Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/jRgLBU0x04bcrCqoAsjc1LU66SE.roa
File: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (raw, json)
Hash identifier: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=
Subject key identifier: 8D:18:0B:05:4D:31:D3:86:DC:AC:2A:A8:02:C8:DC:D4:B5:3A:E9:21
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019426D9E3E3EA41393BDF7338DF81002045
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/jRgLBU0x04bcrCqoAsjc1LU66SE.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31346
IP address blocks: 217.145.177.0/24 maxlen: 24
217.145.178.0/24 maxlen: 24
217.145.180.0/24 maxlen: 24
217.145.181.0/24 maxlen: 24
217.145.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e3:e3:ea:41:39:3b:df:73:38:df:81:00:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d180b054d31d386dcac2aa802c8dcd4b53ae921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:3d:4c:ac:cb:db:b9:6e:d6:2c:05:c9:d0:
b4:20:eb:88:65:39:38:af:86:25:5c:10:ae:90:7f:
95:9d:b3:a0:a2:3f:0b:49:33:24:67:41:0b:a8:72:
d5:80:d5:b5:e9:3d:5b:1f:d5:78:3c:8b:9f:00:99:
e5:dd:07:8a:de:94:cc:56:a4:96:17:00:58:b7:8d:
60:88:db:26:8b:64:38:24:3e:c2:1e:4b:55:ad:34:
4a:84:c0:c1:f0:bb:3d:82:1a:76:a3:90:78:54:20:
b1:11:cd:e1:c0:ce:12:38:d0:d8:c9:ef:05:ba:8a:
c0:d0:a0:96:31:e3:00:1c:ba:78:3b:e5:bd:ff:ba:
d1:84:61:e2:f1:b5:df:21:b9:1d:11:db:a3:a5:ad:
ea:39:37:c1:52:5c:f5:d0:37:4c:a3:54:b8:1f:05:
6b:25:cc:d5:26:72:41:37:0e:84:8f:5d:5d:d8:ab:
cd:6a:97:b2:8b:e5:7b:18:cd:59:1f:95:57:cc:b6:
76:12:2e:da:be:ce:ec:f8:5b:c0:f1:b6:6c:9d:24:
2f:94:77:02:74:28:84:1b:e1:e6:76:4c:a6:48:62:
da:ca:3b:13:ad:db:fc:02:bc:02:da:9d:c3:92:00:
c1:03:42:bf:37:5b:67:ff:69:0c:06:ca:31:1b:9b:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:0B:05:4D:31:D3:86:DC:AC:2A:A8:02:C8:DC:D4:B5:3A:E9:21
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/jRgLBU0x04bcrCqoAsjc1LU66SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.177.0-217.145.178.255
217.145.180.0-217.145.182.255
Signature Algorithm: sha256WithRSAEncryption
8f:88:d1:e9:f4:11:59:ca:37:dd:f9:90:f4:7d:7e:61:4e:1c:
bd:ec:90:de:18:8d:b8:8a:09:c0:e6:37:72:f1:22:76:f0:a4:
a9:25:10:c7:37:77:2d:0b:4c:5c:d2:50:91:55:01:95:53:29:
e1:9e:89:4f:26:21:aa:6a:91:1b:3c:52:5a:fc:39:3d:cd:2c:
40:bc:ed:03:9b:df:47:1a:db:df:30:e3:56:02:7f:f4:df:5d:
28:f8:be:c1:7b:f6:9a:a0:b0:28:9f:a5:e4:e0:16:6d:6d:2c:
de:f5:13:d5:c4:62:c5:ce:76:a5:c7:34:01:4a:6a:be:fa:09:
b7:2c:0f:66:36:84:22:1e:06:53:83:44:2f:ec:49:e1:b2:ea:
0b:cd:f6:82:dd:a0:4c:03:18:cb:30:a5:34:1a:19:cf:3c:00:
57:d9:60:90:3c:bd:ec:f7:05:9d:4f:69:d5:19:97:31:d1:f5:
02:73:f0:a1:dd:1b:93:70:d6:ca:51:b6:f7:7a:77:97:d5:1b:
fd:ae:ab:42:02:5a:4c:91:1b:54:3b:f1:1a:03:68:93:3d:ef:
66:5f:3d:c7:d7:20:69:9e:59:47:57:34:6f:66:15:55:cf:15:
13:a6:5b:b3:20:7d:c3:3f:63:e3:54:af:e7:02:b4:16:5d:a3:
cc:43:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:31 2025 by rpki-client