Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/RJmPIiHTRu2ZejdfSlAj6IdU6us.roa
File: RJmPIiHTRu2ZejdfSlAj6IdU6us.roa (raw, json)
Hash identifier: 7h/45UxkROh44H9OUOI/NiMHeRQHJxLpEBRuLX6IZ+w=
Subject key identifier: 44:99:8F:22:21:D3:46:ED:99:7A:37:5F:4A:50:23:E8:87:54:EA:EB
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019425FD6916372F0BA1E8C06F0AA7A19A21
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/RJmPIiHTRu2ZejdfSlAj6IdU6us.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.216.138.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.139.40.0/21 maxlen: 32
119.13.224.0/20 maxlen: 20
134.199.64.0/19 maxlen: 32
136.227.160.0/19 maxlen: 32
193.37.136.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:69:16:37:2f:0b:a1:e8:c0:6f:0a:a7:a1:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44998f2221d346ed997a375f4a5023e88754eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:9d:6c:25:03:c7:55:26:3a:8d:d1:67:37:
a1:73:4a:f4:0b:e6:b5:00:17:80:89:7b:2f:7f:33:
4f:2c:ac:1d:68:47:27:6f:d5:f5:34:a8:b5:3d:e2:
24:dd:71:29:cd:85:e3:fd:ef:d6:8d:00:d0:80:99:
09:46:78:fb:d1:5b:5d:bc:f0:c4:22:a6:a0:a1:bc:
b7:a8:38:78:b9:f5:75:44:e6:44:f5:5d:fd:6c:3d:
5b:19:dc:f2:57:d2:73:f0:d6:28:b8:35:7d:7e:94:
78:56:29:ca:f2:4b:8e:b6:04:40:5f:fd:ef:21:95:
dd:c3:bb:fa:f7:75:2d:01:f0:8c:c9:bf:ca:ab:01:
87:84:c3:8c:58:82:14:42:95:af:ed:c7:a3:3e:37:
ae:ae:25:63:c6:b0:35:57:8f:33:32:d1:93:9e:82:
5a:09:85:92:c9:1c:a5:40:df:5a:48:e4:5c:51:da:
5c:b5:71:be:07:6c:72:35:2c:ab:1d:7c:7d:4f:e6:
f3:d3:74:02:8a:99:89:69:e4:10:ff:3c:94:73:62:
96:ad:86:bb:7d:bf:dd:a0:35:ff:ba:b8:24:ad:74:
4d:ba:ed:72:c5:af:75:6c:9e:3f:00:01:f7:a6:ec:
85:2e:89:1d:89:f7:66:fe:a0:f5:77:7b:85:8c:05:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:8F:22:21:D3:46:ED:99:7A:37:5F:4A:50:23:E8:87:54:EA:EB
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/RJmPIiHTRu2ZejdfSlAj6IdU6us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.138.0/24
91.229.228.0/24
93.180.208.0/22
94.139.40.0/21
119.13.224.0/20
134.199.64.0/19
136.227.160.0/19
193.37.136.0/24
193.105.176.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0c:85:ab:59:9e:3e:68:b5:34:59:d4:77:32:81:85:2f:82:
6b:93:c4:67:44:bd:84:ae:82:8e:81:bb:7f:b1:93:28:9a:d0:
78:d9:83:84:f3:95:a9:ab:5e:19:69:df:3a:6c:88:11:ab:ed:
69:72:e9:31:e2:05:84:85:d4:c1:d3:ed:90:61:bd:8e:79:df:
47:46:55:0b:ba:6b:e6:26:44:68:fa:7e:31:13:5d:99:58:48:
19:2d:fe:56:7c:37:c1:96:61:c7:74:56:b6:99:26:98:44:60:
f4:99:88:fa:74:7b:60:34:d9:fa:b8:b8:12:fb:06:7b:1a:b1:
40:b4:f3:37:70:ea:0d:94:eb:6a:cb:4c:98:69:b3:d0:66:c0:
30:77:c1:81:e6:85:bb:fd:e6:43:02:0c:62:ed:c1:59:20:8d:
42:df:b0:79:2e:d2:30:aa:94:f1:a3:e6:b8:0f:d9:db:9e:46:
36:55:63:52:d4:93:f7:7c:0b:53:54:48:63:ea:f7:5f:4c:2e:
c0:11:c8:49:41:47:e1:fc:1a:ef:86:70:72:4d:d3:b2:9c:07:
91:c0:b9:a9:c2:14:14:db:bd:ab:30:bc:ce:a8:bd:82:68:ac:
72:13:73:30:66:04:35:6d:e3:92:08:bb:16:ea:57:7f:d6:02:
6a:30:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:09:32 2025 by rpki-client