Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JRPXqjHWLaWnIuSL8g9IeICp1DA.roa
File: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (raw, json)
Hash identifier: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=
Subject key identifier: 25:13:D7:AA:31:D6:2D:A5:A7:22:E4:8B:F2:0F:48:78:80:A9:D4:30
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8BCC00B7D0753972A5F6AA3293AD
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JRPXqjHWLaWnIuSL8g9IeICp1DA.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2199
IP address blocks: 193.54.136.0/24 maxlen: 24
194.57.170.0/24 maxlen: 24
194.199.12.0/24 maxlen: 24
194.199.74.0/24 maxlen: 24
194.199.95.0/24 maxlen: 24
194.199.97.0/24 maxlen: 24
194.199.98.0/24 maxlen: 24
194.254.97.0/24 maxlen: 24
195.83.190.0/24 maxlen: 24
195.83.214.0/24 maxlen: 24
195.83.254.0/24 maxlen: 24
195.83.255.0/24 maxlen: 24
2001:661:2000::/35 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:cc:00:b7:d0:75:39:72:a5:f6:aa:32:93:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2513d7aa31d62da5a722e48bf20f487880a9d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:f9:a3:c0:64:0f:13:48:0e:3d:00:0b:da:
1f:0c:9c:f0:09:58:4d:9e:a0:22:f6:8d:04:b0:2f:
44:85:b7:61:02:ac:82:b5:43:35:f5:85:5c:fc:8f:
dd:72:05:00:bd:fd:dd:5c:b7:4d:44:6f:50:70:3c:
78:27:fb:d9:09:cc:01:65:42:ed:b0:71:80:29:05:
a5:a6:8d:e7:f2:51:47:6f:a1:54:94:a1:f7:0c:fa:
ae:a0:d0:23:9b:4d:91:2a:28:67:1b:d0:6e:58:5f:
76:65:e2:3d:75:9d:f7:10:75:37:e1:fd:87:15:36:
96:72:91:a0:b7:3c:a7:ee:bc:f9:44:11:51:78:23:
7a:c1:02:e4:a8:a3:74:b2:1d:68:33:85:58:4a:0e:
51:22:f2:e8:a4:e7:a8:90:1d:af:28:e8:d0:6c:c4:
a5:68:d5:6d:48:c9:e2:9b:74:5e:55:5f:69:75:a7:
89:f9:e0:de:fe:fc:ca:b5:ab:8b:2d:83:79:f8:7d:
a1:26:52:a6:b6:0a:5f:09:a2:0b:72:be:2b:2e:47:
a3:fe:4a:81:c4:de:04:07:91:3f:f6:ff:ad:e1:20:
35:2b:74:d8:64:56:71:4e:4f:38:00:a9:17:15:f9:
eb:18:c8:df:f7:a9:45:18:e4:82:6c:30:11:60:c7:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:D7:AA:31:D6:2D:A5:A7:22:E4:8B:F2:0F:48:78:80:A9:D4:30
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/JRPXqjHWLaWnIuSL8g9IeICp1DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.54.136.0/24
194.57.170.0/24
194.199.12.0/24
194.199.74.0/24
194.199.95.0/24
194.199.97.0-194.199.98.255
194.254.97.0/24
195.83.190.0/24
195.83.214.0/24
195.83.254.0/23
IPv6:
2001:661:2000::/35
Signature Algorithm: sha256WithRSAEncryption
6b:2e:17:65:22:f6:7e:74:34:17:64:c8:56:6f:7c:92:60:cd:
f3:52:fd:0d:a0:52:ae:97:f3:7a:f4:e2:a4:fc:1c:9d:fb:d4:
1a:d1:ca:11:37:6b:1b:99:07:51:22:f2:78:58:61:41:5e:b4:
6d:20:4f:21:05:22:d6:10:00:e3:8d:d4:62:ba:59:98:83:92:
ef:00:fb:57:01:5a:e7:c2:f7:c1:9b:f3:95:8f:84:c8:10:a7:
9f:ae:16:7a:7b:f6:cf:82:f6:e4:53:b1:96:86:70:1c:9e:7e:
f2:f4:3c:23:c7:69:38:04:88:8b:a3:c2:a6:41:85:82:9c:ae:
6d:c7:2c:4a:f0:3f:78:84:78:9a:62:36:45:68:3a:b4:11:43:
d8:95:88:22:49:f1:fa:01:58:2e:ff:6f:1a:5f:e8:14:31:18:
ca:b1:0a:05:53:f4:65:0e:ba:24:81:b5:6b:93:59:2f:37:41:
a6:f0:99:dd:9c:af:22:70:10:d6:bb:8d:54:74:75:96:c0:d5:
aa:4a:3d:e4:02:54:d6:2e:c9:3c:f9:60:a9:58:aa:3f:d3:99:
40:18:53:6e:a4:37:47:ea:67:ac:bb:e6:5d:bb:ea:ba:a3:0a:
aa:7c:56:c7:99:2e:90:6b:e1:29:d2:b6:eb:ad:f9:6e:e2:95:
ef:d9:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:23 2025 by rpki-client