Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/eNulQrWkb7XXGYDw1_7yfQtfyjU.roa
File: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (raw, json)
Hash identifier: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=
Subject key identifier: 78:DB:A5:42:B5:A4:6F:B5:D7:19:80:F0:D7:FE:F2:7D:0B:5F:CA:35
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019421B202C59BEC8AEA7995C5ABB484A904
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/eNulQrWkb7XXGYDw1_7yfQtfyjU.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5538
IP address blocks: 5.152.224.0/21 maxlen: 21
85.254.192.0/18 maxlen: 18
92.240.64.0/19 maxlen: 19
185.23.160.0/22 maxlen: 22
194.8.1.0/24 maxlen: 24
2a02:500::/29 maxlen: 29
2a02:500::/32 maxlen: 32
2a02:500:4000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:02:c5:9b:ec:8a:ea:79:95:c5:ab:b4:84:a9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78dba542b5a46fb5d71980f0d7fef27d0b5fca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:d4:72:00:b6:63:88:a5:b6:86:80:31:2c:
24:cb:d1:9f:ee:4b:36:1e:0b:89:8e:0b:96:bb:c5:
ce:b6:f2:b8:af:24:36:66:e2:68:e7:d2:3d:da:a2:
df:66:d9:00:de:33:e8:92:95:3a:50:68:06:5c:8b:
70:7f:e1:e2:f0:0c:8e:f1:90:dd:fe:86:5c:37:47:
fd:44:60:1d:5c:68:84:da:da:05:f9:43:b0:ee:b0:
70:b2:7e:68:8c:ca:0a:c8:67:bd:f5:62:0f:89:b5:
93:c4:f5:18:88:8b:88:a2:16:b4:10:00:2c:f4:d8:
32:57:c9:f7:6f:c0:3a:0f:1d:32:fd:18:c3:2d:13:
2c:45:8c:6e:37:21:34:00:71:8f:2d:44:1c:d8:d2:
a1:eb:88:80:b0:1f:09:03:3f:88:34:04:85:4f:1d:
7b:32:aa:0c:67:8f:d7:41:68:ac:52:40:0f:0e:c4:
fb:a7:d6:d2:d0:3d:ac:c4:c8:6c:29:0c:ad:12:b2:
0c:cd:40:a3:d4:e3:0c:0c:1f:03:96:94:ab:c2:78:
a5:20:cf:dd:fb:0c:69:7b:14:a1:74:9c:0e:a5:b8:
7f:3e:b0:5f:84:0f:8e:23:9f:06:cc:1a:45:3e:50:
ea:b1:f4:24:a0:a5:66:3a:73:94:cf:13:be:58:d0:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:A5:42:B5:A4:6F:B5:D7:19:80:F0:D7:FE:F2:7D:0B:5F:CA:35
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/eNulQrWkb7XXGYDw1_7yfQtfyjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.224.0/21
85.254.192.0/18
92.240.64.0/19
185.23.160.0/22
194.8.1.0/24
IPv6:
2a02:500::/29
Signature Algorithm: sha256WithRSAEncryption
44:b8:10:fa:ab:78:fb:cc:e0:a8:b8:82:f2:4f:98:43:34:08:
fc:a1:12:e8:cd:24:5b:a8:ae:a4:e9:37:23:7f:8f:94:55:51:
3c:b7:6d:76:52:67:d8:eb:39:19:21:5e:42:1d:f6:ab:df:9e:
4f:7f:a9:8d:6f:a7:92:26:fa:d7:76:3d:60:4f:01:0d:56:83:
86:f5:1d:59:be:87:6a:a2:25:db:cd:0b:e2:0b:25:b6:eb:6f:
7e:95:d5:5a:e9:b5:0f:67:db:29:6d:f3:1b:2b:e9:dd:1d:19:
d0:e6:b1:df:d9:41:44:d5:78:80:92:63:3d:73:27:2b:89:1a:
52:b5:40:3c:5f:a3:be:b9:40:9b:8d:01:02:44:22:2c:61:22:
ff:88:57:33:10:8b:d8:5a:0b:93:b6:b0:e4:27:bf:4d:8c:da:
57:93:71:47:b5:dc:ad:56:f0:86:cd:61:e7:8a:a5:65:8d:93:
df:18:6b:7c:a2:93:33:17:45:40:ea:c3:96:66:77:67:fd:8c:
59:41:20:5e:c3:40:b8:ed:84:13:04:55:47:f1:e3:66:7c:39:
12:0b:24:87:5d:12:ee:1d:5c:18:85:4d:74:8a:f5:c1:da:9c:
0f:b4:21:ac:72:95:25:db:b4:e7:39:5a:33:72:4e:bb:af:5e:
89:47:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:50 2025 by rpki-client