Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/5o12bWwrOgNj5T2QC_xsDzw2auo.roa
File: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (raw, json)
Hash identifier: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=
Subject key identifier: E6:8D:76:6D:6C:2B:3A:03:63:E5:3D:90:0B:FC:6C:0F:3C:36:6A:EA
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 019426D9A5A5A48E41C293DD5C2439B1359C
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/5o12bWwrOgNj5T2QC_xsDzw2auo.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200311
IP address blocks: 194.60.212.0/24 maxlen: 24
194.60.213.0/24 maxlen: 24
194.60.214.0/24 maxlen: 24
194.60.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a5:a5:a4:8e:41:c2:93:dd:5c:24:39:b1:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e68d766d6c2b3a0363e53d900bfc6c0f3c366aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:a8:d6:8e:33:e5:c7:d4:4e:6d:89:c9:0b:
e8:a8:35:7f:95:b3:3d:da:11:e0:e9:88:73:ee:f5:
d9:86:73:a7:6b:99:d3:2b:e6:b1:19:52:d5:b9:a2:
5c:5c:5c:af:12:f6:a7:fb:89:9d:af:84:2b:ed:de:
58:63:7c:e9:ad:d2:3d:90:49:f7:78:f5:80:6c:aa:
72:a7:22:14:d2:1e:9b:5d:64:05:de:7b:be:88:52:
37:e2:40:e5:d3:59:de:6c:41:97:6c:5c:63:0c:ff:
91:3f:ff:0f:a0:a2:9d:c0:94:38:d6:31:f1:f5:d2:
af:2e:e1:17:8d:df:13:f9:c1:9e:90:41:6d:88:07:
af:aa:0c:ed:e9:05:b4:d3:5f:77:46:29:e8:a6:af:
5b:ef:06:88:5f:05:2e:1d:05:f5:d4:f7:03:f4:23:
ed:b6:05:e9:b1:9b:d6:bc:52:04:78:c6:37:fc:9b:
f3:df:80:0e:ca:ef:e8:ea:62:a7:be:f8:fe:3c:e6:
d3:b7:63:77:f9:7b:dd:c8:85:5d:0c:0e:99:da:93:
e6:df:8d:c9:d6:6f:90:cd:a2:f7:eb:05:af:5f:5a:
0d:5d:52:32:c7:d9:c5:c0:16:b6:b2:9a:f5:a5:1b:
f6:2c:ec:59:a4:ff:b1:cb:cc:36:8c:c7:bb:1e:45:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:76:6D:6C:2B:3A:03:63:E5:3D:90:0B:FC:6C:0F:3C:36:6A:EA
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/5o12bWwrOgNj5T2QC_xsDzw2auo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ab:e6:66:f0:5e:9e:bd:99:6b:f9:3d:bf:b7:3d:76:87:a2:
56:bb:62:32:0a:bb:b1:9d:b3:05:02:67:d7:86:33:20:2c:3d:
99:0e:ee:f2:51:46:aa:bf:8e:cd:7b:ff:61:8d:66:0a:21:80:
94:7b:be:7c:10:ed:eb:a3:6c:03:c6:79:27:aa:cb:bd:2e:60:
a8:0f:c5:68:da:17:7a:ba:49:34:e8:31:9d:fd:18:5d:6b:d8:
55:96:2e:4f:04:6d:44:31:2d:83:4a:51:21:d4:6b:5f:cd:3e:
a4:cc:8e:a0:8c:e9:34:1e:c9:7d:13:49:97:f7:a0:ff:d7:46:
20:c7:79:ef:f9:9e:99:c7:df:7f:7e:90:f6:03:6d:c9:3f:00:
6b:20:61:db:7f:33:09:e6:5b:bc:5c:58:fc:db:aa:38:fc:8f:
dc:5c:df:a1:a4:b8:cc:45:5b:41:e7:16:07:76:2c:8c:34:05:
f4:cb:8b:59:8e:66:f2:da:91:02:10:b7:d2:08:cc:de:c2:d1:
7a:b7:a0:9e:12:f6:75:bd:91:bc:4b:c6:0a:15:7a:99:e7:9d:
37:24:55:51:9c:59:22:ec:9a:5f:3b:b5:07:94:e2:26:4c:fb:
a5:8e:9f:7e:b5:27:e1:7e:7a:1b:a0:c1:8e:a1:6d:bb:a5:ce:
fc:fd:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:06 2025 by rpki-client