Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5eTCYDH0ETv4w6vQarz51ArJQRE.roa
File: 5eTCYDH0ETv4w6vQarz51ArJQRE.roa (raw, json)
Hash identifier: mWpBEuvcsAnKfOdqw5YQlt/s0ZaqhD4lMKaMMPVp1Tk=
Subject key identifier: E5:E4:C2:60:31:F4:11:3B:F8:C3:AB:D0:6A:BC:F9:D4:0A:C9:41:11
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441B2143DCE718C0782CB31B71B332
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5eTCYDH0ETv4w6vQarz51ArJQRE.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:e8c0::/29 maxlen: 29
2a11:ea80::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:1040::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9300::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:21:43:dc:e7:18:c0:78:2c:b3:1b:71:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e4c26031f4113bf8c3abd06abcf9d40ac94111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:bc:24:25:36:20:60:d9:e9:85:93:24:94:
d0:4b:1a:62:52:77:2b:c6:69:0b:02:49:b7:45:29:
da:34:1a:0b:9c:d9:5b:a1:61:89:55:1e:ee:d2:01:
23:d4:39:89:62:49:20:37:c3:60:7d:cb:47:da:e0:
7d:d3:ed:12:e3:fe:9b:e6:72:c9:67:21:49:16:a5:
d7:9e:87:a4:57:6f:50:0b:ca:cf:44:fd:da:7e:fd:
9b:8b:d8:b8:ee:cb:64:77:da:ed:5b:f3:c0:0b:91:
e2:d7:d4:91:30:99:22:c3:ef:b1:1a:54:16:b9:85:
ee:9a:0e:0f:73:a6:75:cf:a3:c3:d3:8b:a2:3f:62:
ca:cb:c7:49:70:77:e2:44:e7:0d:73:7f:71:0a:66:
66:63:1e:6f:ee:d9:3c:41:e9:b4:a0:fd:d8:a3:6d:
e3:a4:36:c0:26:54:22:d1:50:32:92:bd:5f:6b:21:
37:64:39:53:f6:a8:d9:bb:8a:e5:83:0e:a0:7e:fd:
1f:47:af:83:fd:87:3a:a1:4b:6f:e0:c7:bc:6a:1c:
34:da:d8:61:02:0d:e4:3c:a9:d7:a8:4b:ab:59:9b:
0f:25:f1:04:cb:9f:46:23:75:69:da:58:b2:66:c3:
a1:f6:12:ee:a9:77:4b:f7:6a:d8:b3:21:50:cd:6a:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:C2:60:31:F4:11:3B:F8:C3:AB:D0:6A:BC:F9:D4:0A:C9:41:11
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5eTCYDH0ETv4w6vQarz51ArJQRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e8c0::/29
2a11:ea80::/29
2a11:ff40::/29
2a12:1040::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8a00::/29
2a12:9300::/29
2a12:d080::/29
Signature Algorithm: sha256WithRSAEncryption
11:38:e3:dd:b7:9f:08:0d:91:53:24:f8:22:0f:44:e1:b2:8b:
3a:c4:36:18:fe:86:cf:10:e4:03:de:c9:62:99:24:8b:8a:86:
23:be:45:48:ea:30:de:cb:67:b0:10:d7:69:a9:89:25:47:b6:
95:ae:57:69:36:1c:36:f1:ef:a0:3f:23:4f:8f:d3:f2:ea:e5:
f6:d2:cb:24:1c:90:ba:c1:7e:c7:3e:ea:26:b1:3d:94:51:d6:
ed:4d:7b:dd:bf:d3:3d:63:d1:07:3c:65:db:d7:7f:35:11:d1:
97:0b:5d:81:32:4b:6a:ba:6f:f2:bf:e5:bc:ec:a3:24:37:2b:
6a:8a:21:0b:7f:62:38:73:5b:61:0b:b7:88:6b:9e:f3:69:7b:
d9:6e:6e:3a:55:c3:65:17:d1:a9:85:38:81:64:8f:f3:8a:5d:
8d:a7:76:82:62:29:89:e4:c2:6c:59:fd:b6:47:1b:53:b8:39:
ec:72:38:04:49:5d:85:99:9d:e4:4f:cc:3b:80:ff:ac:f0:15:
30:6f:fd:b2:c4:53:d3:06:3a:3f:a0:7e:8e:1c:a1:8b:fe:43:
3f:9f:fd:e6:a4:37:08:90:7a:29:2c:03:2f:7e:f7:4f:19:b8:
fd:11:d2:e2:c6:a4:92:db:2a:dc:c4:5e:d8:d4:0c:31:6d:60:
72:5f:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:11 2025 by rpki-client