Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa
File: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (raw, json)
Hash identifier: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=
Subject key identifier: 26:65:C2:A5:05:9D:4A:81:42:3F:AC:A7:F8:22:89:C8:AA:4C:98:03
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 01942068358ED733131C1B32D950C0C7F6B4
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48635
IP address blocks: 46.17.0.0/21 maxlen: 24
62.84.240.0/21 maxlen: 24
91.203.76.0/22 maxlen: 24
109.70.0.0/21 maxlen: 24
128.140.216.0/21 maxlen: 24
185.27.140.0/22 maxlen: 24
185.89.4.0/22 maxlen: 24
185.231.200.0/22 maxlen: 24
2a02:2968::/29 maxlen: 48
2a05:cfc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:35:8e:d7:33:13:1c:1b:32:d9:50:c0:c7:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2665c2a5059d4a81423faca7f82289c8aa4c9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:07:32:67:76:90:c9:68:06:ca:86:a1:bd:
c9:90:ec:ce:c8:b8:01:e8:f9:d2:85:7a:23:af:3a:
6d:e3:8d:ba:99:72:71:68:de:8f:b6:27:2a:9c:8b:
34:d2:f3:00:19:1e:31:2f:97:fe:1b:b2:a0:30:ad:
0f:13:98:49:36:90:6d:14:fb:09:d1:f5:60:19:57:
85:3e:7a:35:5e:2c:0e:f2:71:6c:27:f3:5e:00:02:
09:a0:2d:cf:4f:e3:82:b9:eb:8c:65:69:54:7d:4f:
b8:e1:8e:75:61:ea:b3:0a:d1:6c:be:e4:b3:f4:d7:
78:5f:f6:11:ca:0b:01:e8:8e:cc:4d:c4:92:41:c5:
0c:f1:d1:ae:58:60:67:65:62:8c:2a:c3:f6:6d:f3:
12:ff:38:a6:52:6b:bf:ae:0f:8f:a9:6e:67:b2:67:
45:0f:76:20:b0:cb:56:5c:f4:fc:26:2c:5d:3c:0a:
11:2b:21:5c:ad:8f:4c:bd:b3:1f:41:5a:21:f4:aa:
c6:c9:7a:b5:9e:80:4d:56:c2:3f:bf:dd:59:5c:a9:
09:23:dd:a2:2a:06:e3:e4:17:61:06:cf:9a:22:d6:
95:e3:c7:bf:69:05:48:0a:13:58:19:2d:00:74:db:
68:ea:59:dc:90:d6:b2:a3:a5:c0:be:ae:5d:c7:cc:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:C2:A5:05:9D:4A:81:42:3F:AC:A7:F8:22:89:C8:AA:4C:98:03
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.0.0/21
62.84.240.0/21
91.203.76.0/22
109.70.0.0/21
128.140.216.0/21
185.27.140.0/22
185.89.4.0/22
185.231.200.0/22
IPv6:
2a02:2968::/29
2a05:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
22:0f:89:50:4a:55:72:50:73:8e:bf:56:57:52:40:44:17:62:
90:96:2c:89:2f:9c:0c:27:ca:bf:c7:96:29:11:c6:f4:cc:9b:
ad:45:c4:78:39:d5:fc:08:42:e7:fb:e4:c5:1c:67:8b:77:9b:
8d:0d:14:34:43:48:c0:b1:9c:6e:12:73:20:df:c7:85:2f:e8:
dd:62:0c:0a:5b:63:68:2d:15:09:09:06:07:e3:bc:42:eb:0c:
57:36:e4:24:ea:5e:be:0c:79:cf:f8:28:48:15:80:89:12:a3:
d5:7e:52:20:58:d3:70:9f:4e:4a:43:9b:3a:a9:eb:77:0d:9a:
a9:16:c9:65:46:46:5b:fd:d5:a2:fc:54:0a:a9:c6:db:5a:e6:
23:15:b6:76:16:9a:a2:d6:fe:6e:96:f4:04:bd:48:71:12:c1:
06:46:42:24:37:1f:81:9b:42:13:f7:0c:a9:87:d2:11:dc:83:
51:19:b4:59:81:04:d2:99:7d:f1:96:23:95:5b:a1:9e:f3:21:
e3:54:b3:9e:64:a0:ce:c7:7c:4f:9e:9c:61:c8:a7:30:90:d0:
d6:f2:30:6f:89:0a:02:e2:7c:aa:4a:e8:d1:6b:cc:07:f3:18:
eb:c0:c3:bb:5c:43:a2:d0:de:fd:0b:17:e9:db:d8:91:5d:35:
b7:ff:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:58 2025 by rpki-client