Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/2jwJls5Ar4jmarcjJNInWQLllso.roa
File: 2jwJls5Ar4jmarcjJNInWQLllso.roa (raw, json)
Hash identifier: LgdCGzIdRce9I75cpLk0D3bK5sO4mVP3fvpXkFLo/bY=
Subject key identifier: DA:3C:09:96:CE:40:AF:88:E6:6A:B7:23:24:D2:27:59:02:E5:96:CA
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 01942144368A9FF9E46276C7C684047DA9AB
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/2jwJls5Ar4jmarcjJNInWQLllso.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58208
IP address blocks: 5.42.152.0/22 maxlen: 24
5.42.153.0/24 maxlen: 24
5.42.156.0/23 maxlen: 24
5.42.159.0/24 maxlen: 24
91.216.120.0/24 maxlen: 24
2a01:45c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:36:8a:9f:f9:e4:62:76:c7:c6:84:04:7d:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da3c0996ce40af88e66ab72324d2275902e596ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:bb:7d:dd:8f:18:3b:07:14:b3:84:b2:1f:
ac:ed:23:c2:37:03:8a:61:ab:d8:58:3e:b8:86:f6:
39:49:44:12:06:7c:5f:4b:61:93:e7:07:0e:f8:8f:
26:82:54:e9:45:45:12:83:4e:2b:8d:0c:95:0a:9f:
da:46:c8:81:58:b7:48:a4:0f:36:8c:3e:1d:a9:f1:
56:8a:d1:b5:77:f9:19:b8:88:6b:71:ed:f2:c3:41:
8f:d9:c1:e2:7f:52:6f:53:2b:ec:00:8e:a8:db:42:
f5:d9:73:24:e0:da:9b:8f:5e:d3:19:15:c0:04:ef:
c2:7a:11:58:db:55:56:af:33:88:90:6b:f8:b6:66:
52:00:04:e0:7a:ae:c9:9a:94:23:bf:9e:b3:7c:fd:
e4:75:cb:f0:4c:ad:de:1b:48:79:28:d4:f9:1a:91:
1c:6a:64:cc:25:ab:c4:59:d8:b2:23:3a:4b:59:52:
9e:a6:da:13:4b:72:41:e6:2c:0b:6c:1c:d1:16:aa:
f7:7d:0b:3c:8c:92:b1:26:f8:e8:43:eb:a4:82:d7:
07:2b:7d:9a:a4:a4:27:47:97:d0:53:8c:38:72:54:
35:22:1a:db:2b:71:a0:6d:7c:a8:73:7c:4c:6d:c5:
f7:53:45:f0:8f:4f:a4:d0:25:bc:82:70:64:fb:3e:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:09:96:CE:40:AF:88:E6:6A:B7:23:24:D2:27:59:02:E5:96:CA
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/2jwJls5Ar4jmarcjJNInWQLllso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.152.0-5.42.157.255
5.42.159.0/24
91.216.120.0/24
IPv6:
2a01:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:bc:3e:22:15:16:08:a1:65:10:ff:b9:42:35:d8:78:47:c7:
0d:6a:49:7f:45:50:f2:75:2d:d3:f7:ba:1a:7a:ec:95:c7:ce:
b6:a0:a5:b2:c2:87:32:26:88:72:90:68:86:3b:d7:ca:76:eb:
a1:a7:fd:0b:43:78:7a:a1:c2:44:78:2b:22:b0:cc:80:2d:74:
c9:a9:70:47:c8:97:ff:31:1f:79:7c:57:75:93:6a:14:83:21:
3e:2d:20:73:d9:cc:44:04:95:05:d8:e9:d4:97:55:cc:64:2a:
b2:0c:7c:f9:37:ff:84:9c:58:dc:d8:3d:6d:83:5b:b3:2a:82:
ce:ee:3d:f6:1b:cc:40:27:12:d7:81:a5:40:e0:cc:d8:db:5c:
bf:41:d1:c1:d9:03:31:af:a2:a6:9b:14:97:9e:a8:a7:e1:c7:
8a:80:43:db:36:ab:74:50:7d:fb:21:39:22:c2:fe:a3:d2:cd:
5d:9a:32:21:7e:26:44:ae:a9:89:a4:7c:ce:53:fd:2c:2f:89:
46:7b:7f:63:df:e1:03:40:2c:4b:19:32:9b:13:9e:08:43:f5:
58:fa:3d:ff:91:27:46:db:c0:9c:a5:8b:6a:18:1a:8f:d1:05:
ba:fe:58:0c:df:ee:bc:ad:6b:60:9d:35:84:74:ee:8c:d1:e7:
2b:30:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:46 2025 by rpki-client