Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/DS50rlRZwLY8XuiZwHc5tBN6hvU.roa
File: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (raw, json)
Hash identifier: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=
Subject key identifier: 0D:2E:74:AE:54:59:C0:B6:3C:5E:E8:99:C0:77:39:B4:13:7A:86:F5
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01941FFA235EB9BCE588081419092C4FF60A
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/DS50rlRZwLY8XuiZwHc5tBN6hvU.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210236
IP address blocks: 212.48.111.144/29 maxlen: 29
212.48.111.152/29 maxlen: 29
212.53.147.0/24 maxlen: 24
212.53.178.0/24 maxlen: 24
212.53.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:23:5e:b9:bc:e5:88:08:14:19:09:2c:4f:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2e74ae5459c0b63c5ee899c07739b4137a86f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:98:b2:34:cc:36:fb:aa:cb:2f:d7:53:80:
29:e3:fe:2e:0d:40:5c:4d:23:4c:4b:63:4a:46:4a:
a5:58:3a:b2:a3:6d:59:78:a1:a1:0f:2b:9e:0d:69:
72:88:cb:ef:06:ea:01:10:5d:18:31:e2:7b:ad:77:
95:e9:38:98:65:70:c2:53:69:02:ca:45:03:5c:6a:
ef:72:be:94:7c:94:0d:1a:26:6c:20:03:70:81:bb:
e0:7e:1f:f4:04:96:21:26:84:1f:19:b8:1d:a1:e9:
2e:e9:7d:a5:cb:03:39:4a:44:3e:4f:cb:21:f5:9d:
db:65:4d:d8:c1:48:72:48:cb:0a:58:7b:f7:49:68:
f6:ef:1d:e5:0b:bd:fb:db:a2:1a:b0:e8:32:a2:55:
d4:e3:af:c0:26:c7:58:21:5c:36:9c:6d:5e:0b:e4:
4f:29:fc:bf:f5:f2:fb:c3:29:d8:86:20:1a:31:6b:
83:ae:c4:2d:ca:c6:b4:93:45:52:c8:4d:ba:29:6c:
30:c4:2e:8c:9a:db:30:3e:d2:eb:c4:87:d7:26:de:
ef:35:f1:ff:45:35:b9:4e:ea:5d:77:21:ca:f8:3a:
e2:96:c3:59:4e:77:44:7e:f3:f4:02:39:19:99:c2:
80:bb:b3:09:89:48:d5:91:b8:08:49:34:7b:49:f2:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:74:AE:54:59:C0:B6:3C:5E:E8:99:C0:77:39:B4:13:7A:86:F5
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/DS50rlRZwLY8XuiZwHc5tBN6hvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.111.144/28
212.53.147.0/24
212.53.178.0/24
212.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
22:23:e4:bf:40:e9:af:18:af:89:0a:bc:36:2f:1e:3e:d2:d2:
a7:50:bc:bf:05:67:2a:00:ad:f2:65:ca:0a:9a:04:d1:7b:ae:
f9:14:41:3f:14:5a:51:69:32:b6:10:4e:d6:59:44:3b:ef:2c:
ef:24:cf:3b:b1:6f:c7:2a:5d:0b:36:1d:b2:70:d2:0f:00:84:
47:c7:59:33:af:0f:07:b7:b5:62:b3:d2:e4:87:a8:c8:a4:f2:
56:a0:47:f3:52:ca:a9:64:00:a3:a2:42:49:c4:04:34:5f:02:
80:b8:0c:db:00:4b:1f:81:cc:96:5e:6e:56:3d:c4:d4:65:c6:
80:8e:30:d8:2b:d8:27:86:4b:f7:e1:70:7a:b5:e4:8c:dc:c4:
be:32:1c:22:84:c5:4f:4a:31:5a:46:4e:37:3a:92:99:c6:05:
c9:5e:3d:ba:e0:89:be:f0:ef:41:ce:92:88:60:b7:42:ef:a2:
38:ee:e0:1d:17:45:47:8a:fd:24:a6:de:d4:60:66:7b:f6:d3:
cb:8f:69:7a:8c:e6:b0:68:6a:e2:ca:2a:4c:39:1e:e6:35:ff:
56:bd:f1:bf:e8:04:5a:3e:e7:b5:e3:cf:1d:f2:f2:2c:b2:b5:
ad:6d:f2:62:55:be:cf:16:e4:21:ee:28:61:70:89:a1:a4:04:
83:81:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:42 2025 by rpki-client