subject key identifier: 25:F5:FF:B8:4E:19:AC:DA:72:01:6A:CD:E9:76:75:F6:1E:BC:70:72
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 019426D9E89B8DC52F4A38AFB66C75B6F90A
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197047
IP address blocks: 178.212.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e8:9b:8d:c5:2f:4a:38:af:b6:6c:75:b6:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f5ffb84e19acda72016acde97675f61ebc7072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:23:9a:a2:1f:9d:c5:93:2a:12:1b:a2:62:
de:69:10:fa:2f:39:47:4c:e1:d2:12:fe:93:c5:60:
ec:fd:72:f5:14:26:82:e5:ba:48:c6:90:af:07:63:
31:7a:f6:f8:96:a2:5e:fe:f9:e5:7b:f7:d3:d6:0e:
b5:e5:e6:b4:10:7f:56:13:5f:6b:ee:03:6e:1b:c9:
c2:e3:fa:8b:f3:6c:19:82:14:03:d6:40:38:cb:c2:
98:0f:55:0f:ef:bf:39:21:53:39:d7:c9:f4:e7:94:
a9:6b:dc:0f:fa:86:6f:65:84:bb:d6:23:a5:19:8a:
be:68:7e:79:39:b5:9f:84:a9:a1:c7:aa:78:41:54:
ba:09:0b:5b:96:88:4e:7a:22:8d:a3:7b:9e:9e:13:
ef:92:b6:ce:52:e5:8a:93:ac:df:61:f5:77:55:ab:
bb:76:32:6f:c7:4b:0f:8d:20:b7:6a:82:3d:4b:b8:
8b:3c:67:f5:f0:17:6e:ad:06:0c:6a:fb:e2:ad:09:
ff:42:7e:6b:65:87:17:e6:9f:b5:b5:df:e3:56:a8:
f0:56:1b:4a:3a:1d:2f:1b:67:53:27:24:36:45:af:
30:0e:3f:75:72:fd:19:5e:5a:4c:56:9c:5a:fe:f9:
f4:97:62:8c:77:72:10:c2:9b:0f:7d:04:8f:8d:d9:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:FF:B8:4E:19:AC:DA:72:01:6A:CD:E9:76:75:F6:1E:BC:70:72
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.16.0/21
Signature Algorithm: sha256WithRSAEncryption
08:98:ac:48:22:37:cc:72:8c:f7:2b:2e:68:f4:1e:cb:90:89:
6b:60:55:f2:a5:f7:41:f8:28:f7:c0:34:8d:59:8d:d6:d0:d9:
50:9e:2d:a3:d2:50:49:f5:f5:63:c6:62:b5:89:fd:b2:24:bb:
4e:56:c7:47:4b:b7:30:4c:83:ed:cb:10:ac:6a:0f:ae:73:1d:
96:2c:98:5e:a8:41:34:17:39:fd:6b:ff:e2:1a:6f:c5:2a:ea:
bf:50:75:6b:04:60:e3:bf:3b:45:58:05:e3:bd:de:17:c6:54:
09:bd:93:15:ff:d5:f6:50:f6:3c:b2:53:cb:fa:f7:d4:cf:e9:
23:48:1f:d7:bc:2d:40:87:6f:b6:e9:2e:a8:64:96:f9:2c:e9:
8d:9c:c7:f6:d8:21:3d:54:78:bd:9e:a9:fe:0a:69:53:b0:6e:
d5:1a:cd:dd:a1:5f:af:5a:c9:87:e5:33:53:06:17:94:8d:bb:
52:e4:0a:bf:de:11:60:5c:64:8b:3d:83:57:b1:00:7e:00:58:
0b:52:2a:c2:9e:3e:33:48:f2:97:ec:2f:c2:1d:27:50:65:c6:
f2:51:48:b4:a2:cb:4f:e2:bb:85:95:05:ee:57:2a:74:c9:2d:
fc:bd:64:37:47:f9:21:e5:e1:5f:33:44:80:6d:72:88:20:0d:
f3:48:02:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2eibjcUvSjivtmx1tvkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw
ZmM1MDMwHhcNMjUwMTAyMTE1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWY1ZmZiODRlMTlhY2RhNzIwMTZhY2RlOTc2NzVmNjFlYmM3MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhUjmqIfncWTKhIbomLeaRD6LzlH
TOHSEv6TxWDs/XL1FCaC5bpIxpCvB2Mxevb4lqJe/vnle/fT1g615ea0EH9WE19r
7gNuG8nC4/qL82wZghQD1kA4y8KYD1UP7785IVM518n055Spa9wP+oZvZYS71iOl
GYq+aH55ObWfhKmhx6p4QVS6CQtblohOeiKNo3uenhPvkrbOUuWKk6zfYfV3Vau7
djJvx0sPjSC3aoI9S7iLPGf18BdurQYMavvirQn/Qn5rZYcX5p+1td/jVqjwVhtK
Oh0vG2dTJyQ2Ra8wDj91cv0ZXlpMVpxa/vn0l2KMd3IQwpsPfQSPjdlPfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCX1/7hOGazacgFqzel2dfYevHByMB8GA1UdIwQY
MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt
ZTRiYmY0YzBkYjU5LzEvSmZYX3VFNFpyTnB5QVdyTjZYWjE5aDY4Y0hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5
LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstQQMA0G
CSqGSIb3DQEBCwUAA4IBAQAImKxIIjfMcoz3Ky5o9B7LkIlrYFXypfdB+Cj3wDSN
WY3W0NlQni2j0lBJ9fVjxmK1if2yJLtOVsdHS7cwTIPtyxCsag+ucx2WLJheqEE0
Fzn9a//iGm/FKuq/UHVrBGDjvztFWAXjvd4XxlQJvZMV/9X2UPY8slPL+vfUz+kj
SB/XvC1Ah2+26S6oZJb5LOmNnMf22CE9VHi9nqn+CmlTsG7VGs3doV+vWsmH5TNT
BheUjbtS5Aq/3hFgXGSLPYNXsQB+AFgLUirCnj4zSPKX7C/CHSdQZcbyUUi0ostP
4ruFlQXuVyp0yS38vWQ3R/kh5eFfM0SAbXKIIA3zSALt
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:59 2025 by rpki-client