Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Jn9LNrC4wIy3yIlbSkthFN9Albs.roa
File: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (raw, json)
Hash identifier: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=
Subject key identifier: 26:7F:4B:36:B0:B8:C0:8C:B7:C8:89:5B:4A:4B:61:14:DF:40:95:BB
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01955B227648DA84C60BFA7C4C76B0487F27
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Jn9LNrC4wIy3yIlbSkthFN9Albs.roa
Signing time: Mon 03 Mar 2025 08:32:19 +0000
ROA not before: Mon 03 Mar 2025 08:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.92.0/24 maxlen: 24
5.253.158.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
62.122.228.0/22 maxlen: 22
62.122.228.0/24 maxlen: 24
62.122.230.0/24 maxlen: 24
62.122.231.0/24 maxlen: 24
91.210.126.0/24 maxlen: 24
185.210.192.0/24 maxlen: 24
185.218.160.0/24 maxlen: 24
185.218.161.0/24 maxlen: 24
185.218.162.0/24 maxlen: 24
185.218.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:22:76:48:da:84:c6:0b:fa:7c:4c:76:b0:48:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Mar 3 08:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=267f4b36b0b8c08cb7c8895b4a4b6114df4095bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:2a:2e:6a:9e:31:92:96:3a:5f:d4:59:c6:
eb:43:18:0e:59:00:8e:37:52:b6:0e:ac:3d:4c:ab:
8c:b2:60:d6:87:08:f1:5d:08:56:88:83:4f:b0:45:
a8:9f:85:41:65:aa:ba:e9:38:a8:1b:05:15:ac:e9:
b6:44:70:b6:9b:60:d6:7d:dc:38:c4:a0:4c:4c:cb:
2b:27:b0:32:23:c1:23:dc:26:93:c6:6b:fe:3f:bb:
a4:4b:de:8f:7b:fd:de:3b:75:5c:ba:70:7f:39:50:
e6:50:76:2c:c8:06:f1:73:b4:35:12:67:3d:d9:c0:
8b:c7:db:b3:db:97:7e:fb:9b:64:6e:3b:f7:fa:11:
c3:c3:b4:b4:20:c7:a1:f6:f5:cd:58:be:3b:b3:17:
69:08:de:28:82:47:07:f9:2c:aa:c3:e9:c0:ff:74:
2e:2f:08:f3:49:36:21:de:89:ae:d6:a7:c6:97:2c:
df:35:cd:d3:a0:42:14:62:bc:fa:38:97:1b:6c:ea:
34:34:e7:5a:c7:33:84:28:02:15:9c:e8:b9:78:f7:
9b:f1:4a:d3:9b:a4:38:b7:b3:ba:ae:dc:cc:99:59:
78:d5:b7:56:7e:d0:8a:32:80:4b:3b:51:a6:46:1b:
2c:75:a5:f7:28:1b:6a:10:94:d3:c4:44:38:f6:ac:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:4B:36:B0:B8:C0:8C:B7:C8:89:5B:4A:4B:61:14:DF:40:95:BB
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Jn9LNrC4wIy3yIlbSkthFN9Albs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/24
5.253.158.0/23
62.122.228.0/22
91.210.126.0/24
185.210.192.0/24
185.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:72:5c:29:ea:8b:90:5d:c0:5b:e5:d0:0e:c2:24:75:1d:46:
39:52:51:fa:9b:87:69:3b:3d:d5:c0:30:c2:a9:70:6a:99:c2:
be:cd:e0:f0:c2:14:2f:fc:70:18:e0:03:a3:e4:55:f2:be:8b:
93:d4:dd:f2:82:1c:8e:ba:12:25:cf:ef:74:fb:3b:e0:9c:f8:
75:f2:19:c7:0c:a7:d1:b1:6c:1b:df:d9:13:f3:25:80:8c:84:
9d:06:ce:a1:a0:93:5e:5c:eb:53:db:df:18:fa:52:83:15:0c:
31:1f:c5:41:3f:70:e2:f2:82:54:a6:82:f2:74:69:f5:9d:e3:
4e:4f:9b:9e:d3:06:aa:03:d4:62:6f:cb:80:30:3c:87:f9:c1:
e6:7f:ed:93:4c:06:a3:be:60:89:b2:24:b7:d7:bc:9f:74:57:
f8:50:6a:50:74:0b:b2:14:ad:e9:15:eb:bc:b6:07:d5:17:08:
d7:1d:b6:07:ad:15:8a:fe:a4:84:19:0a:9b:95:58:90:d0:e5:
61:6b:09:b4:80:14:d9:c0:61:58:4d:33:74:ab:a4:02:e8:10:
41:02:90:ef:ab:c4:9f:8a:5e:9d:11:c3:c6:ec:77:b9:3a:95:
83:ac:32:20:b6:f5:0a:ae:64:94:36:05:84:8a:bf:18:6d:01:
5f:70:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:06:54 2025 by rpki-client