Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa
File: Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa (raw, json)
Hash identifier: gaxxG0d8OZJYS5NjwczzEeAHbzOn6c5dbyMUhDM1ej8=
Subject key identifier: 26:0A:FB:B0:8F:CC:43:56:A8:7F:35:AD:C3:E9:E2:84:3D:E2:D8:EA
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 019427B50F7672E326402F507BF822CD3C6D
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa
Signing time: Thu 02 Jan 2025 15:49:24 +0000
ROA not before: Thu 02 Jan 2025 15:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42675
IP address blocks: 45.148.16.0/22 maxlen: 22
45.148.16.0/24 maxlen: 24
46.227.64.0/21 maxlen: 21
193.187.88.0/22 maxlen: 22
2a0c:dd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0f:76:72:e3:26:40:2f:50:7b:f8:22:cd:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=260afbb08fcc4356a87f35adc3e9e2843de2d8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:b7:9e:4f:b7:36:ef:de:3a:f0:72:7e:80:
ca:68:2a:c7:f6:67:ce:98:83:98:2b:47:25:d2:68:
8c:d3:e5:ae:70:6f:b9:8e:36:65:fe:51:c4:a7:0a:
7a:03:5f:a6:d9:7a:53:d3:e6:07:37:36:22:b0:23:
11:e9:a9:53:c2:e5:ac:34:7e:cb:c8:45:f5:47:88:
9f:50:22:2f:61:b9:da:81:4f:bb:d0:54:4b:eb:a0:
ee:b6:00:42:81:d5:8d:d4:ff:a5:9a:23:cf:a3:c8:
a2:d8:0e:61:ad:41:f4:67:56:c4:fe:53:f1:76:7e:
e3:51:72:2c:b5:77:d8:b9:6e:5f:be:5a:c1:1c:fc:
04:97:ec:34:fd:98:1b:4c:0d:d5:35:59:05:22:74:
cd:08:cf:43:80:03:bc:61:e9:68:22:8b:48:8c:da:
47:c8:10:49:8b:0f:32:3c:79:b3:85:5e:6e:64:6e:
18:fc:99:b0:5a:c2:54:6e:b8:89:6e:6c:89:0d:b0:
1a:0c:52:de:9c:3e:5c:ef:30:a8:85:4a:cc:74:56:
e7:1c:dc:98:c7:85:a8:b2:75:46:70:5a:64:b8:cd:
a4:15:1b:1a:80:23:90:c8:ce:e1:c1:a9:d8:be:4b:
8a:71:be:90:cb:15:3e:c3:40:47:7f:51:a5:b6:89:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:FB:B0:8F:CC:43:56:A8:7F:35:AD:C3:E9:E2:84:3D:E2:D8:EA
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.16.0/22
46.227.64.0/21
193.187.88.0/22
IPv6:
2a0c:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
21:d5:69:83:e8:1a:d0:e8:c8:b9:1c:94:73:26:e8:f0:3e:2c:
ec:48:b8:04:5f:15:31:e5:5a:b4:75:46:f8:2e:0e:26:1d:04:
07:cb:51:18:b2:8b:02:0a:19:7e:2d:b5:0d:c7:37:6b:cc:47:
23:21:3f:67:4a:80:fa:fe:d5:cc:5c:3e:5d:4e:d2:4a:80:52:
b3:be:0a:27:b7:4a:51:63:f4:22:a6:fb:98:bf:cd:89:15:2e:
6a:37:42:24:b4:ad:79:f5:4b:a4:c3:6a:94:56:2c:82:5b:27:
43:96:c4:23:f1:5a:fa:97:f4:e6:0a:0f:cb:f4:3b:e1:b5:9f:
6e:6a:13:c4:bf:29:d8:28:72:5c:19:fa:94:38:6f:f9:3a:8b:
93:49:5a:de:cc:31:ab:68:35:8a:19:d3:16:19:38:19:ac:e9:
35:26:ca:c3:7a:67:75:93:2d:59:c5:d0:cf:87:c6:d7:8b:1e:
82:12:0a:f6:3c:ff:fc:98:1f:a3:27:08:17:4f:aa:2d:1f:2d:
ff:42:cc:51:9d:c4:ff:59:93:c7:51:4f:2f:05:a1:a2:ca:36:
8d:3f:de:ef:4c:34:cf:85:f3:c2:2d:04:5c:a2:08:c7:b7:5e:
4c:e6:85:b1:7e:b6:c2:56:5e:67:c5:a1:78:bc:b2:50:2e:04:
0c:68:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:25:38 2025 by rpki-client