Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/jFeXSLOcmKjdy19dvekbxvl1dmc.roa
File: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (raw, json)
Hash identifier: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=
Subject key identifier: 8C:57:97:48:B3:9C:98:A8:DD:CB:5F:5D:BD:E9:1B:C6:F9:75:76:67
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 019424B3BF2A98DF643A30CF025A9F874137
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/jFeXSLOcmKjdy19dvekbxvl1dmc.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25560
IP address blocks: 62.216.160.0/19 maxlen: 24
85.199.128.0/18 maxlen: 24
85.199.184.0/22 maxlen: 24
95.143.160.0/20 maxlen: 24
217.24.208.0/20 maxlen: 24
2001:1a50::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bf:2a:98:df:64:3a:30:cf:02:5a:9f:87:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c579748b39c98a8ddcb5f5dbde91bc6f9757667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:a5:65:da:bb:81:a8:b9:20:a5:7f:2e:0c:
f6:1c:77:2c:4d:d3:f6:1b:b6:ab:a7:ea:a1:02:47:
f8:8e:69:41:05:34:58:c3:f8:3b:05:dc:88:78:9b:
82:11:d4:46:76:84:d5:1a:c3:d4:75:8d:42:e9:d7:
4d:48:45:5a:5f:e5:89:c4:45:9b:92:a5:6b:6f:ab:
ea:96:74:ec:34:d7:07:43:55:b7:e7:cc:e3:3b:11:
f0:78:db:4a:31:91:78:21:10:fb:48:aa:26:ab:d8:
f3:4d:57:55:2d:b8:46:24:c0:ba:11:5d:ba:ad:b5:
e3:53:a4:f1:07:6c:c2:06:b6:b9:20:31:3d:23:98:
db:d5:2e:97:27:91:1f:48:9d:c3:b6:18:6e:cc:a1:
89:05:16:a1:d1:65:fc:28:9f:dd:c3:75:6f:ba:f6:
9b:c0:b5:14:9a:13:c2:2b:4f:bf:24:30:e8:c9:1b:
b4:9a:2e:b7:e0:1c:a1:76:38:08:1c:5a:f1:eb:4b:
f1:57:cc:00:68:2f:b6:86:77:31:f6:9a:ae:b6:40:
6e:3d:f9:b7:25:c4:f8:c8:e8:2f:18:b3:7c:0f:f1:
12:2c:5f:e2:22:11:00:d4:f6:ee:f1:f7:66:2c:c4:
fb:f6:dd:9f:ac:6c:d3:22:32:56:36:20:49:56:5f:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:97:48:B3:9C:98:A8:DD:CB:5F:5D:BD:E9:1B:C6:F9:75:76:67
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/jFeXSLOcmKjdy19dvekbxvl1dmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.160.0/19
85.199.128.0/18
95.143.160.0/20
217.24.208.0/20
IPv6:
2001:1a50::/32
Signature Algorithm: sha256WithRSAEncryption
24:c9:17:b7:f9:a6:18:94:7c:e1:80:b4:fe:88:76:fe:10:04:
8f:16:2c:cd:38:20:04:6c:ea:79:3d:aa:d8:0a:1f:4f:69:12:
a3:6a:0c:03:43:85:c1:ec:d8:f9:ed:07:95:26:c3:9a:bd:fb:
5a:e0:7e:ef:f3:c7:93:dd:7e:6c:49:ed:f0:22:64:d4:71:0e:
94:64:58:05:e0:77:13:db:e3:9f:77:2a:d3:e7:94:a0:f6:0a:
59:3f:58:35:74:5e:37:49:39:d0:4a:5f:e7:09:4c:46:f1:a8:
1f:6a:29:a0:a3:2a:c4:99:34:9f:e6:2c:0a:61:34:e5:f4:97:
ae:65:b5:b1:4a:63:38:e1:a9:67:bd:77:0d:a7:21:1d:83:29:
f5:51:f0:f6:59:31:3b:de:4f:88:13:b5:d3:0a:9d:ca:4e:f9:
ec:33:44:17:8f:fd:3c:00:ba:6a:e1:15:38:05:3c:c1:23:aa:
0b:cb:e1:4e:8f:bb:06:3b:34:a6:86:0f:96:a1:af:49:cb:e5:
e3:a8:e8:07:95:83:b9:9e:12:5f:2b:ae:34:56:f0:9f:57:59:
4e:b7:6f:40:9f:81:77:c3:9d:32:ac:f7:14:86:d8:7d:19:32:
69:94:e4:c0:7b:9c:b3:63:81:e0:92:37:a6:35:c6:e1:49:4f:
c0:b1:07:ea
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQks78qmN9kOjDPAlqfh0E3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl
Yzk0NTQwHhcNMjUwMTAyMDE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzU3OTc0OGIzOWM5OGE4ZGRjYjVmNWRiZGU5MWJjNmY5NzU3NjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliylZdq7gai5IKV/Lgz2HHcsTdP2
G7arp+qhAkf4jmlBBTRYw/g7BdyIeJuCEdRGdoTVGsPUdY1C6ddNSEVaX+WJxEWb
kqVrb6vqlnTsNNcHQ1W358zjOxHweNtKMZF4IRD7SKomq9jzTVdVLbhGJMC6EV26
rbXjU6TxB2zCBra5IDE9I5jb1S6XJ5EfSJ3DthhuzKGJBRah0WX8KJ/dw3Vvuvab
wLUUmhPCK0+/JDDoyRu0mi634ByhdjgIHFrx60vxV8wAaC+2hncx9pqutkBuPfm3
JcT4yOgvGLN8D/ESLF/iIhEA1Pbu8fdmLMT79t2frGzTIjJWNiBJVl9H/wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIxXl0iznJio3ctfXb3pG8b5dXZnMB8GA1UdIwQY
MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt
MzQ3YjU2NmRkYmQxLzEvakZlWFNMT2NtS2pkeTE5ZHZla2J4dmwxZG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx
LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFPtigAwQG
VceAAwQEX4+gAwQE2RjQMA0EAgACMAcDBQAgARpQMA0GCSqGSIb3DQEBCwUAA4IB
AQAkyRe3+aYYlHzhgLT+iHb+EASPFizNOCAEbOp5ParYCh9PaRKjagwDQ4XB7Nj5
7QeVJsOavfta4H7v88eT3X5sSe3wImTUcQ6UZFgF4HcT2+OfdyrT55Sg9gpZP1g1
dF43STnQSl/nCUxG8agfaimgoyrEmTSf5iwKYTTl9JeuZbWxSmM44alnvXcNpyEd
gyn1UfD2WTE73k+IE7XTCp3KTvnsM0QXj/08ALpq4RU4BTzBI6oLy+FOj7sGOzSm
hg+Woa9Jy+XjqOgHlYO5nhJfK640VvCfV1lOt29An4F3w50yrPcUhth9GTJplOTA
e5yzY4HgkjemNcbhSU/AsQfq
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:07 2025 by rpki-client