Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/jt-iRSNGZBGhABnXoxTRm_rAskI.roa
File: jt-iRSNGZBGhABnXoxTRm_rAskI.roa (raw, json)
Hash identifier: l7KIq5bWvwsgCT6cMEiSjjaqu0hDSyke8GcgCL2LIpI=
Subject key identifier: 8E:DF:A2:45:23:46:64:11:A1:00:19:D7:A3:14:D1:9B:FA:C0:B2:42
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 0194CC05D11C1FE3EBB0A096D302F8DF9F1A
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/jt-iRSNGZBGhABnXoxTRm_rAskI.roa
Signing time: Mon 03 Feb 2025 13:35:20 +0000
ROA not before: Mon 03 Feb 2025 13:35:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57912
IP address blocks: 91.236.144.0/22 maxlen: 22
91.236.144.0/24 maxlen: 24
91.236.145.0/24 maxlen: 24
91.236.146.0/24 maxlen: 24
91.236.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:05:d1:1c:1f:e3:eb:b0:a0:96:d3:02:f8:df:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Feb 3 13:35:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8edfa24523466411a10019d7a314d19bfac0b242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:20:0e:9e:68:3a:08:32:e7:6f:44:41:59:
23:a7:e9:06:08:76:c5:44:de:d0:66:54:f2:56:32:
86:bc:7a:f2:bf:90:a3:56:85:20:87:a4:ca:41:19:
36:5e:39:c0:5f:3e:0b:f5:f3:3d:d0:45:14:a6:1d:
0b:b3:28:1e:f8:41:e3:f2:0e:1b:88:55:5d:27:c2:
c2:e3:b3:5b:ec:21:1a:ef:2c:0d:8e:49:f7:b4:c9:
ea:f7:6b:ad:79:04:69:7d:35:1d:f1:57:65:e7:ce:
45:4d:0b:f2:ec:f4:87:f9:25:41:14:40:3f:4d:74:
5a:9d:41:a6:e0:8e:29:7f:32:89:07:f1:c0:25:ac:
57:6f:3d:68:39:a7:00:dc:64:4c:c2:5b:5d:40:9d:
6d:83:46:08:0c:b5:e6:18:95:b0:e9:79:44:55:2a:
9c:37:83:70:5e:4e:51:9d:ea:9c:eb:85:c4:d4:76:
a0:38:ab:b2:82:65:9b:c9:bf:04:d1:3e:9e:eb:ed:
7f:61:f8:48:b6:25:17:c1:54:98:c9:64:ff:52:09:
18:d5:72:50:5c:84:a1:69:29:73:99:8b:f3:01:45:
b7:db:54:2e:8c:2b:34:81:2c:30:3c:dd:39:e4:0b:
04:66:b0:b7:86:ea:24:d5:16:a5:78:55:3f:31:d1:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:A2:45:23:46:64:11:A1:00:19:D7:A3:14:D1:9B:FA:C0:B2:42
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/jt-iRSNGZBGhABnXoxTRm_rAskI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:31:2c:e1:2d:a8:a9:b5:5b:45:f5:c0:48:d0:1d:bb:0e:9f:
5c:f7:d0:ba:b3:6b:ee:f9:33:1e:5b:d0:83:f2:f5:97:d6:b1:
ef:dd:e2:e4:13:aa:7b:64:3d:28:88:fd:8a:61:28:de:72:8e:
52:f0:cd:2c:66:46:9d:f3:e0:7e:fc:c4:3b:93:65:ac:57:24:
9d:7a:9d:63:b8:83:36:ab:26:b2:81:7b:86:32:3b:57:b1:f1:
70:4d:d0:10:fe:6c:e5:56:ba:35:d9:c4:a5:51:2b:98:4a:75:
52:55:60:48:37:d1:0a:86:61:f5:fd:9d:ac:8d:20:c2:71:49:
41:4d:2d:b0:b5:db:31:e0:51:df:c8:01:5d:a9:f4:39:e3:02:
f0:de:69:31:5c:f1:bd:c3:0a:45:1e:fe:74:a0:73:a8:09:4d:
47:81:56:7e:f6:0a:82:96:4b:3c:5b:f6:eb:d4:c9:39:d6:3d:
84:1e:2a:ad:86:a3:5e:e2:59:d1:be:c0:e5:5c:4c:ea:39:14:
17:8b:d3:cd:95:0b:f6:8b:57:69:84:f3:d2:67:d2:1f:c7:7b:
5f:ff:cd:e6:78:66:ba:b3:34:ff:1e:be:d0:6e:cd:b7:01:61:
e0:53:d7:52:91:25:1c:93:9a:e1:ab:51:38:bf:31:71:60:5b:
75:c9:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:16 2025 by rpki-client