Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/jIiM6w4uvwhIzCiW61VtIgOc9C4.roa
File: jIiM6w4uvwhIzCiW61VtIgOc9C4.roa (raw, json)
Hash identifier: YGPmlDzCihTiABHC9a2A1bTDqs0XSvl6YOW4320wkQM=
Subject key identifier: 8C:88:8C:EB:0E:2E:BF:08:48:CC:28:96:EB:55:6D:22:03:9C:F4:2E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64ACA581FF303C158DBAFAC09CF484
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/jIiM6w4uvwhIzCiW61VtIgOc9C4.roa
Signing time: Thu 09 Jan 2025 09:28:19 +0000
ROA not before: Thu 09 Jan 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34376
IP address blocks: 5.104.160.0/21 maxlen: 24
78.142.26.0/23 maxlen: 24
78.142.28.0/24 maxlen: 24
79.124.57.0/24 maxlen: 24
82.118.231.0/24 maxlen: 24
82.118.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ac:a5:81:ff:30:3c:15:8d:ba:fa:c0:9c:f4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c888ceb0e2ebf0848cc2896eb556d22039cf42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:a2:de:ea:e5:60:ec:56:a1:53:e2:47:37:
e9:86:ed:14:eb:78:14:39:1d:b1:83:97:47:fb:41:
1b:0e:fc:c9:6f:83:e3:88:1a:45:5b:e6:91:0b:59:
97:b5:73:92:88:eb:5b:6d:56:ab:dd:41:0a:47:f4:
a8:78:fc:57:1d:88:0a:4f:77:9f:4c:86:00:60:90:
99:02:a0:5f:3f:bc:ed:88:32:b8:d7:30:0d:cc:54:
8a:14:6a:16:f6:f6:50:49:bd:62:5b:c7:70:95:0e:
fb:63:1e:2e:c8:85:9a:9d:44:29:b1:bb:a4:0f:2c:
92:34:da:7d:97:f0:ec:53:b2:48:7f:34:d6:d9:13:
c4:f3:d0:6c:2f:66:9d:42:1a:56:bc:d2:b1:c8:bd:
d5:2d:33:e1:88:af:b0:38:e1:7c:bb:fe:69:b6:1b:
60:f8:3d:4c:14:5d:c9:c6:50:8b:0c:32:c0:cf:9a:
5f:ff:b2:58:b5:92:d5:c1:da:ab:13:3d:82:71:56:
2d:06:ab:9b:e3:6f:7c:c1:13:8c:7a:84:f6:57:58:
d0:d9:99:46:c8:32:da:7c:b3:b1:c7:a9:7d:3e:ba:
12:ad:b4:e4:b7:73:3b:3a:34:49:d0:aa:10:a1:f6:
8d:7d:40:a7:d7:ad:f9:11:33:89:69:45:7c:0b:e5:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:8C:EB:0E:2E:BF:08:48:CC:28:96:EB:55:6D:22:03:9C:F4:2E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/jIiM6w4uvwhIzCiW61VtIgOc9C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.160.0/21
78.142.26.0-78.142.28.255
79.124.57.0/24
82.118.231.0-82.118.232.255
Signature Algorithm: sha256WithRSAEncryption
7c:4b:3c:87:2b:51:1d:f2:c5:ca:68:b8:84:04:a3:3d:9a:fb:
cd:69:40:03:0a:e3:00:a5:b3:6f:c6:69:40:f0:03:34:78:27:
df:df:ba:e9:eb:3d:df:d9:21:3a:cb:fd:b8:21:95:5e:64:e4:
df:81:7c:38:e3:30:02:aa:24:cd:ad:b7:dd:88:e7:72:69:15:
dc:83:e9:6e:3f:bc:20:d8:d7:2c:26:3f:bc:c5:7a:73:52:11:
af:52:d5:ca:3f:23:70:d4:bc:ed:aa:01:61:80:e1:4f:ca:2f:
3c:52:a4:9d:9a:4e:7d:ce:1d:6f:53:87:5e:32:a6:9d:de:4a:
57:f3:f8:01:95:d2:ac:a8:4d:9f:a7:41:90:0c:6c:0c:88:b1:
25:1d:df:7a:de:a8:e8:8e:d7:71:2c:78:bd:51:99:db:38:b2:
4f:be:04:d5:d9:4a:8e:99:32:e0:e9:3a:44:37:e5:dd:a7:bb:
5a:7a:8b:b9:59:f9:d0:d4:31:54:df:9d:ec:61:a5:9d:12:1d:
c6:3f:d7:79:c7:9d:0c:9f:ec:48:2b:94:56:06:e9:eb:5c:42:
5a:f6:a0:11:9b:32:aa:96:01:35:6a:a4:fb:60:46:19:d4:db:
6b:66:75:9f:b7:bb:b3:94:6a:14:17:99:73:52:20:90:40:21:
6e:e6:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:50 2025 by rpki-client