Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa
File: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (raw, json)
Hash identifier: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=
Subject key identifier: B6:EE:57:60:7E:9B:ED:A5:24:E1:0C:0B:4F:1F:11:96:B3:7C:A5:D0
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019423695EEF67DE93E1E8FA54A54EC35D73
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa
Signing time: Wed 01 Jan 2025 19:48:15 +0000
ROA not before: Wed 01 Jan 2025 19:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209044
IP address blocks: 5.183.48.0/22 maxlen: 22
185.254.1.0/24 maxlen: 24
2a0e:d200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:5e:ef:67:de:93:e1:e8:fa:54:a5:4e:c3:5d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jan 1 19:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ee57607e9beda524e10c0b4f1f1196b37ca5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:48:18:98:44:98:82:8b:3c:0b:0a:6e:5f:
81:cf:ca:d1:de:39:bf:53:f6:d2:0e:f8:a0:7f:ba:
f8:61:fa:f1:44:7c:50:8f:d5:5a:96:c7:84:47:16:
f7:c9:ff:47:45:9d:95:8d:86:f4:c2:ff:86:75:eb:
de:3c:b9:cb:cb:2a:8e:ed:db:87:4a:cc:8c:37:13:
9a:d7:d6:cb:75:a4:01:ab:4e:af:ee:da:9a:f2:fa:
14:8c:b6:80:af:f2:ea:e8:99:09:e2:ba:bf:dd:69:
a7:59:01:bf:63:d5:18:6c:5a:3b:30:a8:95:9d:f3:
f4:ff:4a:e9:fe:9f:17:c0:ec:50:0e:20:b1:25:56:
9a:cf:16:cb:5e:0e:46:03:5e:53:e2:d2:7e:23:12:
5c:0d:e2:f3:93:94:c6:b6:46:ab:b1:4f:2d:96:70:
ee:e5:dc:ef:d7:30:4b:ab:88:06:16:8a:a5:d1:ac:
19:a2:d2:96:b1:4d:c0:c5:18:a9:18:c1:8c:49:b5:
73:59:bb:ba:8a:4e:17:22:15:7b:ff:1b:9e:1d:bd:
15:6f:7d:4e:58:35:99:d6:86:f1:1b:81:1b:9e:b4:
e4:35:70:8b:4f:4e:82:59:6f:92:d6:62:bf:4a:64:
18:71:1a:7b:20:70:1a:25:3f:56:f8:0a:77:16:1f:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:57:60:7E:9B:ED:A5:24:E1:0C:0B:4F:1F:11:96:B3:7C:A5:D0
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.48.0/22
185.254.1.0/24
IPv6:
2a0e:d200::/29
Signature Algorithm: sha256WithRSAEncryption
95:21:a4:85:54:88:17:6e:1f:25:5e:e7:6a:b2:9d:d0:80:40:
35:f2:87:37:70:e5:24:fb:51:68:ab:62:2e:be:66:41:a2:fd:
79:eb:fb:7d:04:26:30:b5:a5:d9:d5:a6:59:93:88:8b:f6:78:
4a:b9:f5:ec:da:e8:5c:e1:de:f5:95:43:93:45:ce:8f:b1:58:
65:a1:b3:6f:13:ca:24:69:2e:51:b8:ba:b9:33:bf:bc:52:d6:
30:cd:59:59:c1:65:e5:7a:5b:d7:29:b4:72:79:df:23:ca:7a:
30:f3:74:a9:16:78:af:4c:d1:8d:47:b5:9e:a2:da:98:c8:13:
bd:c1:09:86:7a:a3:df:1e:a5:f2:dd:c4:74:bc:2c:3f:05:71:
1f:22:93:fa:f9:77:80:a0:57:04:3c:23:b3:69:ab:ff:ea:12:
30:2b:5d:35:57:7c:ec:76:20:f3:be:97:58:69:32:5d:bf:89:
2e:ad:5d:d9:23:ef:15:76:c0:da:b2:2f:ae:af:a8:e1:ef:92:
94:c1:0b:3f:fa:e5:e5:82:41:b3:d0:bf:8e:58:85:99:d1:e1:
01:da:dd:e9:1f:01:be:bb:91:02:bd:ef:86:52:2d:ab:20:00:
6b:90:3e:4f:87:48:4b:0b:1f:bd:97:2d:f0:f9:03:63:7c:69:
ab:15:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:58 2025 by rpki-client