Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa
File: jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa (raw, json)
Hash identifier: kWywwuZ3gFN5QXplJTXTCIOtPpLw0Ezkefc6voJQkFs=
Subject key identifier: 8E:3E:35:FE:F7:5C:D6:92:7B:FE:32:7B:42:3D:E1:BB:0B:06:BC:2C
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 019422FC3CC51870450E109E5E5D41983575
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41722
IP address blocks: 91.142.80.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.250.153.0/24 maxlen: 24
178.250.154.0/24 maxlen: 24
178.250.155.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.73.212.0/24 maxlen: 24
185.73.213.0/24 maxlen: 24
185.73.214.0/24 maxlen: 24
185.73.215.0/24 maxlen: 24
185.147.80.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.174.164.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
2a07:a500::/32 maxlen: 32
2a07:a501::/32 maxlen: 32
2a07:a502::/32 maxlen: 32
2a07:a503::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3c:c5:18:70:45:0e:10:9e:5e:5d:41:98:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e3e35fef75cd6927bfe327b423de1bb0b06bc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:56:7a:2a:c6:01:45:a1:5d:db:e1:d7:0b:
12:11:9b:f7:b3:29:ca:51:d9:54:4a:57:b0:3d:d5:
4d:97:81:5a:ed:f5:26:4a:aa:51:7b:b8:e4:3b:31:
57:2a:3f:c0:35:2a:9b:48:17:62:76:83:56:15:d2:
09:90:bc:87:17:e5:a3:ca:bc:70:e2:d3:63:4e:0c:
90:84:fe:4c:1d:84:7a:e1:40:4a:32:bd:2a:91:b1:
2a:f5:76:c8:e2:7a:eb:ec:d9:d3:89:17:dd:1e:dd:
9a:35:aa:d3:90:18:b1:5a:26:e4:b2:3d:6d:83:e9:
34:a9:03:a4:18:2c:09:bc:fa:21:f0:9e:26:e8:2f:
3e:f0:09:f6:3e:25:35:59:c8:52:96:a4:0b:c5:8b:
ed:ea:5c:94:85:f4:90:6d:6c:b1:ab:b7:bb:bf:80:
53:c9:0c:59:de:2a:86:e9:65:93:f9:8d:23:93:ac:
36:e5:01:1f:c7:d5:9e:77:56:8f:ef:38:b6:fc:b6:
db:8d:86:3d:14:84:8f:fa:35:dc:0f:a3:95:ba:fa:
c2:02:7d:3e:eb:10:bb:ac:13:34:1b:a9:ea:3c:72:
6d:f7:76:b2:94:0d:10:b0:71:93:af:7d:8f:30:02:
c4:71:3a:62:87:ff:82:34:c9:6d:ab:83:ff:16:d4:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:35:FE:F7:5C:D6:92:7B:FE:32:7B:42:3D:E1:BB:0B:06:BC:2C
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/22
185.53.20.0/22
185.73.212.0/22
185.147.80.0/22
185.162.92.0/22
185.174.164.0/24
IPv6:
2a03:21c0::/32
2a07:a500::/30
Signature Algorithm: sha256WithRSAEncryption
42:f8:ea:d8:cf:30:5b:c1:37:1d:60:09:c1:0b:15:2e:8b:02:
e5:a2:a7:87:f0:a8:bc:dc:80:37:b4:f2:1d:8d:5f:5b:8e:1a:
f8:e0:5a:cd:65:a7:8a:e1:96:c0:b3:2c:eb:09:48:27:4d:eb:
c7:01:0c:7f:46:11:df:0c:02:35:6c:55:f1:a3:88:69:f6:bc:
80:6c:4f:69:f4:c7:44:95:3c:a7:13:7d:ef:3e:6d:a3:b2:60:
2a:b6:b0:36:22:6f:e3:55:6c:20:9b:d9:eb:dc:18:54:0a:aa:
3f:b3:94:9f:e2:df:16:5a:e3:62:6d:2d:e1:46:df:cd:fb:51:
8d:60:44:24:64:a4:90:8e:84:3c:73:bc:ea:1b:28:29:e1:b0:
fc:f1:31:c8:9d:90:7a:63:90:19:22:53:10:3f:e9:64:12:ee:
4f:4f:24:0b:16:3d:b3:97:4f:52:d8:e8:72:60:9e:5d:ce:b2:
e2:5d:15:5b:aa:4b:8b:a0:09:8d:63:ed:1b:e8:20:fd:69:c4:
ea:d7:a7:c2:3e:00:94:29:f0:79:8c:7d:e0:0a:a7:91:df:93:
47:dd:87:7f:12:53:a4:37:46:5f:1a:36:2b:52:d1:b6:74:29:
c5:f7:e4:da:c9:f7:bf:8f:cc:a2:58:29:18:71:a0:db:d5:0a:
2a:f2:83:73
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZQi/DzFGHBFDhCeXl1BmDV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5
NWMzMTEwHhcNMjUwMTAxMTc0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTNlMzVmZWY3NWNkNjkyN2JmZTMyN2I0MjNkZTFiYjBiMDZiYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5FWeirGAUWhXdvh1wsSEZv3synK
UdlUSlewPdVNl4Fa7fUmSqpRe7jkOzFXKj/ANSqbSBdidoNWFdIJkLyHF+Wjyrxw
4tNjTgyQhP5MHYR64UBKMr0qkbEq9XbI4nrr7NnTiRfdHt2aNarTkBixWibksj1t
g+k0qQOkGCwJvPoh8J4m6C8+8An2PiU1WchSlqQLxYvt6lyUhfSQbWyxq7e7v4BT
yQxZ3iqG6WWT+Y0jk6w25QEfx9Wed1aP7zi2/LbbjYY9FISP+jXcD6OVuvrCAn0+
6xC7rBM0G6nqPHJt93aylA0QsHGTr32PMALEcTpih/+CNMltq4P/FtTGPwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFI4+Nf73XNaSe/4ye0I94bsLBrwsMB8GA1UdIwQY
MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt
YWIzZGQ1ZGM2NzA5LzEvamo0MV92ZGMxcEo3X2pKN1FqM2h1d3NHdkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5
LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQEW45QAwQC
svlEAwQCsvqYAwQCuTUUAwQCuUnUAwQCuZNQAwQCuaJcAwQAua6kMBQEAgACMA4D
BQAqAyHAAwUCKgelADANBgkqhkiG9w0BAQsFAAOCAQEAQvjq2M8wW8E3HWAJwQsV
LosC5aKnh/CovNyAN7TyHY1fW44a+OBazWWniuGWwLMs6wlIJ03rxwEMf0YR3wwC
NWxV8aOIafa8gGxPafTHRJU8pxN97z5to7JgKrawNiJv41VsIJvZ69wYVAqqP7OU
n+LfFlrjYm0t4UbfzftRjWBEJGSkkI6EPHO86hsoKeGw/PExyJ2QemOQGSJTED/p
ZBLuT08kCxY9s5dPUtjocmCeXc6y4l0VW6pLi6AJjWPtG+gg/WnE6tenwj4AlCnw
eYx94Aqnkd+TR92HfxJTpDdGXxo2K1LRtnQpxffk2sn3v4/MolgpGHGg29UKKvKD
cw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:45 2025 by rpki-client