Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa
File: jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa (raw, json)
Hash identifier: /NFHrfrRwaEoNjeXwP4NglQKiFA3Q/YP75U6J0hU51w=
Subject key identifier: 8E:F9:F6:2D:34:5B:25:36:4E:8D:BF:01:45:07:16:40:3D:4A:48:7C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 019427B5675F41FB616FC218B45325A60C73
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.8.0/22 maxlen: 22
5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
5.83.124.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
45.80.172.0/23 maxlen: 23
45.90.232.0/22 maxlen: 22
78.138.32.0/22 maxlen: 24
78.138.32.0/24 maxlen: 24
78.138.33.0/24 maxlen: 24
83.229.8.0/22 maxlen: 22
89.21.192.0/23 maxlen: 23
89.21.194.0/23 maxlen: 23
89.21.196.0/23 maxlen: 23
89.21.198.0/23 maxlen: 23
89.21.200.0/21 maxlen: 21
89.21.208.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
93.88.96.0/20 maxlen: 20
94.101.48.0/22 maxlen: 22
94.101.52.0/22 maxlen: 22
94.101.56.0/22 maxlen: 22
94.101.60.0/22 maxlen: 22
185.9.208.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
185.104.124.0/22 maxlen: 22
185.105.92.0/22 maxlen: 22
185.105.104.0/22 maxlen: 22
185.105.128.0/22 maxlen: 22
185.105.212.0/22 maxlen: 22
185.195.8.0/22 maxlen: 22
185.217.228.0/22 maxlen: 22
195.60.190.0/23 maxlen: 23
213.167.232.0/21 maxlen: 21
217.28.68.0/22 maxlen: 22
2a01:9a80::/32 maxlen: 32
2a01:9a81::/32 maxlen: 32
2a01:9a82::/32 maxlen: 32
2a01:9a83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:67:5f:41:fb:61:6f:c2:18:b4:53:25:a6:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef9f62d345b25364e8dbf01450716403d4a487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:4a:aa:14:30:54:95:ce:8c:95:f4:90:3d:
13:ea:7c:65:56:40:94:ba:69:24:32:dc:63:4e:25:
dd:07:2c:20:1f:09:e3:a7:35:02:2f:55:e3:9e:a6:
ba:43:c3:91:d5:c7:2d:49:01:08:16:1c:ea:b9:d6:
c5:0b:23:f8:6b:c0:72:da:6a:e0:56:65:a3:41:53:
29:08:94:e8:ee:ad:1e:ee:ed:1c:21:3e:ac:7e:a0:
0d:f6:76:a4:96:87:46:7d:03:16:e1:a5:3c:b0:7f:
86:7d:11:41:6b:a4:bb:41:6f:85:89:0b:3c:80:e1:
c2:21:5f:48:f3:eb:75:00:2c:92:63:72:a4:79:d7:
af:87:e4:dd:82:8d:6b:32:da:9b:1b:fd:06:00:e0:
3b:27:65:72:e2:9c:70:e4:55:48:b4:15:6c:9b:f8:
e2:05:25:ec:b2:4d:a0:4d:a5:28:98:35:35:cf:56:
75:37:42:d4:81:9a:16:06:0d:9b:89:10:60:2e:f3:
52:8e:f6:59:5a:2d:76:c4:4d:fe:14:3e:11:84:f5:
c9:97:47:f2:c8:3e:70:e9:09:3b:27:5f:4b:6b:5b:
06:09:f3:a5:ce:77:70:f4:46:a1:a7:41:b8:ec:f3:
b1:ad:97:69:64:78:d1:90:51:4d:a3:5d:95:ea:49:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:F6:2D:34:5B:25:36:4E:8D:BF:01:45:07:16:40:3D:4A:48:7C
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jvn2LTRbJTZOjb8BRQcWQD1KSHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
31.7.144.0/20
45.80.172.0/23
45.90.232.0/22
78.138.32.0/22
83.229.8.0/22
89.21.192.0/19
91.214.72.0/22
93.88.96.0/20
94.101.48.0/20
185.9.208.0/22
185.29.248.0/22
185.104.124.0/22
185.105.92.0/22
185.105.104.0/22
185.105.128.0/22
185.105.212.0/22
185.195.8.0/22
185.217.228.0/22
195.60.190.0/23
213.167.232.0/21
217.28.68.0/22
IPv6:
2a01:9a80::/30
Signature Algorithm: sha256WithRSAEncryption
33:73:b5:14:73:af:31:02:31:97:41:f5:9a:72:78:d1:32:3a:
6f:85:22:17:be:da:cc:74:5c:12:e7:ed:ec:9e:97:54:4f:e9:
8f:6c:31:93:64:f6:be:65:6e:42:36:7e:8b:29:2b:69:19:00:
3b:63:2b:a3:d6:06:19:d7:f9:c2:f7:ba:a5:5f:5b:28:2c:3e:
3c:c2:53:20:0f:a5:42:e2:55:27:16:65:d6:01:f4:14:1b:dd:
81:88:52:d2:7b:2c:0e:ca:56:2c:74:9b:bc:a7:d5:c3:c4:9e:
93:8c:bb:24:1c:d9:72:86:06:ce:67:42:b2:cb:fc:87:0b:20:
67:b0:f5:29:32:32:21:b0:e5:e8:c9:46:ae:bb:2d:55:37:b0:
05:50:ab:93:69:a8:38:7a:f6:80:25:88:54:6d:72:7e:5d:d9:
11:e5:56:f0:63:25:f5:d6:53:80:20:8a:d6:1d:db:b2:b1:5c:
20:81:30:dd:55:a6:d1:51:e7:73:c3:34:54:6e:8b:ac:2a:6b:
f5:82:d8:78:a6:c3:a7:1e:a4:88:9c:d2:40:6f:c4:0c:76:7f:
4d:18:57:8b:3b:54:ce:b3:b1:7b:9d:02:a9:15:05:a5:bc:81:
34:f0:46:ef:e6:e4:84:08:e0:51:8c:e1:6e:9f:b1:f5:3d:c8:
eb:e5:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:27:04 2025 by rpki-client