Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa
File: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (raw, json)
Hash identifier: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=
Subject key identifier: 8E:62:77:79:79:9A:2A:6F:C2:E2:B2:B3:B3:FC:C3:72:86:1F:FF:3F
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01946E6F29EC78470E6FEAC25907D1209BC1
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa
Signing time: Thu 16 Jan 2025 09:26:06 +0000
ROA not before: Thu 16 Jan 2025 09:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34442
IP address blocks: 46.232.192.0/21 maxlen: 24
77.246.16.0/20 maxlen: 24
80.77.240.0/20 maxlen: 24
88.83.96.0/19 maxlen: 24
185.89.120.0/22 maxlen: 24
185.93.5.0/24 maxlen: 24
195.8.116.0/24 maxlen: 24
195.80.0.0/19 maxlen: 24
2a00:1990::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:6f:29:ec:78:47:0e:6f:ea:c2:59:07:d1:20:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Jan 16 09:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e627779799a2a6fc2e2b2b3b3fcc372861fff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:52:2d:3e:b3:76:2f:d5:86:87:39:75:94:
8c:7d:3f:51:e9:89:1c:4d:31:6e:4b:7a:e2:30:e6:
ab:40:6a:39:60:4e:bf:92:b0:4f:08:ff:cb:6a:08:
7c:33:7d:e8:bb:58:46:62:c8:96:de:97:c1:87:3a:
dc:e1:48:29:91:cc:4e:a3:a7:58:8d:3a:ad:2d:54:
5c:ca:15:60:45:f4:a1:c8:e9:81:e2:d8:b2:87:8f:
71:f1:b5:7d:ff:ed:d5:66:87:47:96:2e:6c:e6:d1:
64:ea:39:d6:b4:c9:71:58:22:d6:de:b5:03:6c:1d:
e0:d7:a3:40:94:a1:62:99:f5:62:43:8c:2c:37:b0:
c1:a3:58:4c:69:1e:e0:bf:a4:1f:63:1c:d0:13:6c:
3d:e5:b4:4c:9d:28:02:61:e3:b2:bf:f9:81:ac:93:
90:50:cb:53:90:5b:0c:f7:b9:78:24:9c:89:f6:9a:
8f:a2:72:72:a1:17:90:5c:97:65:5a:6d:08:6f:68:
11:dd:a2:79:27:21:11:21:aa:ae:d7:bb:f4:91:8b:
51:7c:2b:f6:a9:fe:3a:7e:94:db:0d:fa:53:e5:e7:
bc:62:62:0d:79:ad:5f:d4:ad:9b:cf:c1:33:5d:74:
29:25:b2:9d:57:d4:0f:fb:7e:83:29:eb:ab:22:d6:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:77:79:79:9A:2A:6F:C2:E2:B2:B3:B3:FC:C3:72:86:1F:FF:3F
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.192.0/21
77.246.16.0/20
80.77.240.0/20
88.83.96.0/19
185.89.120.0/22
185.93.5.0/24
195.8.116.0/24
195.80.0.0/19
IPv6:
2a00:1990::/32
Signature Algorithm: sha256WithRSAEncryption
74:08:fb:8e:7a:ba:63:d4:01:77:da:34:14:1f:db:18:21:79:
6d:02:8f:6f:8f:cd:ff:be:ed:7c:6c:15:e0:11:00:d0:ab:d4:
b7:70:a2:54:95:4b:83:4e:f0:c6:51:fa:15:02:35:72:5b:09:
aa:6e:d3:2a:c9:86:b7:ee:0a:48:93:22:7e:a3:dc:c2:23:37:
99:9d:99:61:a2:fd:f8:2e:54:95:b0:b3:01:8e:d1:cd:09:8e:
43:5d:ce:c2:2d:4f:56:9b:4b:52:0e:eb:1f:38:61:8a:2d:a2:
61:80:44:02:e9:2e:c8:f8:73:23:96:a0:6e:ed:78:3d:9b:0d:
d7:83:cf:64:7f:19:56:06:1a:9d:96:28:e2:40:9e:57:5e:3e:
1d:2a:70:2c:03:62:ce:9e:c1:bb:4c:42:72:8e:67:a2:93:ce:
c2:7d:55:bf:8c:20:10:e2:28:51:10:9a:d6:0f:8d:1a:63:29:
b4:ea:66:9a:21:8b:68:6a:36:35:7c:c6:76:ef:63:dd:cd:98:
71:0a:f8:d1:59:58:76:5a:d2:2e:dd:db:eb:6c:e1:91:6b:95:
72:57:48:4c:13:6c:c4:d3:39:1b:d7:8d:e5:79:de:4d:19:5a:
2f:33:77:d0:d0:57:fd:22:da:95:39:e8:41:2e:bc:85:5a:bd:
7c:ad:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:56:11 2025 by rpki-client