Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/j_xflR4S2WvglBWH8M3t9MideIU.roa
File: j_xflR4S2WvglBWH8M3t9MideIU.roa (raw, json)
Hash identifier: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=
Subject key identifier: 8F:FC:5F:95:1E:12:D9:6B:E0:94:15:87:F0:CD:ED:F4:C8:9D:78:85
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019425222B670B30A39E49B5B3B69125932A
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/j_xflR4S2WvglBWH8M3t9MideIU.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205620
IP address blocks: 185.211.64.0/24 maxlen: 24
185.211.65.0/24 maxlen: 24
185.211.66.0/24 maxlen: 24
185.211.67.0/24 maxlen: 24
193.27.24.0/24 maxlen: 24
193.27.25.0/24 maxlen: 24
193.27.26.0/24 maxlen: 24
193.27.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:67:0b:30:a3:9e:49:b5:b3:b6:91:25:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffc5f951e12d96be0941587f0cdedf4c89d7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:26:0b:2a:a9:72:0f:5f:24:4c:3b:27:9f:
e4:00:72:53:fe:0f:d3:69:bc:d4:a7:42:81:18:ce:
05:ce:4e:4a:c2:6b:e7:75:12:a5:2e:7d:6c:31:d8:
35:a9:a1:49:69:9d:2b:9e:d3:a8:6f:7d:f0:09:49:
44:d5:c2:81:2c:e5:ff:c5:a8:64:58:2b:fa:07:ea:
ef:10:e8:57:cc:5b:d0:fc:c8:31:e5:81:3f:b9:2f:
ac:33:15:5c:28:22:36:f5:19:9e:ff:40:a9:72:b8:
51:dc:f4:ac:eb:e4:a8:4d:cf:c5:9c:42:4d:7b:41:
8b:9e:9e:3e:1a:19:bb:72:dd:12:a0:86:bc:88:b1:
61:f6:1d:7b:ee:61:0b:7b:b3:b1:d0:1f:6b:28:8b:
f4:66:d3:13:3b:50:15:a4:cf:f5:57:ca:4b:04:c9:
eb:b6:94:07:e0:c4:c1:8d:ad:48:60:2a:66:20:43:
13:d3:9d:3e:61:4c:81:68:89:f2:a9:be:ad:d7:3c:
02:3f:54:43:44:52:cf:a0:6e:77:a8:0a:ac:36:e1:
7f:3c:88:ea:3a:2e:ef:ae:7b:f5:b5:5d:d4:d9:66:
fe:69:75:7a:b1:3e:c8:87:19:48:e0:61:39:a8:62:
67:34:47:04:9e:92:5f:73:31:42:40:6c:f7:bd:39:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:5F:95:1E:12:D9:6B:E0:94:15:87:F0:CD:ED:F4:C8:9D:78:85
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/j_xflR4S2WvglBWH8M3t9MideIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.64.0/22
193.27.24.0/22
Signature Algorithm: sha256WithRSAEncryption
20:82:14:ce:dd:e5:b7:2d:27:3e:16:95:47:49:33:ad:c7:73:
07:e5:ae:7b:1d:08:c2:82:9a:1d:5f:78:ef:89:b2:cb:5a:45:
67:b9:02:62:7c:b8:5c:88:36:ca:31:3c:f7:8c:2b:04:04:74:
9d:5f:1f:fa:d3:8b:5b:47:db:74:e0:d5:b4:92:fb:89:50:ff:
ee:4c:81:35:f4:47:04:74:3d:21:a8:4d:88:9e:d3:c9:40:a4:
e8:95:2a:36:20:64:bf:b4:b2:12:3a:b9:07:61:41:18:41:5b:
16:82:e7:6c:ff:8f:78:24:cf:a2:e2:b8:a6:e7:10:c6:f0:7a:
a8:9a:be:44:c5:2f:ad:ce:13:3a:d7:70:be:71:74:71:ff:f1:
f0:6d:7f:dd:67:62:03:dd:bd:25:20:44:f0:c0:cf:61:e0:4c:
43:74:2b:4d:17:73:68:5f:de:e2:9e:9e:88:5b:d0:08:7c:e9:
89:2d:c1:e7:8d:9c:d2:08:59:51:6a:71:1a:cf:8b:13:f3:1e:
91:bd:7c:81:e3:3e:1e:7d:dc:b3:66:f4:58:0c:de:cf:92:a8:
32:e5:86:38:d5:9c:f8:6c:ca:2e:ef:e7:27:0c:ba:e1:c0:46:
ca:0e:d0:fe:d7:f0:14:5f:51:9e:ef:4b:fa:dd:a8:87:84:05:
7b:7c:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:12 2025 by rpki-client