Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jimDe-5H6zrXzlwiRCOInbvPXSU.roa
File: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (raw, json)
Hash identifier: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=
Subject key identifier: 8E:29:83:7B:EE:47:EB:3A:D7:CE:5C:22:44:23:88:9D:BB:CF:5D:25
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01942067EC8B494B365ED9B05B151ACEB40E
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jimDe-5H6zrXzlwiRCOInbvPXSU.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60171
IP address blocks: 185.10.164.0/22 maxlen: 24
185.10.165.0/24 maxlen: 24
185.10.166.0/24 maxlen: 24
185.10.167.0/24 maxlen: 24
185.35.140.0/22 maxlen: 22
2a00:dd60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:8b:49:4b:36:5e:d9:b0:5b:15:1a:ce:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e29837bee47eb3ad7ce5c224423889dbbcf5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:c7:57:fb:65:5c:eb:41:4c:4b:df:20:1e:
7d:d6:b8:e2:36:67:92:7b:cf:85:b9:ff:4f:13:85:
18:eb:b8:ea:3e:11:d8:42:23:4e:56:6e:e4:93:3d:
5b:1d:ff:0e:a7:65:ba:45:4c:fd:a7:8d:01:d3:e2:
c3:9b:48:f6:8e:2e:39:76:a1:cb:26:c5:8f:94:22:
6f:39:b2:91:38:3b:b5:54:60:07:63:66:e9:b7:f0:
d9:cf:33:be:c5:0f:28:33:c1:9a:11:61:4b:2f:b5:
05:fd:82:e0:6a:b5:22:9b:ee:98:3b:78:16:39:01:
27:0f:7f:68:48:3b:1f:97:6e:55:3a:a2:1a:33:b2:
29:9d:8b:eb:7b:24:26:bc:a7:52:8b:00:8c:f0:3a:
84:93:8c:cc:ac:66:43:d0:76:2e:7b:d0:46:4c:e9:
35:89:28:83:2a:c5:fe:4a:b1:b1:7a:3f:f8:bb:97:
14:fe:75:5d:0a:2b:22:a8:f2:3e:89:a3:62:fc:57:
fd:04:40:39:0d:ba:1b:43:22:00:f4:e8:db:ad:12:
18:b8:35:46:23:b6:f7:32:71:60:10:b8:e2:15:ed:
7e:df:50:29:39:b0:44:6d:68:07:cc:95:bd:97:45:
5c:53:a3:93:7c:e0:27:b5:f2:84:33:ec:41:dd:a0:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:83:7B:EE:47:EB:3A:D7:CE:5C:22:44:23:88:9D:BB:CF:5D:25
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jimDe-5H6zrXzlwiRCOInbvPXSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.164.0/22
185.35.140.0/22
IPv6:
2a00:dd60::/32
Signature Algorithm: sha256WithRSAEncryption
58:6b:ec:4a:33:da:a7:9d:81:cb:08:c5:5d:49:2a:06:31:65:
de:59:73:50:7f:39:98:c5:f2:ed:6e:8a:d2:0a:18:ca:08:fe:
65:c7:9a:c6:b3:44:78:ae:f2:f3:4f:99:7e:ab:1b:e8:3d:88:
e3:98:c6:27:3c:d5:9d:1f:fc:7d:aa:3e:fc:c5:73:bf:33:4e:
c3:aa:d5:b0:7d:22:cf:78:71:35:77:45:c3:a9:3e:5a:74:22:
7e:f3:bb:b7:f1:60:93:06:b2:ce:91:de:54:34:3a:e1:40:1c:
3b:32:34:77:51:69:eb:54:12:27:fa:ea:ce:00:35:ec:f6:5d:
b9:1d:45:f6:88:c1:f2:c2:7b:99:a1:b5:a0:34:43:11:8f:8c:
7b:5d:eb:fc:bc:84:3b:90:21:4d:2a:90:06:93:25:88:2f:62:
b0:1a:ca:73:70:c4:43:ec:14:ba:42:9a:a2:07:d5:5e:e3:19:
89:b6:5c:7c:97:87:87:ac:27:ef:70:c2:f0:65:7b:df:ea:ee:
57:f7:99:e9:cf:61:92:80:11:81:f3:ed:03:d6:3e:61:0e:3a:
9b:32:82:bc:7b:62:39:9f:54:28:2e:fe:f4:60:dc:25:98:8c:
24:2c:89:ef:3b:96:6c:38:2c:c9:c9:65:b7:96:ca:01:26:15:
7b:6c:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:23:20 2025 by rpki-client