Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jx4ajhXLPU9ndeo_CBCA7G9Er24.roa
File: jx4ajhXLPU9ndeo_CBCA7G9Er24.roa (raw, json)
Hash identifier: H1pnVB61wQV4tib2oSUYpgXQwRY1YzPHfMi/jIGdTDk=
Subject key identifier: 8F:1E:1A:8E:15:CB:3D:4F:67:75:EA:3F:08:10:80:EC:6F:44:AF:6E
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BBD5A68E23CF3D56F32D26422AFF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jx4ajhXLPU9ndeo_CBCA7G9Er24.roa
Signing time: Thu 02 Jan 2025 17:54:40 +0000
ROA not before: Thu 02 Jan 2025 17:54:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41075
IP address blocks: 79.172.194.0/23 maxlen: 23
79.172.197.0/24 maxlen: 24
79.172.205.0/24 maxlen: 24
87.229.7.0/24 maxlen: 24
87.229.24.0/24 maxlen: 24
87.229.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:bb:d5:a6:8e:23:cf:3d:56:f3:2d:26:42:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1e1a8e15cb3d4f6775ea3f081080ec6f44af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:0e:f8:03:cd:0a:96:9d:12:f0:95:d9:e3:
b1:93:76:c9:54:d9:bc:6d:67:c3:bb:48:8b:47:fb:
3e:23:8c:06:7c:1b:1b:c8:7b:3d:3a:53:7e:32:17:
f0:5e:a1:9e:97:a3:43:f8:d7:7f:8d:f7:47:91:ac:
b0:4f:eb:8f:ad:27:d6:3c:d6:56:e9:5e:61:50:29:
fe:7d:e7:ec:c1:ee:39:7c:2f:f3:05:34:33:fc:04:
84:4f:1b:8b:c8:44:da:96:79:cf:f2:97:66:dc:4b:
4b:21:0e:83:9b:89:28:c4:69:10:a8:34:f3:50:bd:
df:6d:e3:20:43:89:01:50:8d:86:72:2e:65:02:ca:
76:f8:9a:49:9c:a6:e7:4d:c7:d6:11:19:e6:31:64:
5f:65:92:04:e8:30:f3:cf:4b:3e:2c:71:9f:d8:a6:
a6:7b:c4:ee:94:fb:c6:28:25:e1:52:9f:fd:5f:36:
9f:b7:55:2a:17:18:a9:69:09:fe:4b:9d:d8:f3:7e:
d9:9a:f5:fe:b6:3a:b7:b3:3d:d6:e8:b2:b8:1b:19:
8e:72:4e:ae:46:78:43:ef:6f:8a:aa:5c:eb:86:e5:
ad:3b:c5:b4:a3:e2:66:74:ff:93:10:fb:30:33:3e:
e8:b5:73:37:53:37:90:09:a0:7e:97:ad:3a:86:38:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:1A:8E:15:CB:3D:4F:67:75:EA:3F:08:10:80:EC:6F:44:AF:6E
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jx4ajhXLPU9ndeo_CBCA7G9Er24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.194.0/23
79.172.197.0/24
79.172.205.0/24
87.229.7.0/24
87.229.24.0/24
87.229.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:68:d9:ed:05:c9:69:2b:a5:1e:38:07:ad:9f:89:2c:0c:06:
d3:70:74:52:44:1e:ee:65:6c:ad:d6:c4:db:41:e0:f5:cb:2c:
37:a4:db:7d:53:1f:9f:b3:19:e6:7c:12:f1:2a:ee:c7:fe:ed:
e4:4f:41:6b:b9:d9:ce:c4:21:db:fe:8d:09:b1:a6:a1:d8:9e:
c2:e1:dd:1f:12:78:40:a2:1a:a3:53:1a:de:b8:51:d8:e8:13:
75:8d:38:10:b1:8c:e2:0b:4f:e1:32:ad:83:bf:04:5e:60:25:
7f:c3:60:de:9c:00:1b:94:e8:59:81:e5:9c:de:89:e8:1a:09:
94:15:4f:14:88:3e:7c:39:1d:d7:12:9c:ec:b5:d5:c0:12:23:
63:18:74:0a:4d:70:ce:06:a7:80:3f:b1:b4:a2:7d:57:04:07:
77:ab:e5:35:60:b2:61:7f:38:2a:31:dc:24:b3:2d:fd:71:1a:
65:42:6e:fa:cb:8f:9e:e5:de:38:c4:cf:cf:19:76:55:92:fd:
4f:b1:4b:0d:2c:e1:54:69:0d:74:7d:46:3c:bf:1f:f8:bf:10:
84:9c:87:53:8f:90:1c:c9:c8:9b:d5:cb:60:8d:7f:f8:a1:4a:
1a:31:69:f9:a5:1e:4c:99:99:3b:af:63:99:56:fe:64:8a:b3:
5d:26:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:35 2025 by rpki-client