Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/JyQo8VWrljsbu7fdBUyCLnp2fRo.roa
File: JyQo8VWrljsbu7fdBUyCLnp2fRo.roa (raw, json)
Hash identifier: PYNlAKDVxyxJWLdDPpsz5WMXt3MO3ZloO8y7DclxK3I=
Subject key identifier: 27:24:28:F1:55:AB:96:3B:1B:BB:B7:DD:05:4C:82:2E:7A:76:7D:1A
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 01943F682B83DF138E2BDF53D73F30D2E169
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/JyQo8VWrljsbu7fdBUyCLnp2fRo.roa
Signing time: Tue 07 Jan 2025 06:16:18 +0000
ROA not before: Tue 07 Jan 2025 06:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43197
IP address blocks: 45.81.37.0/24 maxlen: 24
109.68.232.0/21 maxlen: 21
109.68.232.0/24 maxlen: 24
109.68.233.0/24 maxlen: 24
109.68.234.0/24 maxlen: 24
109.68.235.0/24 maxlen: 24
109.68.236.0/24 maxlen: 24
109.68.237.0/24 maxlen: 24
109.68.238.0/24 maxlen: 24
109.68.239.0/24 maxlen: 24
185.105.228.0/22 maxlen: 22
185.105.228.0/24 maxlen: 24
185.105.229.0/24 maxlen: 24
185.105.230.0/24 maxlen: 24
185.105.231.0/24 maxlen: 24
2a0b:6bc0::/48 maxlen: 48
2a0b:6bc0:1::/48 maxlen: 48
2a0b:6bc0:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:68:2b:83:df:13:8e:2b:df:53:d7:3f:30:d2:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Jan 7 06:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272428f155ab963b1bbbb7dd054c822e7a767d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:3f:8a:cd:a0:4b:70:3a:58:17:6c:2b:f0:
04:e1:34:71:40:bd:e4:f9:0b:95:91:cf:be:b7:8c:
ec:12:02:13:2c:67:8d:66:80:58:bc:44:48:4d:a5:
13:a1:a1:2e:44:ab:7f:cd:21:0f:7a:d4:3b:da:30:
89:70:ae:f0:57:32:e0:2b:28:6c:28:7a:cd:f4:62:
35:7e:20:b9:9d:93:4f:f2:df:9a:10:ec:b3:b4:1c:
91:91:f4:cc:31:4d:0a:c6:f5:96:a8:c2:8d:fc:15:
1c:44:df:76:e1:6a:19:03:fd:e6:a4:cb:a2:1a:7e:
e0:4f:ca:06:40:e3:f9:85:90:d7:cc:de:84:fb:58:
5d:1b:e8:d8:de:a8:e2:39:9f:d9:fa:8e:2b:25:80:
43:4e:f0:1b:5f:bf:92:15:2a:46:56:bc:ae:44:d9:
a7:d3:82:c7:56:db:28:b9:44:32:c7:a1:45:d9:1c:
79:7a:03:a3:56:f6:0c:37:bd:16:07:7a:14:7a:99:
45:ee:e0:42:ef:4c:ef:b4:80:fd:8a:06:75:13:e3:
28:65:54:6f:0e:88:03:24:9c:df:f5:cc:a1:a8:ab:
4e:9d:ef:51:b3:f2:f9:60:18:01:09:d4:03:e8:fb:
a4:35:bc:04:8a:e8:30:56:8e:0b:30:e8:20:8b:df:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:28:F1:55:AB:96:3B:1B:BB:B7:DD:05:4C:82:2E:7A:76:7D:1A
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/JyQo8VWrljsbu7fdBUyCLnp2fRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.37.0/24
109.68.232.0/21
185.105.228.0/22
IPv6:
2a0b:6bc0::/47
Signature Algorithm: sha256WithRSAEncryption
24:a7:d6:1e:35:c4:5b:1e:30:e5:64:8f:ed:f4:20:f6:78:b5:
fd:e6:8b:18:b3:d6:d9:ab:5e:15:f2:7f:62:c7:52:8c:7e:ba:
3f:68:94:ba:69:56:08:a0:5a:d3:62:35:64:0e:70:0b:5f:7b:
30:0a:ca:ee:13:07:a6:9d:92:b3:3b:96:9c:dc:19:30:d1:a5:
bb:17:d0:06:56:61:ab:16:9c:de:fa:be:a0:75:7d:e3:c3:e9:
b2:a1:65:5d:58:53:00:9e:4c:32:c6:69:1c:d2:80:0e:6d:63:
52:34:7b:b3:17:4b:bd:f6:8e:d4:6f:5a:1b:ec:e3:4e:e5:53:
21:16:23:80:d3:1c:87:ad:3d:b8:b6:90:a1:d1:20:b9:c2:de:
5b:21:a2:34:1e:ea:55:96:ad:4a:6d:99:92:d5:f3:05:89:8b:
43:65:27:a7:f7:13:ff:3b:f6:91:5d:68:2e:c3:3e:43:a4:21:
f9:59:cb:a8:5d:6b:ce:9f:28:98:d7:56:39:2b:40:a6:73:ec:
af:ad:be:3a:c8:ae:a3:08:84:b7:cb:f9:07:fb:cb:8f:02:ef:
41:f5:a8:f1:c6:c9:ca:47:15:80:86:46:e3:25:04:02:ba:7a:
fe:77:5f:57:f2:53:5b:d2:64:77:ea:3b:79:23:23:c2:2b:d6:
82:00:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:53:25 2025 by rpki-client