Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jiricd_hguBBCAsulfERAT4e-KQ.roa
File: Jiricd_hguBBCAsulfERAT4e-KQ.roa (raw, json)
Hash identifier: 8erCqiv/+HYD7mrhWNbRshSSj8lj43R52Eu1aLrhAP0=
Subject key identifier: 26:2A:E2:71:DF:E1:82:E0:41:08:0B:2E:95:F1:11:01:3E:1E:F8:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01964360ACDE8D77A762A430FBEEC993402E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jiricd_hguBBCAsulfERAT4e-KQ.roa
Signing time: Thu 17 Apr 2025 10:52:11 +0000
ROA not before: Thu 17 Apr 2025 10:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215114
IP address blocks: 139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:60:ac:de:8d:77:a7:62:a4:30:fb:ee:c9:93:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 17 10:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=262ae271dfe182e041080b2e95f111013e1ef8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:53:5c:db:3c:9b:be:9c:d5:a8:af:b0:38:
1e:dd:5f:32:09:07:42:d8:84:d0:24:f2:97:41:0d:
c1:32:26:94:91:77:6e:0d:10:b8:80:64:94:5c:a1:
d5:bc:b0:64:77:2b:f9:13:bc:28:e7:4e:f0:06:be:
4b:61:45:10:ce:43:35:d4:d8:ae:6b:61:0b:b3:91:
45:a1:7a:dd:79:b2:2b:fb:24:ed:ec:e2:f4:24:68:
e9:10:a3:27:c8:02:ac:83:73:59:b2:84:11:e0:e8:
23:3e:e0:61:ec:89:3a:12:18:01:80:bd:67:7b:8a:
98:13:c9:d4:97:13:62:40:6d:18:d4:27:52:a8:6c:
96:42:4f:c1:49:9e:f2:ce:58:15:80:09:f5:7d:80:
12:e6:ea:43:0c:80:19:50:75:30:ad:c8:dc:b3:2b:
8d:3e:1b:61:a8:15:c1:80:97:f5:68:24:cd:f3:c6:
45:bb:98:31:30:ea:8d:65:63:b2:e2:5f:e2:6b:bc:
61:98:04:24:d0:f4:2b:26:25:4f:39:96:d9:10:f4:
f9:67:59:76:8f:35:4e:78:3c:23:85:ba:60:7f:76:
19:3d:24:05:7b:d6:ea:8c:82:14:6e:b9:01:7f:63:
69:37:bd:71:ff:af:3f:38:92:ea:2c:6a:de:a1:a2:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:E2:71:DF:E1:82:E0:41:08:0B:2E:95:F1:11:01:3E:1E:F8:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jiricd_hguBBCAsulfERAT4e-KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c0:4c:7a:79:ba:80:13:76:a2:02:16:ee:e7:3a:c4:5f:34:
dd:f7:33:59:86:63:fd:47:e4:a5:c2:94:a6:42:1b:8e:53:f3:
23:95:bd:f1:b3:6d:5f:b4:00:df:45:50:73:a0:3f:d5:01:42:
40:29:2f:a7:c9:5b:1e:6c:f9:e0:94:d4:81:7e:6f:2a:fb:68:
2b:a0:e7:13:5c:31:8b:6a:4e:1c:e6:0d:aa:23:67:7d:70:61:
4e:d8:1a:33:b4:72:ad:a1:a3:f0:c2:a6:a2:c6:fc:62:e1:52:
5a:9c:29:fd:b7:b7:0b:37:b8:79:c3:86:5b:bc:16:84:5f:7e:
82:da:14:0c:7c:a7:b2:7e:2c:b3:8a:3e:55:99:3c:d8:90:b3:
9d:87:28:ce:a9:e0:43:6e:59:93:62:bf:61:99:e8:b8:63:0e:
91:a3:a4:ba:47:0e:7d:e9:6c:9c:a0:b9:86:38:9c:05:6f:4b:
5f:cd:01:da:ce:fb:d3:e0:c5:5d:f5:59:8f:c0:43:99:6f:fe:
0d:7a:d6:89:53:8e:bd:93:11:d5:23:1d:20:a4:e6:55:01:b5:
eb:dc:cb:7f:3e:f7:4d:cc:ba:08:22:ae:3a:8e:3f:ca:2a:10:
91:31:03:54:f1:87:ce:9e:61:c7:6c:05:02:df:cf:a0:6a:b0:
5a:56:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:25:16 2025 by rpki-client