Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/DlttiF7sTnpZBCWr79VnOWAb-Cw.roa
File: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (raw, json)
Hash identifier: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=
Subject key identifier: 0E:5B:6D:88:5E:EC:4E:7A:59:04:25:AB:EF:D5:67:39:60:1B:F8:2C
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D1C9B9CBE4F1961F45B7044FCE59
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/DlttiF7sTnpZBCWr79VnOWAb-Cw.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42585
IP address blocks: 194.213.126.0/23 maxlen: 24
213.249.64.0/21 maxlen: 24
213.249.92.0/22 maxlen: 24
2a01:448::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d1:c9:b9:cb:e4:f1:96:1f:45:b7:04:4f:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5b6d885eec4e7a590425abefd56739601bf82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:35:c9:30:7e:fc:16:f5:5b:60:cf:10:95:
4c:f6:88:b2:18:8e:b4:d6:74:6c:06:24:7b:8d:09:
ee:9a:7e:cb:68:5b:6d:c9:a9:8e:e0:51:01:70:a5:
b6:4a:b8:95:fb:e3:6a:9b:d8:f4:a9:33:0c:93:1d:
0a:7d:32:5d:0b:b4:44:1d:5f:29:13:a1:9e:6f:aa:
95:9c:a0:e3:8b:eb:b3:bd:8e:fd:db:a9:a6:7d:94:
64:00:20:a4:51:67:ec:1e:c7:c6:0b:94:77:92:6d:
18:96:f4:63:65:c4:d2:37:83:e3:49:6a:b5:1d:8b:
4f:bb:93:8a:45:72:c4:97:6a:e8:17:8d:e5:7f:00:
64:15:fd:51:97:ef:ca:68:86:65:45:1e:d4:e3:54:
71:de:de:00:37:37:b7:3d:8b:b4:32:ac:4c:f1:db:
a0:de:59:53:b9:39:7f:7b:f1:ab:62:14:ce:2d:4e:
b6:97:51:71:3b:42:db:87:f1:ca:cb:db:6e:a5:c4:
ee:45:dd:45:89:e4:37:a9:3c:41:b0:fa:8f:ae:75:
7b:a4:eb:e2:a8:f1:93:7d:bb:f5:72:56:fc:57:bc:
1f:43:a6:e4:14:6d:58:c0:b6:80:3a:fd:b7:20:75:
a1:de:59:36:62:81:64:9f:95:3d:22:a0:be:fe:f3:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:6D:88:5E:EC:4E:7A:59:04:25:AB:EF:D5:67:39:60:1B:F8:2C
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/DlttiF7sTnpZBCWr79VnOWAb-Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.126.0/23
213.249.64.0/21
213.249.92.0/22
IPv6:
2a01:448::/32
Signature Algorithm: sha256WithRSAEncryption
75:a7:f6:fd:72:21:1e:11:13:e4:91:a4:ed:a8:76:02:f9:8d:
ee:8b:7b:48:3a:b0:29:9a:87:3c:91:fe:58:af:83:37:5d:d5:
f5:d0:1a:69:b3:66:97:7c:44:95:91:df:d1:0a:8e:df:7a:d1:
5b:e1:82:16:96:18:fc:c2:12:0c:7d:2b:50:68:f1:44:d9:66:
6c:6f:fc:30:99:bd:f7:d0:55:bc:01:c0:bf:8d:3a:9e:87:c5:
e1:0b:f8:a8:d2:c1:cc:08:76:07:a7:84:b9:73:c9:eb:4c:5a:
ec:e4:3c:f7:1f:b1:3d:32:78:69:87:60:cc:53:6e:3a:fa:c1:
4a:9c:88:d1:be:71:88:57:ee:f4:7a:32:66:f9:55:bb:6f:b4:
6b:7b:4e:ad:38:fc:93:a9:8b:0b:f8:b4:9f:83:b5:41:8b:19:
b1:98:04:56:67:dc:7f:82:78:82:51:59:29:fe:eb:a6:12:90:
53:9f:2f:b8:2c:89:7b:0d:db:3c:4f:39:71:6c:96:39:55:bf:
d8:aa:bd:a5:05:65:2b:f8:00:70:e3:5b:fe:ce:33:31:12:a9:
fe:71:f1:72:02:b0:03:56:13:2c:88:3e:f5:f1:ae:ba:ec:37:
9e:f4:38:45:2d:e9:55:5e:f2:e8:09:25:32:ff:b7:c6:0b:2d:
02:9b:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:04:07 2025 by rpki-client