Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jugdXM50p84S508xVnjdWqlj1es.roa
File: jugdXM50p84S508xVnjdWqlj1es.roa (raw, json)
Hash identifier: Q0qyJpXVGFh9bCDmBScB3eycR9QiedIjxHWP9H+ZuBs=
Subject key identifier: 8E:E8:1D:5C:CE:74:A7:CE:12:E7:4F:31:56:78:DD:5A:A9:63:D5:EB
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01964A7E8F78A0DB0D4E1A146BAF7044113B
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jugdXM50p84S508xVnjdWqlj1es.roa
Signing time: Fri 18 Apr 2025 20:02:10 +0000
ROA not before: Fri 18 Apr 2025 20:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7015
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
31.132.53.0/24 maxlen: 24
36.255.213.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
103.130.178.0/24 maxlen: 24
103.210.12.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7e:8f:78:a0:db:0d:4e:1a:14:6b:af:70:44:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Apr 18 20:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee81d5cce74a7ce12e74f315678dd5aa963d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:25:fd:3f:8f:ee:d8:fb:4a:e0:68:90:28:
63:2b:c2:fe:1d:d0:ea:36:50:78:97:a6:be:52:9c:
aa:8f:8b:87:84:5a:5e:75:1e:8d:1b:b9:2b:c0:1a:
20:a1:a1:c2:3a:c5:9d:06:ee:3e:48:58:a2:9a:37:
84:23:24:2b:b1:0b:cb:30:c6:36:06:2f:4b:3a:82:
5f:3f:73:2a:bc:da:f6:d4:68:ac:ac:94:94:2f:3a:
94:b1:06:95:9c:1f:bc:df:21:84:81:b8:6d:81:ab:
43:6e:e2:f5:04:8b:2b:a1:90:48:d3:53:0b:59:69:
5b:d6:57:bd:6f:4c:6f:fb:39:cc:99:72:d0:1a:23:
cd:6d:a0:fb:f1:b7:89:ec:a7:89:b6:02:2f:78:da:
d1:5e:f6:4d:6b:f8:64:9b:da:8b:0a:b0:93:da:2c:
20:46:82:99:43:0a:fd:28:fa:04:6a:fd:44:99:ab:
3f:0a:3a:0a:91:dd:a1:ea:05:f7:3b:a7:a4:be:04:
50:21:6c:7f:38:23:03:61:7c:1e:6a:f1:0d:7c:0d:
c3:a0:5c:51:5e:c0:1c:4d:9f:09:6b:e1:6a:19:30:
95:03:e4:25:f9:fb:1f:d7:d4:e1:c2:0f:84:02:32:
ee:43:97:fa:f1:3c:2f:57:af:ab:44:e3:14:d3:22:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:1D:5C:CE:74:A7:CE:12:E7:4F:31:56:78:DD:5A:A9:63:D5:EB
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jugdXM50p84S508xVnjdWqlj1es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/23
36.255.213.0/24
45.248.52.0/24
92.249.31.0/24
103.130.178.0/24
103.210.12.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
185.187.212.0/24
185.205.205.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a3:96:08:f8:e9:bd:68:57:9d:4f:4c:6d:10:f7:f4:08:ed:
82:dc:d9:59:18:ab:3c:f5:5a:19:9a:55:4b:99:9b:3d:38:f7:
40:74:22:92:e8:9a:99:77:3f:50:ed:9a:fb:4f:dd:00:df:21:
80:8f:61:88:c1:f1:c5:a1:3e:10:13:09:54:41:cf:df:32:df:
2b:57:f3:52:66:92:d9:65:e8:78:08:21:f7:82:a9:ea:6b:f7:
54:31:1b:51:b7:ac:24:06:7d:0f:7e:80:af:15:45:4a:d7:60:
a6:81:7e:9a:6c:c4:c0:9e:ec:72:dc:e0:13:99:28:ce:f7:94:
02:79:db:80:3e:c8:b1:0f:9a:d9:4a:a7:61:6b:87:2a:49:93:
6f:ef:af:c5:63:c2:86:74:b9:4b:aa:e8:27:71:8e:f4:28:23:
f9:6f:e8:92:80:00:67:1b:e8:97:f7:02:0c:03:db:e9:ac:a4:
3f:6e:d5:7a:2b:83:2c:c9:55:0c:20:12:64:50:ca:29:89:23:
05:90:bc:60:76:27:23:cf:c5:b6:6f:12:86:e2:82:ea:87:5f:
e8:6f:95:31:a6:22:8f:71:79:b1:6f:1d:35:20:c2:96:7e:61:
26:54:89:fb:99:9d:73:b4:d9:e4:d6:fe:d8:22:00:29:b5:f6:
8b:8f:66:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:31 2025 by rpki-client