Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JgPouA_jmpHV5hDbLij9YLal33o.roa
File: JgPouA_jmpHV5hDbLij9YLal33o.roa (raw, json)
Hash identifier: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=
Subject key identifier: 26:03:E8:B8:0F:E3:9A:91:D5:E6:10:DB:2E:28:FD:60:B6:A5:DF:7A
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE362ECCCA93C03953FBB497050FC
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JgPouA_jmpHV5hDbLij9YLal33o.roa
Signing time: Thu 02 Jan 2025 07:48:37 +0000
ROA not before: Thu 02 Jan 2025 07:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64249
IP address blocks: 5.182.199.0/24 maxlen: 24
45.67.142.0/24 maxlen: 24
45.67.143.0/24 maxlen: 24
45.67.144.0/24 maxlen: 24
63.246.128.0/24 maxlen: 24
63.246.156.0/24 maxlen: 24
63.246.157.0/24 maxlen: 24
79.98.181.0/24 maxlen: 24
92.249.28.0/24 maxlen: 24
94.154.168.0/23 maxlen: 23
94.154.176.0/24 maxlen: 24
94.154.179.0/24 maxlen: 24
193.148.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e3:62:ec:cc:a9:3c:03:95:3f:bb:49:70:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2603e8b80fe39a91d5e610db2e28fd60b6a5df7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:8e:d2:f5:a2:60:4f:1d:71:6e:0f:97:08:
ab:d3:ad:6f:0f:64:ed:0b:4d:ba:70:c9:10:af:b3:
a3:6a:89:cd:65:ec:2e:ec:59:67:d2:72:a0:c4:e9:
b7:8b:c3:ea:1e:05:f2:bf:fe:25:0f:51:ad:49:4f:
76:48:f7:c6:db:fd:ee:2e:40:81:64:e1:21:18:98:
85:0d:f5:4f:9d:5d:87:7d:fa:df:56:62:54:3e:49:
03:1e:e1:d6:c9:2a:bc:f5:e4:3f:b3:7c:48:54:bb:
a0:f5:f7:69:dd:7a:c9:48:76:4b:c3:73:fb:73:9b:
df:30:2b:b4:d7:27:49:db:48:c7:f8:45:15:b5:ce:
38:3d:47:96:8b:3a:c5:ad:c0:56:21:f1:d1:0a:46:
1d:63:48:f9:92:f2:06:89:61:9a:a6:46:11:d8:17:
fb:08:2a:5f:71:f9:d1:5e:1c:8b:ab:29:dc:3b:8f:
d4:ba:5c:3d:87:41:c4:69:da:ab:70:26:b7:a5:f2:
f0:ad:00:75:3e:ee:ef:3e:78:af:d5:a5:02:c2:c7:
71:ad:96:60:e3:79:00:a2:f1:4a:72:f6:04:32:45:
00:a1:71:95:84:dc:ed:46:f6:8f:75:55:b1:4c:c6:
66:89:c0:a6:77:80:e4:ec:a1:da:60:5b:fd:90:0a:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:E8:B8:0F:E3:9A:91:D5:E6:10:DB:2E:28:FD:60:B6:A5:DF:7A
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JgPouA_jmpHV5hDbLij9YLal33o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.199.0/24
45.67.142.0-45.67.144.255
63.246.128.0/24
63.246.156.0/23
79.98.181.0/24
92.249.28.0/24
94.154.168.0/23
94.154.176.0/24
94.154.179.0/24
193.148.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e8:8d:51:bf:96:5b:81:62:bd:33:f4:d6:63:c1:95:9b:db:
58:e0:59:36:7f:2e:47:10:2f:b2:7b:21:69:6a:21:86:9a:4d:
1c:f1:db:57:e4:32:43:10:4b:ab:ea:78:74:ca:f9:f0:21:50:
38:0c:d1:5f:0a:4e:31:98:89:4a:81:7e:24:48:76:a3:68:87:
d5:c4:da:c8:9c:1a:6e:27:d2:be:59:6a:24:e2:69:bb:b9:f8:
8a:9b:f6:8c:38:50:7e:cb:d4:6f:e8:db:8d:e6:31:64:aa:e1:
82:10:db:a5:b3:5f:b9:d7:eb:8d:10:87:31:af:6d:e7:c4:97:
37:dc:37:39:92:a3:6c:6e:83:e3:1a:7b:51:dc:0a:d7:6f:4c:
13:70:70:77:70:bc:a5:db:d2:d2:12:8a:0d:93:01:ee:13:17:
6f:27:ee:33:d0:45:c9:57:b0:2b:3f:34:31:ae:4b:1b:a7:3a:
23:fc:fb:1f:38:72:d0:73:45:94:6c:f0:a4:ce:78:78:56:06:
8e:66:b9:54:ec:90:7f:04:b1:3b:8b:f0:55:29:12:37:23:b8:
48:ef:35:aa:72:8a:ba:1b:c8:ef:47:92:64:83:6f:47:da:b5:
cd:55:62:06:a0:62:46:11:0f:51:da:ab:69:1a:eb:d4:fb:8a:
f4:47:d0:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:24 2025 by rpki-client