Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa
File: jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa (raw, json)
Hash identifier: CIN0Yhj4MQrkUgKXcPNi03Gv1QWAOMr6+p6QpjP/y4A=
Subject key identifier: 8C:B0:C4:9E:B9:D5:5F:1F:DA:D4:FE:16:21:7F:AB:3B:D3:EF:C7:7C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0196A9615616E05195B8AEB9A5484D373FB5
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa
Signing time: Wed 07 May 2025 06:14:10 +0000
ROA not before: Wed 07 May 2025 06:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 81.29.148.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:61:56:16:e0:51:95:b8:ae:b9:a5:48:4d:37:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 7 06:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb0c49eb9d55f1fdad4fe16217fab3bd3efc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:d6:0c:89:24:ed:f0:26:a7:fc:75:31:c2:
51:53:a2:4b:19:b6:ff:87:20:54:ec:ad:6a:57:48:
bf:66:29:3a:d6:40:8b:35:5a:0f:28:ec:75:72:ca:
47:62:67:50:a0:a3:70:94:ef:26:3b:1e:87:d3:e1:
12:75:27:f1:8c:f9:77:b8:74:c2:75:64:0f:47:e2:
44:52:0d:36:62:46:9f:3f:13:53:d3:6a:c9:25:19:
ff:c7:1c:d7:03:fb:c2:5c:d1:5d:85:fa:09:93:9d:
fc:33:7f:57:72:27:73:81:4b:2e:6b:b9:39:36:1c:
5b:fa:f3:c9:2c:71:c9:4c:af:1b:dc:71:87:9d:a6:
b8:bc:40:37:48:b0:83:1d:6f:ec:02:09:c7:46:65:
5f:69:cf:cc:d1:05:61:d6:30:86:cb:f6:71:ab:44:
a2:6f:fc:ee:1b:55:63:fa:d0:1f:79:9d:f2:87:58:
8b:c7:d5:97:17:fd:24:81:dd:26:5d:73:d1:61:54:
e7:d7:d0:76:1e:bd:aa:96:5f:c1:7f:e0:b9:47:16:
49:a9:3b:34:2a:6b:f0:34:39:54:ce:bf:bb:09:63:
a5:30:9a:3d:62:e8:e8:94:9b:e9:6c:0a:72:86:30:
3e:0e:ff:5e:67:31:31:6b:32:9b:7f:5a:8d:8c:47:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:C4:9E:B9:D5:5F:1F:DA:D4:FE:16:21:7F:AB:3B:D3:EF:C7:7C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
81.29.153.0/24
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1d:fd:89:a0:4f:7d:40:b3:25:7b:93:53:40:45:42:ff:07:
9c:cc:81:75:37:2a:56:47:1a:82:5f:e3:18:d1:f4:f3:8d:87:
a1:80:ee:10:a3:7a:6a:24:bd:ba:b1:d3:c8:b3:45:17:f7:ca:
0d:4d:b3:eb:50:e2:5d:7d:67:e1:38:06:90:74:05:33:b8:fc:
fa:24:18:e2:a4:df:69:49:19:cb:7f:e0:38:47:62:b4:b0:78:
d1:5d:c7:80:c6:08:72:92:33:1d:7d:1e:53:df:db:3d:a4:3c:
30:3c:88:ba:69:c0:85:c5:cb:98:fb:e2:cc:1d:75:2e:c6:95:
11:b0:ce:ff:db:f0:d1:e4:a1:ab:a6:67:de:a5:ab:27:c0:f0:
24:b2:1a:04:06:ad:ee:5e:c5:ee:db:f9:2d:1e:2d:84:d8:b5:
2c:37:51:ed:2f:08:35:2e:da:09:3d:0b:10:da:73:37:a1:df:
83:e1:ad:6b:13:61:70:e4:6e:b3:de:d2:9e:81:89:97:f4:3f:
2d:59:c8:ca:24:cf:d8:c1:56:d8:15:58:90:89:52:47:f7:a7:
20:2f:ce:82:46:65:5a:97:8b:b7:3e:fc:35:67:15:fa:a8:a2:
4c:d2:98:3d:8b:a1:e7:7a:ea:da:34:e1:c4:b2:65:ba:6d:0e:
b4:b8:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:07:39 2025 by rpki-client