Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa
File: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (raw, json)
Hash identifier: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=
Subject key identifier: 25:F8:FD:75:26:70:F7:79:B4:2E:05:8B:0B:EE:5C:1D:9B:50:3D:B2
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 01948D6FDF06F46E4DF68B57CC609191D140
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa
Signing time: Wed 22 Jan 2025 09:55:06 +0000
ROA not before: Wed 22 Jan 2025 09:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 31.12.76.0/23 maxlen: 32
31.12.78.0/23 maxlen: 32
46.149.160.0/22 maxlen: 32
80.240.98.0/23 maxlen: 32
83.229.66.0/24 maxlen: 32
103.14.104.0/22 maxlen: 32
185.18.40.0/22 maxlen: 32
185.51.23.0/24 maxlen: 32
185.254.104.0/22 maxlen: 32
193.32.96.0/23 maxlen: 32
193.32.98.0/23 maxlen: 32
193.47.56.0/22 maxlen: 32
194.99.60.0/23 maxlen: 32
194.99.62.0/23 maxlen: 32
195.216.128.0/22 maxlen: 32
212.103.56.0/22 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.136.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:6f:df:06:f4:6e:4d:f6:8b:57:cc:60:91:91:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 22 09:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f8fd752670f779b42e058b0bee5c1d9b503db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:5c:00:ad:42:70:c0:f0:ac:2e:98:19:35:
af:d8:70:16:2c:76:91:a9:71:69:9d:23:c0:01:a8:
30:82:84:b0:bb:a0:42:6b:10:06:88:0e:6d:7e:33:
9e:c8:4d:f4:d4:3c:f9:12:db:3a:ed:04:5a:1e:85:
32:17:71:65:b6:08:92:56:ae:8e:c7:8a:b4:95:09:
64:8c:80:6a:b1:ae:0f:47:e2:84:5d:52:e7:81:4e:
c2:5c:33:47:00:66:4f:c7:70:c7:ca:70:10:a3:c8:
a4:82:62:7d:b9:e7:ae:fd:9b:6a:17:e6:85:f5:51:
43:46:fc:6b:a5:77:57:e1:d3:55:2c:8b:7d:ff:d3:
99:67:9b:e8:92:2f:2c:da:b3:27:25:fd:cf:ef:88:
f2:ad:f6:cf:91:2a:73:74:91:c5:6e:32:38:a8:ed:
93:1a:05:77:c9:1c:83:cf:34:1e:5d:21:d8:8d:ca:
2b:ef:ba:c7:36:a4:23:3e:a9:9f:97:c8:2b:f0:68:
05:b9:ee:45:e9:15:3b:0f:d7:45:13:32:ef:82:f8:
2b:77:7f:72:c4:96:8c:83:6e:3d:97:1a:e4:a0:b1:
a3:09:ab:24:b6:01:13:75:e6:c1:58:74:8a:3b:7d:
10:24:63:98:57:64:46:85:0d:9d:8e:9f:49:e5:e8:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:FD:75:26:70:F7:79:B4:2E:05:8B:0B:EE:5C:1D:9B:50:3D:B2
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.76.0/22
46.149.160.0/22
80.240.98.0/23
83.229.66.0/24
103.14.104.0/22
185.18.40.0/22
185.51.23.0/24
185.254.104.0/22
193.32.96.0/22
193.47.56.0/22
194.99.60.0/22
195.216.128.0/22
212.103.56.0/22
217.194.136.0/23
Signature Algorithm: sha256WithRSAEncryption
09:10:f9:6f:ee:77:b2:75:c7:f2:04:1c:48:68:32:5e:a2:0e:
6f:63:f1:f5:05:d2:bc:64:a1:08:ef:58:00:d1:ac:cb:a8:47:
72:9c:75:ce:32:2f:05:1a:ab:30:b7:c2:29:51:fd:19:f6:a6:
29:a2:5e:26:09:94:f9:7c:42:80:83:da:98:82:0f:51:44:0d:
bf:76:a1:47:41:1f:f2:96:eb:cf:8f:36:f5:31:03:e4:53:07:
6d:7c:1d:a8:ff:5c:be:9f:62:d7:e8:b0:e2:c3:5f:06:4a:7b:
06:a7:db:d6:42:2e:99:49:5d:8a:80:fb:c7:4b:da:d6:29:f6:
38:b8:f4:0e:a8:2e:95:95:dd:b3:5c:1d:af:b8:31:d7:ad:6a:
d2:a5:66:9d:82:58:43:95:83:17:c9:8e:6c:9c:00:cb:46:0a:
c3:ea:1e:c7:34:5d:47:00:a9:b7:3a:78:75:00:07:86:38:1d:
94:c3:1b:71:06:7f:29:77:08:f9:df:d5:e6:ca:60:81:72:19:
f5:ce:39:46:14:a6:f8:38:2b:c5:a9:8e:fc:69:e9:d1:94:9c:
be:c9:b8:09:0b:3d:33:5a:d8:5d:09:1a:4f:36:7e:32:08:2c:
1e:2d:a1:55:37:7f:55:e8:6c:d2:76:07:f4:81:f3:17:7a:61:
1e:3e:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:53:03 2025 by rpki-client