Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jigMLShUchKP9s1w9NTbP_vrmDs.roa
File: jigMLShUchKP9s1w9NTbP_vrmDs.roa (raw, json)
Hash identifier: 5T71q7HWp8Go3xvtXw6WtCiLuQVoVYW2/sG4CiRYPVE=
Subject key identifier: 8E:28:0C:2D:28:54:72:12:8F:F6:CD:70:F4:D4:DB:3F:FB:EB:98:3B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01973FDED67647A10E6889B1280FD9299156
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jigMLShUchKP9s1w9NTbP_vrmDs.roa
Signing time: Thu 05 Jun 2025 11:34:17 +0000
ROA not before: Thu 05 Jun 2025 11:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:de:d6:76:47:a1:0e:68:89:b1:28:0f:d9:29:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 5 11:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e280c2d285472128ff6cd70f4d4db3ffbeb983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:4f:2d:c9:15:f6:a3:09:9a:58:8f:28:6d:
c6:c8:80:51:ee:68:45:5a:be:4c:21:aa:00:88:23:
3c:45:1e:94:76:3c:b7:91:d5:96:7f:64:45:67:c8:
4a:08:96:83:74:cb:9b:7a:b4:fe:bd:82:48:ae:fb:
34:5b:16:fb:13:03:7b:89:c9:1d:42:41:24:89:be:
13:d8:1d:77:fd:e7:bd:58:25:7c:ec:37:d2:d6:5b:
ba:b7:5d:37:db:a1:f0:42:91:6a:cb:62:c9:62:0e:
d6:f8:ae:68:c4:c2:65:5e:cc:fc:ec:a3:53:43:ce:
6e:17:16:fc:7c:25:da:f8:59:04:f4:4d:9d:6d:a4:
10:ae:2b:f4:28:00:0a:60:17:c5:9a:a0:5d:7d:41:
c7:b6:68:f7:f5:cc:84:cc:de:22:d5:07:31:6d:e9:
86:d4:37:4f:9d:cf:93:f3:9d:67:82:83:d9:56:52:
19:f7:58:38:1b:8d:5f:cc:06:53:81:56:21:cf:f1:
3b:22:17:b6:74:ee:0a:97:a4:53:be:c7:0e:93:50:
c7:c2:24:08:69:d4:17:ac:c1:5c:ca:57:0a:52:28:
df:bc:8a:cd:b6:d7:1a:90:94:a4:8b:62:48:b1:ac:
03:2f:6a:60:e1:b9:84:a9:e5:fc:16:4d:89:8c:20:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:0C:2D:28:54:72:12:8F:F6:CD:70:F4:D4:DB:3F:FB:EB:98:3B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jigMLShUchKP9s1w9NTbP_vrmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:71:c0:a7:ce:d3:60:ac:a3:c4:ee:5c:9d:be:4c:be:99:d2:
3f:1d:d6:3c:f1:0b:71:a3:61:71:2b:d0:97:eb:6c:65:bb:7a:
a2:1e:7b:97:df:f8:9b:b1:9c:2f:20:99:5d:4a:11:6e:61:ff:
1a:51:59:f1:7b:3f:40:ac:b7:99:e1:f9:81:64:d5:7c:fc:f3:
26:e1:98:97:52:d1:2b:11:99:36:ba:a1:13:4e:de:cd:fa:a5:
c2:6b:3f:06:61:91:06:87:00:7d:b4:1e:7b:94:80:7d:3a:40:
5b:26:ef:14:fa:fb:7d:e8:77:5a:b7:0b:1d:70:a8:41:a0:51:
dc:16:cd:a1:31:ef:f9:af:a9:8e:e9:b8:cc:f4:19:94:0e:10:
2f:6f:dc:72:3c:e4:32:4e:d0:ce:88:fe:b6:8e:1a:a2:e2:f9:
a7:32:45:6c:89:37:a4:7b:e0:f9:a3:4f:e2:9f:a9:0e:ed:df:
db:91:aa:0a:a9:20:17:8b:c2:38:c1:f0:8f:74:ed:29:00:54:
7d:12:e8:38:11:b7:c7:77:b5:18:91:a5:26:c2:f8:b0:68:db:
30:f4:de:09:74:6a:19:44:03:c9:86:27:64:b8:5c:cc:5f:ba:
4c:39:11:10:5c:87:01:30:7d:9a:74:ed:12:0e:58:31:5f:84:
f8:9a:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:49:40 2025 by rpki-client