Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/JwV0QfsSNHG29kGRpDADqSiaDck.roa
File: JwV0QfsSNHG29kGRpDADqSiaDck.roa (raw, json)
Hash identifier: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=
Subject key identifier: 27:05:74:41:FB:12:34:71:B6:F6:41:91:A4:30:03:A9:28:9A:0D:C9
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: 019422FBACCF90E8CFD2895AA93F63C7AA2D
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/JwV0QfsSNHG29kGRpDADqSiaDck.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212688
IP address blocks: 212.24.125.0/24 maxlen: 24
2001:67c:840::/48 maxlen: 48
2a11:28c0::/32 maxlen: 48
2a11:28c0::/48 maxlen: 48
2a11:28c0:1::/48 maxlen: 48
2a11:28c0:2::/48 maxlen: 48
2a11:28c0:acab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ac:cf:90:e8:cf:d2:89:5a:a9:3f:63:c7:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27057441fb123471b6f64191a43003a9289a0dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:d7:02:62:95:b5:35:a2:eb:b7:b6:51:e9:
f1:8a:dc:4f:95:a9:a4:68:f5:6b:88:f0:a0:4e:31:
e6:0e:d8:ae:4c:28:94:91:60:ff:73:16:6b:8d:59:
90:f3:90:b0:01:3e:27:22:04:7f:59:cd:30:cf:f6:
20:23:ef:d8:71:0e:ce:3f:a5:8d:00:3c:9c:37:99:
74:6b:b5:7d:62:d0:4a:31:68:e9:cb:f0:6f:2d:24:
d3:56:36:ce:0c:d0:a5:ce:d0:35:c3:85:c9:24:b6:
b5:4f:37:7c:bd:a3:34:9d:dd:21:7d:9e:64:8f:f4:
6a:00:fb:97:c0:94:c4:08:57:c2:2a:d4:5e:ad:b1:
b7:f4:8c:f1:dc:e2:cb:a3:fe:24:19:bc:b2:b8:8d:
bf:bc:94:a0:58:c0:47:60:e6:07:c8:60:ed:28:8f:
77:9c:34:5d:4f:94:b6:c2:4e:74:35:0d:43:e4:36:
26:d2:27:90:1b:b2:93:b4:e8:c4:51:88:28:f4:30:
b0:f3:92:64:b3:ff:68:01:be:28:fa:cf:9f:ef:e6:
ad:c6:22:76:be:e1:7b:f2:b3:b2:42:f6:01:40:ab:
bc:a9:d5:9c:e5:0d:d3:3c:ca:6f:eb:7d:22:6d:5e:
06:2b:5e:16:34:ee:ab:a9:19:ee:87:ed:43:9e:10:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:74:41:FB:12:34:71:B6:F6:41:91:A4:30:03:A9:28:9A:0D:C9
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/JwV0QfsSNHG29kGRpDADqSiaDck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.125.0/24
IPv6:
2001:67c:840::/48
2a11:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
99:77:22:b7:0a:7e:62:71:c3:9d:73:01:ef:35:fc:0a:18:0f:
e8:ae:86:b4:1b:6b:01:46:1c:98:f9:4e:82:aa:79:5f:1e:50:
0b:bf:75:6e:49:3f:72:43:1a:47:50:dc:ef:b4:18:2f:a2:4d:
37:53:b9:9f:b1:50:cf:68:e9:09:c5:11:e2:cf:e7:0c:ad:bb:
14:de:58:84:99:48:54:ee:7d:26:dc:d7:5c:3c:ef:8d:70:22:
c3:ad:84:c5:fa:3e:f0:28:b5:dd:85:4d:81:e5:0a:ac:29:6c:
2d:d0:90:98:66:d1:26:ae:de:35:8c:a8:40:9f:65:e9:70:6c:
93:6b:b8:b3:eb:49:90:81:d0:26:1f:df:73:8c:c1:0d:f4:7d:
34:2c:9e:8e:b9:e7:d9:57:d7:e3:65:3e:70:b3:ae:34:c1:b2:
5d:1b:a9:8d:e1:26:3e:2b:ef:99:bb:5b:b4:4a:1d:36:90:6d:
e9:0c:01:a0:e4:a2:ab:53:1c:b0:1a:e9:78:7f:98:82:60:17:
b6:53:ad:d5:53:d2:17:81:02:dd:d3:b3:5e:87:dc:36:ec:87:
29:94:3e:39:17:a8:69:4f:92:79:c9:95:9a:0e:8a:3c:1f:aa:
3e:46:3d:23:e0:a0:bc:6d:9f:1e:91:ed:ae:08:4e:26:20:2e:
a5:5a:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:10:33 2025 by rpki-client