Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa
File: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (raw, json)
Hash identifier: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=
Subject key identifier: 78:97:B9:E2:92:50:0F:88:F6:24:35:9B:59:44:EE:15:EE:19:C3:89
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 01942748110AB76AD6C565AD4FD694F9056C
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20900
IP address blocks: 31.217.232.0/21 maxlen: 24
45.11.208.0/22 maxlen: 22
78.159.132.0/22 maxlen: 22
78.159.148.0/24 maxlen: 24
91.214.114.0/23 maxlen: 23
91.214.114.0/24 maxlen: 24
91.214.115.0/24 maxlen: 24
185.182.252.0/22 maxlen: 24
213.190.64.0/19 maxlen: 24
2001:1b08::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:11:0a:b7:6a:d6:c5:65:ad:4f:d6:94:f9:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7897b9e292500f88f624359b5944ee15ee19c389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:8b:5b:2a:fa:3f:dd:7b:ad:52:87:b9:64:
3c:39:1d:e0:64:a8:d1:ed:6d:1b:63:d9:3a:b0:b6:
45:44:c7:10:4b:92:c8:fc:db:69:07:a8:27:ed:0d:
45:99:2d:f9:50:58:34:9d:31:53:3b:43:39:13:07:
9c:2f:6a:f7:3d:a5:c2:8a:66:9a:8e:6f:74:f8:57:
38:53:51:ae:ae:d2:e0:53:49:f2:16:76:80:ca:5e:
9b:66:b6:ca:4d:c3:9d:57:a8:84:95:41:ec:a3:db:
eb:96:c0:d3:47:c8:93:75:e0:70:dd:36:66:3e:13:
1e:ed:fc:d7:0d:58:05:32:51:10:4b:93:16:98:37:
c4:ad:5c:4a:47:ff:b2:5f:86:f1:b6:94:70:fd:d8:
4e:55:f9:9f:93:66:0d:f2:76:53:de:3d:66:b3:6b:
2c:1e:94:f2:0b:91:39:89:39:c2:80:3c:4a:6f:0f:
18:b0:c0:b3:62:7b:d1:01:71:60:40:82:c9:9f:36:
d6:23:15:7f:9a:03:54:73:a1:3e:7e:f3:3b:f9:8f:
72:e4:bd:4c:df:9b:69:91:b5:43:ec:40:08:6f:5f:
32:c5:10:38:8b:62:61:24:c9:52:28:56:4e:5f:c1:
97:10:6c:c4:3a:7e:f1:c1:16:5d:a7:c0:f4:c3:00:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:97:B9:E2:92:50:0F:88:F6:24:35:9B:59:44:EE:15:EE:19:C3:89
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.232.0/21
45.11.208.0/22
78.159.132.0/22
78.159.148.0/24
91.214.114.0/23
185.182.252.0/22
213.190.64.0/19
IPv6:
2001:1b08::/32
Signature Algorithm: sha256WithRSAEncryption
42:db:94:e5:82:44:92:5d:ce:6c:c0:c4:f7:87:29:3a:46:c9:
79:77:ed:88:c0:06:be:1c:8e:3b:f3:63:10:bf:e9:41:e2:bc:
1a:92:f1:42:26:d4:1f:8a:a8:c9:39:c5:0d:84:7d:4f:f6:97:
fa:c2:00:2f:99:62:b4:ac:f7:98:79:15:dd:33:0a:15:d4:a5:
97:d8:a4:c5:be:50:74:ea:25:96:8b:74:88:61:ba:99:a4:2c:
b7:0e:a5:e9:3f:59:e3:b7:01:d4:9c:b1:67:70:1d:94:d1:98:
92:8e:be:e5:8d:cb:ce:9e:b6:b0:8b:c1:53:8b:9f:c7:e8:b9:
1d:02:29:47:c3:5b:b2:27:ef:1b:e7:23:4b:5b:1b:58:36:fc:
86:45:5d:14:f7:ec:29:18:c9:e0:35:19:e9:55:4c:6a:64:1b:
62:32:f0:19:5a:2c:56:f7:ae:53:42:81:f8:cb:6d:85:1d:7a:
98:83:25:01:16:4c:33:fc:de:0b:ab:6e:1c:b2:ed:30:ba:a9:
df:68:21:6f:e2:d9:3f:92:eb:61:37:8c:82:88:f0:bb:71:47:
ff:cb:4d:96:7c:00:44:6c:b7:34:75:a2:be:4a:66:72:40:f2:
51:d8:3e:55:5c:ab:16:33:36:7b:b8:b2:45:42:2f:30:1a:23:
5d:4b:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:29 2025 by rpki-client