Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa
File: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (raw, json)
Hash identifier: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=
Subject key identifier: 8C:CC:61:3B:30:52:78:C3:F4:2E:D5:CB:5C:FE:C4:70:18:68:00:1F
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0C41593517D71107791BF08D18B8
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197787
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0c:41:59:35:17:d7:11:07:79:1b:f0:8d:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ccc613b305278c3f42ed5cb5cfec4701868001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:bb:5e:28:b5:81:a3:4e:cb:f5:ee:3c:fa:
1d:68:f2:0c:44:b2:3a:25:e9:92:2a:a6:33:46:56:
f6:01:27:ce:82:b2:3b:05:95:c3:b0:f3:20:b1:ba:
da:94:a1:e6:2a:1e:f0:2b:d6:28:3d:0a:35:08:bf:
06:90:9a:18:85:db:b7:8c:71:54:25:c5:9f:30:84:
43:a8:99:5f:62:0e:37:45:96:01:b6:c6:a3:4a:ff:
f2:42:d0:ff:03:66:ea:f6:0e:5f:bf:c4:f1:35:71:
b9:b9:a1:4a:8b:50:b6:06:36:13:41:c3:f2:d8:e4:
59:33:ce:fa:44:b4:d0:fe:d8:9d:fc:e4:35:91:60:
b9:4a:48:fb:f0:f7:09:64:4e:43:3d:52:36:54:56:
75:55:ce:45:7c:47:5e:7e:3d:5f:b4:2a:66:27:9b:
e6:b3:1b:30:02:b4:0c:e2:b7:ee:6a:4e:fa:57:58:
d9:2e:01:75:53:dc:c7:3f:e6:bb:78:dc:b3:63:85:
cd:66:2b:f2:7f:3c:2f:4f:b2:d9:01:b4:03:37:a9:
86:37:ed:0e:99:05:06:4a:d9:db:b5:f7:0c:c4:19:
b4:39:a0:c8:f6:55:00:30:bb:1d:b4:33:01:2e:b6:
0f:9e:ed:0f:71:62:7f:6f:04:66:02:1b:a0:bf:1f:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:61:3B:30:52:78:C3:F4:2E:D5:CB:5C:FE:C4:70:18:68:00:1F
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2c:5b:13:bf:46:85:c9:40:70:55:07:53:4d:91:15:af:2a:
e8:40:50:9f:35:62:51:69:89:13:bb:79:f1:3a:f6:d4:74:f3:
cd:57:b5:e0:4e:63:b2:ee:47:35:fb:0f:54:35:dd:3a:36:5a:
0b:00:ea:c1:9c:11:a8:4b:29:00:09:17:25:f1:7d:a0:4e:1f:
9e:ca:8e:88:05:69:83:00:8c:21:93:a6:3b:d9:7b:7e:6f:fe:
fc:68:b6:a8:1e:42:65:c4:00:25:0f:4d:87:6e:2a:48:b1:a2:
19:f4:26:b6:6a:72:02:cd:57:15:17:8c:81:2f:fe:53:1e:10:
5e:ef:f1:f0:ee:20:f3:46:02:c7:c6:7e:52:ab:30:99:1d:4e:
5e:40:f2:c0:2e:f1:03:de:4a:92:17:68:12:de:ff:b8:4a:6b:
4d:1a:85:af:06:fa:11:16:63:df:40:5c:d1:5a:8e:55:ce:1d:
17:aa:a5:b8:f9:cb:42:fb:04:93:7d:53:1c:de:9c:fa:13:8e:
af:b3:2f:e0:64:74:db:08:12:7b:35:d4:c0:14:0a:83:62:a0:
05:21:41:34:0d:4b:ad:9d:c9:f1:37:1b:41:dc:d5:4f:91:50:
c2:4e:32:b9:7c:55:57:2f:a7:a3:91:79:25:3a:6a:a3:72:79:
41:aa:15:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjAxBWTUX1xEHeRvwjRi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NjNjEzYjMwNTI3OGMzZjQyZWQ1Y2I1Y2ZlYzQ3MDE4NjgwMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr27Xii1gaNOy/XuPPodaPIMRLI6
JemSKqYzRlb2ASfOgrI7BZXDsPMgsbralKHmKh7wK9YoPQo1CL8GkJoYhdu3jHFU
JcWfMIRDqJlfYg43RZYBtsajSv/yQtD/A2bq9g5fv8TxNXG5uaFKi1C2BjYTQcPy
2ORZM876RLTQ/tid/OQ1kWC5Skj78PcJZE5DPVI2VFZ1Vc5FfEdefj1ftCpmJ5vm
sxswArQM4rfuak76V1jZLgF1U9zHP+a7eNyzY4XNZivyfzwvT7LZAbQDN6mGN+0O
mQUGStnbtfcMxBm0OaDI9lUAMLsdtDMBLrYPnu0PcWJ/bwRmAhugvx+XBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzMYTswUnjD9C7Vy1z+xHAYaAAfMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvak14aE96QlNlTVAwTHRYTFhQN0VjQmhvQUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIuMA0G
CSqGSIb3DQEBCwUAA4IBAQCPLFsTv0aFyUBwVQdTTZEVryroQFCfNWJRaYkTu3nx
OvbUdPPNV7XgTmOy7kc1+w9UNd06NloLAOrBnBGoSykACRcl8X2gTh+eyo6IBWmD
AIwhk6Y72Xt+b/78aLaoHkJlxAAlD02HbipIsaIZ9Ca2anICzVcVF4yBL/5THhBe
7/Hw7iDzRgLHxn5SqzCZHU5eQPLALvED3kqSF2gS3v+4SmtNGoWvBvoRFmPfQFzR
Wo5Vzh0XqqW4+ctC+wSTfVMc3pz6E46vsy/gZHTbCBJ7NdTAFAqDYqAFIUE0DUut
ncnxNxtB3NVPkVDCTjK5fFVXL6ejkXklOmqjcnlBqhUu
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:29 2025 by rpki-client