Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa
File: Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa (raw, json)
Hash identifier: tPAmYhNOUqRIJRD4J2TRhKcrPldpUpw9J1YTx+CS3dg=
Subject key identifier: 26:EE:16:E0:4B:54:DA:7A:20:EE:44:02:E1:A5:ED:15:AF:07:79:C7
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019542E201AFCCFB59BA10B7CFA71AFECB83
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa
Signing time: Wed 26 Feb 2025 15:31:02 +0000
ROA not before: Wed 26 Feb 2025 15:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 92.246.82.0/24 maxlen: 24
92.246.83.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.226.194.0/23 maxlen: 23
103.229.170.0/24 maxlen: 24
103.229.171.0/24 maxlen: 24
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.167.181.0/24 maxlen: 24
185.201.4.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
185.223.177.0/24 maxlen: 24
185.223.179.0/24 maxlen: 24
185.237.212.0/24 maxlen: 24
185.237.213.0/24 maxlen: 24
185.237.214.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e2:01:af:cc:fb:59:ba:10:b7:cf:a7:1a:fe:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Feb 26 15:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ee16e04b54da7a20ee4402e1a5ed15af0779c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:8e:f5:b9:ab:29:71:5e:d1:f1:3d:e3:a7:
6d:a4:db:77:f4:f9:4d:4c:b2:d1:7f:23:80:a1:6d:
23:3a:44:a0:8f:70:f7:3d:2e:35:74:f4:f4:6c:ab:
ee:ec:6a:7c:4d:85:65:d2:47:8c:f2:6f:46:bd:ae:
d3:0e:8a:0b:e3:94:bf:88:75:4f:f4:bb:63:df:33:
0b:c0:e8:e0:9f:f8:30:a3:1b:56:e8:a0:c2:be:66:
40:19:ab:5e:bb:af:37:0e:94:46:79:5f:96:6c:35:
d5:ee:47:41:8e:e7:32:d4:9c:8b:bf:72:86:61:33:
ef:ba:fe:00:21:06:2d:56:1e:36:fa:87:f2:68:73:
0b:cd:ff:54:51:57:45:20:5f:9c:ec:49:d9:f1:0f:
8b:fb:87:e6:87:a3:e4:f7:7d:57:4c:00:11:74:f3:
1d:ae:eb:a9:c0:5b:83:8d:d5:08:f3:52:06:dd:45:
c2:fb:52:c3:09:74:cf:1e:12:92:e2:38:89:21:aa:
18:08:5c:55:15:8c:b2:8a:f2:cc:d1:88:24:e1:b7:
8d:b1:5f:0b:f9:ad:47:d0:45:3f:f6:6d:48:cc:3f:
3c:3c:90:d0:0a:20:b1:71:b3:83:8b:ff:c6:bb:a9:
90:01:39:95:62:21:62:ae:77:df:f0:99:fe:fa:19:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:16:E0:4B:54:DA:7A:20:EE:44:02:E1:A5:ED:15:AF:07:79:C7
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/23
103.226.192.0/24
103.226.194.0/23
103.229.170.0/23
185.145.68.0/23
185.167.181.0/24
185.201.4.0/24
185.204.203.0/24
185.223.177.0/24
185.223.179.0/24
185.237.212.0-185.237.214.255
IPv6:
2a07:4640::/29
Signature Algorithm: sha256WithRSAEncryption
d8:70:60:fd:11:84:32:bb:ee:a1:a6:f4:09:e0:81:5c:bf:ac:
d9:aa:57:e4:b5:f9:6c:6c:33:b2:08:e9:69:84:5d:b8:10:88:
c6:dd:95:4a:37:ac:4d:dc:63:7a:d9:2a:98:45:83:c4:28:90:
03:35:cf:dd:0e:0d:09:4a:0d:7b:4f:af:57:63:45:f4:67:88:
33:db:7b:af:11:df:5e:c5:da:39:a3:b4:82:5f:16:0f:73:d4:
39:81:9c:ed:65:3f:a1:c0:d4:b4:a1:1e:eb:26:45:ee:dc:00:
da:4c:9b:81:a1:2e:07:a4:10:1c:84:5f:2e:9f:b9:d1:9e:81:
63:0d:d2:7b:9d:10:b4:71:f6:ff:15:7d:8c:22:50:9d:e8:28:
55:3c:90:f2:2e:f2:12:95:cc:48:ac:b7:39:ed:ca:2d:ca:a3:
47:a6:c3:d9:b2:b0:9c:6c:91:a0:37:38:2a:cc:a3:31:7d:24:
05:4e:ba:15:c0:7f:26:66:6b:54:46:10:77:52:f7:64:db:95:
95:b6:9f:d1:f9:5d:67:e0:51:70:30:36:da:ba:46:79:4e:cf:
7b:d9:4f:85:a4:94:00:d5:4b:ea:61:8a:96:3b:cd:8b:69:db:
db:c9:6a:c0:cd:54:57:a3:08:46:8f:1d:1b:d8:fd:df:f3:c8:
fa:8b:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:35 2025 by rpki-client