Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa
File: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (raw, json)
Hash identifier: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=
Subject key identifier: 26:34:82:D5:CF:9D:C5:B8:59:D7:ED:13:21:81:B3:B9:C2:8C:CA:B5
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C252B4D88D1EE5B89B0B26D89154
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142032
IP address blocks: 45.145.230.0/23 maxlen: 23
45.145.230.0/24 maxlen: 24
45.145.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c2:52:b4:d8:8d:1e:e5:b8:9b:0b:26:d8:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=263482d5cf9dc5b859d7ed132181b3b9c28ccab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:b1:15:f8:bd:b8:fa:c5:5c:11:2a:00:eb:
85:bc:49:33:e7:94:85:0d:9c:98:73:df:44:60:b9:
17:5e:69:28:95:20:c3:28:6b:bb:de:14:94:ca:eb:
5d:cb:fd:e7:d2:83:80:e1:09:d0:51:d3:01:46:54:
76:f2:7d:f6:e8:c7:27:39:34:7c:66:e8:e6:8d:70:
56:64:e2:c2:17:8a:3e:01:f1:93:8e:fc:d0:57:9d:
62:c7:9e:65:86:7e:70:b2:a0:a6:b6:24:5f:5a:6e:
17:ae:0c:3b:f2:75:e3:94:37:99:93:f4:1f:7f:02:
15:2e:6e:74:c3:30:fd:40:8d:36:fe:ce:cd:a2:7d:
64:20:af:3d:8c:56:a6:59:7d:7e:3c:75:a0:2b:97:
0c:74:76:b1:73:83:d5:2a:15:33:9f:ed:e7:2b:fc:
ac:04:3d:fc:5c:a9:a9:23:9b:5b:11:d6:a9:de:1b:
eb:0f:20:1d:fa:69:e6:8d:25:99:93:e5:12:8f:15:
26:97:67:50:ac:ae:1b:50:75:9e:ac:dc:5a:8e:99:
07:c9:43:8d:03:2c:5a:f6:11:28:51:9f:ad:0f:ec:
82:bd:1c:bb:34:98:12:3a:36:3e:fa:d8:ff:31:7b:
01:be:9b:4a:7f:00:3d:da:dc:48:c7:55:25:ee:bf:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:34:82:D5:CF:9D:C5:B8:59:D7:ED:13:21:81:B3:B9:C2:8C:CA:B5
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:da:e6:f2:c4:2e:b4:fc:f4:11:26:46:4f:0c:b6:e2:d5:1e:
40:14:e6:9d:6e:90:9e:f2:1c:3e:f9:85:b2:dc:ad:6f:d7:2d:
94:75:bc:c7:79:2f:e8:8e:a0:9f:c4:d2:19:9a:19:aa:de:d9:
cb:57:97:10:22:5a:f6:5d:6c:0f:96:51:6b:fb:ee:81:83:53:
53:5b:9a:b8:78:41:8c:59:9a:4f:4f:39:7b:30:75:97:7c:d2:
cd:16:bb:33:16:c8:cb:b1:ce:89:81:9f:95:57:5f:d5:ae:bb:
25:c5:95:39:89:1c:cf:c0:25:d8:1a:10:ad:7f:66:f5:18:47:
e2:0d:02:5d:73:ec:49:57:c3:c5:3a:6f:93:9a:4f:ba:18:16:
9f:d3:ce:c8:d8:49:e9:32:f6:34:1d:3f:da:d4:8c:cb:38:03:
f0:2f:b2:45:11:4c:48:7a:66:85:cf:b1:fc:2a:47:d8:e5:ff:
5e:9c:94:e2:82:2a:f0:7e:ab:5b:d4:e3:a3:52:a8:cb:c0:84:
d0:21:7b:90:0e:fc:7e:ae:c9:86:32:5a:b5:f7:ed:c7:3d:29:
85:b1:3b:e8:f5:b5:28:32:85:9e:66:d3:6a:b4:33:30:c9:24:
fa:b5:bb:4e:b8:90:d8:34:da:c7:06:5f:30:cb:06:bb:5b:2c:
8e:e7:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:16 2025 by rpki-client