Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jUPC7sjR-rTjtfXwHqOSAVcHWn4.roa
File: jUPC7sjR-rTjtfXwHqOSAVcHWn4.roa (raw, json)
Hash identifier: 4IJvkmKAVo9dLw6Mt+SbhoIBQEPjYQEQFc0uLkRmIzI=
Subject key identifier: 8D:43:C2:EE:C8:D1:FA:B4:E3:B5:F5:F0:1E:A3:92:01:57:07:5A:7E
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0195F5EAF14333CE9675BEBCE619E317D440
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jUPC7sjR-rTjtfXwHqOSAVcHWn4.roa
Signing time: Wed 02 Apr 2025 09:52:49 +0000
ROA not before: Wed 02 Apr 2025 09:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
2a02:11f8:60::/48 maxlen: 48
2a02:11f8:61::/48 maxlen: 48
2a02:11f8:62::/48 maxlen: 48
2a02:11f8:63::/48 maxlen: 48
2a02:11f8:64::/48 maxlen: 48
2a02:11f8:65::/48 maxlen: 48
2a02:11f8:100::/48 maxlen: 48
2a02:11f8:101::/48 maxlen: 48
2a02:11f8:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:ea:f1:43:33:ce:96:75:be:bc:e6:19:e3:17:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Apr 2 09:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d43c2eec8d1fab4e3b5f5f01ea3920157075a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:c7:a4:8a:b9:1a:93:88:c0:e0:01:ec:38:
d8:15:8a:a9:b1:27:64:d1:5b:17:0c:a5:ec:92:c6:
0d:72:a9:a1:de:ae:62:30:2f:04:18:00:3d:26:37:
e0:bc:07:fe:3d:3e:ac:7f:91:aa:26:e3:00:5a:e1:
fe:dd:9a:ae:47:a2:52:64:4b:ac:92:62:5a:fe:99:
e3:9b:e6:7b:4f:1c:a1:99:cd:36:9b:a1:f1:6d:fd:
3c:72:20:ce:b4:e9:67:f8:f1:17:0d:9d:75:93:4b:
6a:3b:65:b7:f8:7a:b9:2e:04:06:9f:be:80:60:20:
fa:4a:d4:a0:90:a4:49:d9:f6:1d:94:8f:8c:12:c5:
90:79:c0:ef:c9:77:af:45:f8:3a:23:72:f1:15:26:
a4:1f:04:85:52:40:1c:d2:bf:d5:a2:e8:a0:a0:ad:
93:27:63:75:a7:95:9b:2a:32:7b:74:f6:a4:f8:6d:
b0:60:72:3c:49:c4:bc:1e:be:5a:39:6e:e6:c0:cc:
73:6c:9e:ea:8b:c2:2b:1f:cb:ce:45:c1:99:b1:01:
24:6d:d4:a3:45:37:9f:01:a4:ab:d7:9e:bc:4c:61:
49:3b:eb:6a:1c:73:c4:b0:70:01:2c:f6:07:c9:32:
f8:7c:af:73:05:49:0a:44:33:b9:a1:be:c1:7a:bf:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:43:C2:EE:C8:D1:FA:B4:E3:B5:F5:F0:1E:A3:92:01:57:07:5A:7E
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jUPC7sjR-rTjtfXwHqOSAVcHWn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
IPv6:
2a02:11f8:60::-2a02:11f8:65:ffff:ffff:ffff:ffff:ffff
2a02:11f8:100::-2a02:11f8:102:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:d1:31:fe:30:c8:b8:f4:24:85:2d:68:b9:b8:54:e7:e3:1c:
88:ad:56:e4:25:ce:b8:77:0e:aa:cd:08:0b:c2:5f:a6:8f:c8:
d7:96:d3:dc:5d:a0:5d:35:1a:bf:be:95:6d:91:ec:eb:4b:fc:
2b:14:8d:74:e5:b4:8a:e2:ff:ca:47:a0:18:e3:9b:b6:45:c5:
87:ed:9f:c7:28:9a:56:1e:d3:de:88:ef:e2:92:df:a5:9e:61:
cf:87:88:d1:d1:40:88:60:9a:ec:fa:2d:68:40:cf:0f:a9:22:
ef:fa:a9:b4:68:ae:71:ac:ad:16:3a:bd:4f:ee:62:2e:58:f5:
1f:1d:db:3a:1d:57:e6:1d:81:d5:ea:d1:5b:a6:46:b6:d0:be:
bf:32:df:2c:7a:c2:24:f4:c7:b9:00:31:d9:16:77:52:b5:6f:
8e:0b:5a:7b:0d:6c:97:60:d7:b1:50:22:6c:2b:b2:9e:14:04:
0e:c1:67:b7:72:b7:e3:00:31:91:b0:79:d7:4b:9e:7f:29:b5:
3a:02:6b:a5:53:a8:4f:a4:13:47:3d:51:4e:f8:ef:d9:12:a7:
ad:7d:e3:ca:1c:6b:65:fe:d1:e1:71:70:1c:52:69:d3:88:43:
4e:23:0c:c4:85:86:b8:7d:a5:77:df:5b:fb:69:bc:18:3c:3c:
23:23:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:17:40 2025 by rpki-client