Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ks5UUx1lBCPJH18urhUvFQpi4ZY.roa
File: Ks5UUx1lBCPJH18urhUvFQpi4ZY.roa (raw, json)
Hash identifier: 4SU50z/QHHdZRNQRidrI1bOzcEHPvWmGh0xdGHFctuQ=
Subject key identifier: 2A:CE:54:53:1D:65:04:23:C9:1F:5F:2E:AE:15:2F:15:0A:62:E1:96
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E39F234D4834EB93B896D3CABA15
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ks5UUx1lBCPJH18urhUvFQpi4ZY.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207
IP address blocks: 149.126.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e3:9f:23:4d:48:34:eb:93:b8:96:d3:ca:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ace54531d650423c91f5f2eae152f150a62e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:12:14:3e:4b:d7:a9:bd:ac:23:34:59:8a:
36:61:55:0c:19:a4:4f:49:45:3f:b6:57:e2:21:32:
30:67:b2:ac:25:82:41:2a:e6:f8:03:29:69:0f:69:
75:b7:cb:92:09:48:8d:d5:80:15:ce:05:37:cf:82:
39:88:98:bd:2c:ee:ec:a1:63:bc:47:d5:7b:1e:e2:
fe:13:b0:8c:86:e7:ab:69:ef:f4:80:e0:80:e8:02:
63:6f:18:bb:79:f3:2a:56:7c:c6:d3:54:3e:39:25:
20:6e:ee:a8:64:18:e1:fd:a6:f4:8e:6c:ee:6a:e1:
6d:67:b5:97:9c:46:6b:92:1c:36:da:e9:82:44:b8:
89:54:86:89:47:a5:81:22:d3:32:e0:19:e8:29:cf:
f3:6b:52:37:55:d0:e0:00:27:8e:2f:22:9b:c2:77:
38:d5:51:4c:76:f4:51:2d:63:d2:04:72:66:91:72:
a4:a9:76:15:d6:b6:a7:d5:ed:f6:e7:28:e4:b2:c6:
2e:04:e6:7d:b9:87:4d:f1:9c:35:fd:1a:ae:ae:d3:
fd:9d:c2:0a:04:98:4a:11:62:d2:8e:71:9a:33:89:
01:63:54:66:2a:70:3e:fd:9e:4b:37:ba:03:a4:b5:
cd:c8:96:85:d8:f3:86:55:61:96:9d:29:3a:24:ae:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:54:53:1D:65:04:23:C9:1F:5F:2E:AE:15:2F:15:0A:62:E1:96
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ks5UUx1lBCPJH18urhUvFQpi4ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.240.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4c:dd:51:ff:c3:0d:a5:de:b8:18:b7:75:60:71:65:25:43:
74:c5:29:fb:dd:20:52:d3:e0:a1:c1:ca:4a:a5:f7:d8:e2:3a:
1e:87:fb:2d:80:39:50:dc:6b:56:55:27:2d:86:11:4b:08:86:
e6:8d:25:f6:da:1a:8a:e8:63:80:7d:a0:9d:77:67:81:fc:8c:
80:e0:8c:d0:37:b1:1b:de:84:a1:85:0e:0f:3e:da:08:0d:3a:
1b:62:41:7a:3d:88:d5:92:f8:29:89:98:01:5f:7e:97:a4:b7:
e1:c7:29:9e:3d:5c:40:5d:6d:02:c7:b9:d3:9d:aa:c5:51:0e:
b9:e0:e8:9a:e3:a9:68:35:ea:03:a1:a8:f7:75:45:1f:3f:5b:
94:f8:49:7f:68:42:e7:84:c7:ae:d7:51:0d:7b:09:90:01:58:
37:70:2b:e8:b0:cb:26:da:10:cb:1a:28:94:fa:07:81:f6:29:
55:35:3b:c1:e8:e9:9a:25:ef:32:42:4a:5a:88:34:66:a8:6c:
a4:60:2c:8c:18:d8:9e:a1:a8:45:10:41:e7:d8:cf:2e:28:3f:
0b:7c:56:f4:8c:e8:b3:99:43:0e:e4:f3:b6:cc:9d:ed:eb:6e:
67:80:35:02:10:3a:c8:96:c4:51:64:3f:f2:05:2d:25:9a:70:
1f:e5:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:31 2025 by rpki-client