Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/JTEomKX4OOyZxOy0baHsaALemoI.roa
File: JTEomKX4OOyZxOy0baHsaALemoI.roa (raw, json)
Hash identifier: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=
Subject key identifier: 25:31:28:98:A5:F8:38:EC:99:C4:EC:B4:6D:A1:EC:68:02:DE:9A:82
Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial: 019425FDDC2F4B02B55351782CAB0DAC75FF
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/JTEomKX4OOyZxOy0baHsaALemoI.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8632
IP address blocks: 31.172.144.0/21 maxlen: 22
83.222.32.0/19 maxlen: 20
94.103.208.0/20 maxlen: 20
94.103.208.0/21 maxlen: 22
94.103.216.0/21 maxlen: 22
185.6.232.0/22 maxlen: 23
195.218.0.0/21 maxlen: 22
195.218.8.0/21 maxlen: 22
195.218.16.0/20 maxlen: 22
195.218.16.0/21 maxlen: 22
195.218.24.0/21 maxlen: 22
2a02:678::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:2f:4b:02:b5:53:51:78:2c:ab:0d:ac:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25312898a5f838ec99c4ecb46da1ec6802de9a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:15:08:ef:ac:1c:ff:65:94:5b:59:f2:36:
2e:7a:71:2c:30:f9:91:f5:03:27:7f:f4:c4:4f:e4:
82:30:c0:e1:52:7f:ec:b2:d7:86:7e:33:22:fc:7f:
02:81:c6:77:1b:ed:7d:8f:d3:e2:94:a1:3f:a6:40:
6d:db:20:c2:ac:c5:30:d4:52:dd:05:60:21:fd:2e:
40:d2:59:36:1b:58:41:4c:a0:03:8e:ad:1c:3c:c5:
35:66:7a:63:63:6d:59:55:b1:16:01:cc:85:af:0b:
4f:d8:91:0b:78:f3:0e:75:44:88:c7:a3:0b:94:d1:
54:20:b4:9c:f4:be:e0:58:c4:0d:d7:01:1f:e9:c1:
88:53:d7:20:eb:2a:91:36:01:f5:3f:f7:9b:97:ca:
31:f0:a8:cf:b1:ed:47:d5:a7:c5:af:ef:08:08:cc:
e4:72:26:64:45:15:ba:02:75:b9:20:f2:56:dc:d6:
7a:29:05:f8:c0:0c:69:1d:6f:28:00:ca:33:05:f5:
36:de:22:2d:aa:de:6e:6d:37:41:41:e7:52:64:b7:
dc:3b:73:f8:be:96:db:7f:c8:52:b0:2a:35:d4:59:
3f:18:7f:2c:49:ad:03:97:24:d3:8a:0b:3f:82:8a:
59:d3:28:6e:0a:6f:fa:c6:44:6d:bd:2a:e6:da:3a:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:28:98:A5:F8:38:EC:99:C4:EC:B4:6D:A1:EC:68:02:DE:9A:82
X509v3 Authority Key Identifier:
keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/JTEomKX4OOyZxOy0baHsaALemoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.144.0/21
83.222.32.0/19
94.103.208.0/20
185.6.232.0/22
195.218.0.0/19
IPv6:
2a02:678::/32
Signature Algorithm: sha256WithRSAEncryption
53:29:d3:16:25:97:98:38:36:0b:50:61:84:f6:5d:2a:ad:1a:
02:58:7f:cd:96:42:c3:ae:3e:e6:5d:c2:23:e0:22:49:39:1a:
c4:ec:4c:ac:93:67:7a:a1:1f:51:90:9e:56:f0:d2:0b:ec:7a:
9f:25:59:69:ee:d7:5a:08:72:37:75:f8:98:fd:ee:e4:2e:db:
4d:3e:4f:32:b9:17:5a:92:66:12:23:b0:6f:b0:1f:01:2a:83:
af:8b:a9:46:3f:57:c9:b5:37:43:84:6f:9d:6e:8c:29:94:10:
13:68:7c:f3:0b:9b:bd:95:dd:bd:e5:a8:5b:9c:79:2e:47:65:
6e:3f:04:43:78:aa:95:08:f0:7e:dd:56:5a:17:a9:4c:c4:b7:
c8:99:cc:77:58:35:1f:27:47:1f:ec:ef:b4:d2:8f:0a:60:f1:
e4:ce:e9:bd:e5:a9:ba:6c:b4:c1:a0:82:b3:48:03:39:82:86:
88:97:4d:86:6c:12:fc:30:0f:cf:80:2b:93:cd:59:69:0a:1a:
9d:ea:8d:91:f4:f7:38:eb:c9:c9:35:7e:33:fa:7a:68:a5:61:
7f:c4:95:1c:6b:fe:2c:fe:d0:d5:43:62:1d:4a:b1:32:b9:43:
f9:84:1e:b7:20:32:39:91:fe:95:27:fd:19:90:4c:f8:73:29:
63:fb:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:04 2025 by rpki-client