Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JkgpNA3IsEbe7fKr9JTa3ntg8yU.roa
File: JkgpNA3IsEbe7fKr9JTa3ntg8yU.roa (raw, json)
Hash identifier: 507zLAihMYHW/k5ETqvetg/WOkUa91KiqwmaLQoOh0c=
Subject key identifier: 26:48:29:34:0D:C8:B0:46:DE:ED:F2:AB:F4:94:DA:DE:7B:60:F3:25
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195DB94FF9772B46810008D805BCDDBFB9A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JkgpNA3IsEbe7fKr9JTa3ntg8yU.roa
Signing time: Fri 28 Mar 2025 07:08:49 +0000
ROA not before: Fri 28 Mar 2025 07:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:94:ff:97:72:b4:68:10:00:8d:80:5b:cd:db:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 28 07:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=264829340dc8b046deedf2abf494dade7b60f325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:e3:63:d0:01:53:1c:cb:b4:c4:3b:32:08:
f5:c9:2a:12:f1:db:85:27:e9:a5:e4:59:45:69:d4:
30:cf:bb:80:b7:81:f2:ea:7f:7c:2a:fd:c1:86:53:
6f:1c:5d:51:63:12:3e:46:94:41:f9:32:ea:57:ad:
08:f3:57:72:6b:e9:13:c9:fd:6c:39:e9:be:3b:61:
d6:03:47:f8:e7:45:96:ec:37:17:f1:6d:2a:47:85:
d1:4b:cb:ce:b7:86:4f:50:91:bc:9d:f9:fa:6a:87:
ac:fc:e2:e7:c2:3d:10:53:f4:25:34:b3:6f:d8:3d:
ee:33:f0:f8:51:bb:18:8d:31:dd:3f:10:eb:85:70:
7a:f0:64:5e:e1:29:b1:e7:2e:ce:e4:19:b5:a1:f0:
5f:2d:35:65:80:42:ea:50:95:55:d1:b9:9b:e0:63:
5e:07:8e:79:d6:85:ba:b8:7c:b8:54:c3:b6:9d:1a:
0b:35:e0:78:67:1d:ea:9b:cb:71:cf:06:5d:96:44:
28:4e:f1:7a:98:4c:44:6d:98:c4:2a:7a:0b:0e:0a:
6e:46:7f:60:0c:1c:b8:3f:32:48:1f:e1:35:5f:6c:
ba:7d:87:48:fe:12:36:df:25:9f:0f:f1:3b:1a:d6:
7a:66:0b:9d:6f:01:d9:fb:30:43:5a:ae:86:cb:42:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:29:34:0D:C8:B0:46:DE:ED:F2:AB:F4:94:DA:DE:7B:60:F3:25
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JkgpNA3IsEbe7fKr9JTa3ntg8yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:9b:ac:54:fa:d0:e3:5d:cc:23:f6:23:41:58:a2:3a:d3:0f:
70:b6:e7:20:35:94:21:8c:31:c2:b8:17:65:ba:b2:30:db:b1:
d5:9f:11:9b:bc:38:c9:15:3d:14:0b:93:68:d6:fe:cd:5e:29:
26:ad:80:35:49:a2:cb:88:5f:ef:91:26:34:49:b1:a7:8c:95:
dc:c3:eb:bd:01:d9:3b:4c:16:b5:1d:e7:18:26:88:f3:c5:b1:
95:bb:b1:d4:f7:63:92:c9:aa:58:16:f5:15:f6:32:d9:85:0d:
e2:31:ac:0a:99:67:e9:f4:6a:4f:c6:3d:3e:e6:5d:e6:ae:08:
76:f8:50:1a:19:c7:52:43:a6:11:32:e7:11:b0:97:60:24:a7:
45:af:a5:60:5d:21:40:ed:b7:90:94:2c:b0:b0:40:5b:a5:1d:
3c:35:26:6a:4a:e1:f3:c2:c2:4b:11:0f:c4:a9:2a:10:e7:cb:
07:05:d4:c8:fc:7e:fe:1f:0a:26:ff:41:48:d7:56:ea:cf:83:
6d:35:43:f8:f3:97:b4:72:6a:b5:cc:0b:b2:07:2f:e2:09:51:
2d:45:d1:81:49:e7:31:5d:bd:c3:80:4c:b0:37:51:e5:a8:02:
d7:d4:26:48:1c:e7:aa:6f:9c:59:c5:5e:37:8e:3d:d8:d4:e6:
b5:e1:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:33 2025 by rpki-client