Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/tefknhYDoQEH6xf3Wtp0-h0Eei8.roa
File: tefknhYDoQEH6xf3Wtp0-h0Eei8.roa (raw, json)
Hash identifier: c5BL31ZjZxsInqWGoha11/Aoi/PbLc7z2sBihYaGiTw=
Subject key identifier: B5:E7:E4:9E:16:03:A1:01:07:EB:17:F7:5A:DA:74:FA:1D:04:7A:2F
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 01942369A4514342CB002A95859C86FEDCB9
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/tefknhYDoQEH6xf3Wtp0-h0Eei8.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214555
IP address blocks: 212.56.56.0/24 maxlen: 24
2a14:7640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a4:51:43:42:cb:00:2a:95:85:9c:86:fe:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e7e49e1603a10107eb17f75ada74fa1d047a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:0d:35:b8:03:ae:d0:4c:29:35:05:52:24:
59:d4:31:d1:5a:2a:1e:45:2b:c0:96:98:31:05:b4:
93:89:58:e4:d4:c4:ed:ac:89:df:a1:34:da:2e:f9:
27:91:ca:b4:8b:d8:fc:1c:73:4b:83:d8:27:e3:cc:
8b:29:77:58:e7:80:cc:9f:19:d4:d2:84:86:85:64:
a5:6a:fb:70:b2:6a:d3:52:03:7e:12:a1:e6:7c:67:
80:91:1e:58:1a:3b:03:30:12:39:5f:d7:e2:a5:71:
33:2c:44:1a:0b:34:77:15:47:17:27:96:a7:4e:8d:
5a:6d:6a:d5:95:fe:38:aa:3a:67:97:5e:35:5e:94:
71:85:6e:61:48:fd:40:e9:bf:ca:6f:81:6d:9d:73:
5a:4f:0a:39:1f:c4:1f:4f:5d:29:a8:37:09:a4:e3:
06:fb:a1:6a:bd:8b:bb:5c:15:b8:52:95:b5:44:64:
05:de:10:51:62:4d:b8:ed:bc:f0:58:08:23:6d:b9:
66:c2:9a:da:77:90:2e:2b:d5:38:01:40:26:45:89:
7a:b3:a1:5f:f5:59:1c:7c:9f:fc:70:d6:33:7c:0d:
5b:1b:a5:5a:ba:c8:e6:ca:38:cf:8d:9a:e9:d0:91:
81:58:f6:a6:64:f1:48:a0:7f:32:fd:e5:2c:3b:12:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:E4:9E:16:03:A1:01:07:EB:17:F7:5A:DA:74:FA:1D:04:7A:2F
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/tefknhYDoQEH6xf3Wtp0-h0Eei8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.56.0/24
IPv6:
2a14:7640::/48
Signature Algorithm: sha256WithRSAEncryption
1d:88:6b:b6:cf:05:e0:a6:74:19:c4:b4:09:b7:96:c8:ee:e6:
a6:36:5c:d2:b9:ca:25:19:37:f4:01:2f:9e:b4:c6:85:15:6c:
7f:6d:b3:79:ee:06:60:bd:7b:dc:8e:a4:0d:f8:9a:eb:83:8b:
84:75:70:06:7e:7c:eb:cf:72:ec:b8:87:bf:08:25:49:c8:22:
9d:c1:94:ba:d2:83:07:05:48:1a:ac:74:47:45:9f:a0:bf:0a:
96:f5:8a:15:9b:28:18:35:12:b6:8b:98:6a:9e:ba:14:2a:f9:
ec:5b:31:82:7f:b8:05:e9:5d:99:fa:94:16:8c:ad:3f:a4:91:
f0:27:6d:e9:4f:69:9c:2b:0e:74:30:51:19:e1:9d:51:3d:9e:
c7:63:7b:f7:16:56:5b:48:b7:49:bd:02:93:ce:54:45:68:23:
74:6c:60:7f:16:0f:31:39:b9:b6:bc:88:f2:df:38:a7:cf:eb:
cc:3f:72:cd:78:dc:d5:9a:c5:e5:b5:53:ac:f9:81:71:04:19:
74:1d:c3:97:29:5b:72:e8:7b:8a:1b:d3:5e:f6:4b:12:19:96:
2c:58:62:a9:2c:24:9f:bf:cf:76:0d:0d:b6:15:08:b4:22:4a:
8c:15:28:2d:b8:0d:28:9a:dc:f0:1f:cc:e0:0f:7e:55:0e:bb:
9e:0a:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:07 2025 by rpki-client