Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jnx5aKNnolcZ3DRs--XxMnF1C9s.roa
File: jnx5aKNnolcZ3DRs--XxMnF1C9s.roa (raw, json)
Hash identifier: BNfQ4G4yEHNGvATZ14nkcpQc9VpIfzviDY17CZ0qkzo=
Subject key identifier: 8E:7C:79:68:A3:67:A2:57:19:DC:34:6C:FB:E5:F1:32:71:75:0B:DB
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01972F493057E24F436ED0FE6FE0C338A3CF
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jnx5aKNnolcZ3DRs--XxMnF1C9s.roa
Signing time: Mon 02 Jun 2025 06:16:54 +0000
ROA not before: Mon 02 Jun 2025 06:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 194.143.196.0/24 maxlen: 24
194.143.200.0/24 maxlen: 24
194.143.211.0/24 maxlen: 24
194.143.212.0/23 maxlen: 23
194.143.214.0/24 maxlen: 24
194.143.215.0/24 maxlen: 24
213.220.10.0/23 maxlen: 23
213.220.32.0/22 maxlen: 22
213.220.58.0/23 maxlen: 24
213.220.60.0/23 maxlen: 24
213.220.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:49:30:57:e2:4f:43:6e:d0:fe:6f:e0:c3:38:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 2 06:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7c7968a367a25719dc346cfbe5f13271750bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:43:ba:47:fc:7e:5c:8b:9a:ca:14:88:99:
98:08:01:84:0b:d1:7f:18:4f:43:e3:d1:b0:36:ad:
33:3b:94:37:55:fa:e5:94:ea:28:8e:aa:58:1b:7d:
60:69:42:a0:e2:71:8d:37:84:40:08:03:07:80:b6:
c0:a9:00:c8:40:84:19:be:05:78:50:b8:d7:b1:5a:
b3:28:60:b7:1d:87:ba:bb:fa:b5:cf:de:57:75:fc:
b3:0f:76:7d:e7:82:8f:79:fe:d5:d9:b8:fe:29:2d:
0a:37:4e:7e:46:e6:74:0a:74:c0:e6:96:92:26:d6:
b5:bc:af:14:05:9c:b1:d4:b3:96:11:f7:b2:ed:c6:
62:44:3c:da:bd:00:4f:9c:8c:5f:ac:32:24:a3:d8:
85:47:68:a4:24:59:57:24:7b:51:27:00:37:a2:0b:
12:eb:20:dc:d3:44:d7:7a:e9:07:0b:ff:7a:04:39:
5d:f9:76:85:57:99:e4:d6:41:81:b0:7a:64:46:e9:
e3:c0:a9:30:2f:68:4e:31:fa:c2:67:d5:5b:a5:ae:
20:79:43:36:28:af:c4:6a:81:48:3c:33:f4:79:a5:
35:01:46:b0:e5:fd:89:8b:df:8f:c9:94:db:ff:ff:
6a:30:4c:6c:eb:46:09:a5:c7:2c:6e:4a:60:25:26:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:79:68:A3:67:A2:57:19:DC:34:6C:FB:E5:F1:32:71:75:0B:DB
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jnx5aKNnolcZ3DRs--XxMnF1C9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.196.0/24
194.143.200.0/24
194.143.211.0-194.143.215.255
213.220.10.0/23
213.220.32.0/22
213.220.58.0-213.220.61.255
213.220.63.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cc:b9:9e:04:f4:9a:e2:de:d7:ac:9d:82:22:d8:51:83:97:
89:34:b2:fd:6a:30:62:d2:52:7e:c9:49:c0:a5:27:e6:70:01:
f5:7b:93:82:56:22:98:30:46:91:c8:67:5a:16:43:be:d4:2c:
22:3b:48:49:db:b2:1c:a1:a0:1c:bc:0e:54:ee:e6:a0:fb:03:
a7:43:1e:90:f4:cc:a2:1f:60:a0:0d:d6:b0:8e:b5:50:03:5c:
bd:e0:23:60:93:65:21:8a:41:70:ac:44:6b:c9:00:2b:57:3f:
65:e5:39:51:e0:aa:5b:e6:8b:d8:79:e3:36:dd:b6:c7:0a:df:
a6:09:54:32:50:20:3d:d3:52:65:b0:cf:3f:bd:cd:f7:17:17:
00:6b:e8:f9:ad:01:80:3d:e9:00:25:0f:1f:ad:f9:9f:e2:db:
e9:6c:44:57:af:01:eb:d3:77:c2:e5:ea:ed:4f:2e:9f:11:24:
db:06:d1:0c:2f:14:22:b9:00:e6:7b:f3:ff:0a:4f:b7:59:1d:
10:aa:99:f2:21:e8:c3:a6:c5:1c:55:d8:12:97:ac:0a:31:ae:
26:a0:58:f2:ff:e8:22:24:60:6d:80:7d:5f:28:0c:18:14:78:
5b:0d:95:f4:b5:5c:5c:cf:04:9b:5d:44:87:44:43:77:22:8f:
2c:79:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:42:19 2025 by rpki-client