Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/DsE5_TUYYo0BXf2JDy40SB8tAVY.roa
File: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (raw, json)
Hash identifier: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=
Subject key identifier: 0E:C1:39:FD:35:18:62:8D:01:5D:FD:89:0F:2E:34:48:1F:2D:01:56
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019427B4A635469D2BF6BFEF87AFA1BDFA11
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/DsE5_TUYYo0BXf2JDy40SB8tAVY.roa
Signing time: Thu 02 Jan 2025 15:48:57 +0000
ROA not before: Thu 02 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44887
IP address blocks: 185.46.165.0/24 maxlen: 24
2a14:3e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a6:35:46:9d:2b:f6:bf:ef:87:af:a1:bd:fa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jan 2 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ec139fd3518628d015dfd890f2e34481f2d0156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:1c:65:45:10:89:fb:7e:fc:6b:06:07:a9:
89:e7:79:aa:52:ce:1d:96:4c:f6:1a:7b:ae:01:aa:
40:1a:e1:ce:c9:7b:a0:22:99:f7:d1:c4:27:0e:d3:
a8:02:1b:cd:b7:a9:4b:a5:51:4f:00:b3:ef:12:54:
db:fd:ae:68:ad:cc:16:fc:d7:a6:c7:19:25:d2:4d:
f2:8c:87:d7:89:bd:69:97:b9:bd:68:e5:6e:87:8f:
89:2b:c4:01:1b:56:70:2e:20:1e:42:65:29:58:d0:
a4:51:ae:72:20:65:c7:59:18:83:62:25:24:35:c3:
7a:2f:8d:8d:8e:d1:7d:3e:a3:30:d4:e2:fd:5b:05:
83:a6:d7:e6:46:ae:49:f6:50:c8:34:c1:9e:f5:e5:
a3:e0:0d:8b:68:75:8a:b5:d2:26:ec:1e:1c:77:1a:
81:2e:1f:ab:96:cc:15:94:e2:66:74:23:36:ce:43:
83:23:3b:1a:2c:75:64:75:84:e5:4d:72:6d:29:1e:
27:02:d5:98:c1:3b:86:57:e2:72:37:1b:75:79:aa:
14:55:d9:93:a6:cf:40:5e:17:7f:c3:a4:1a:20:ab:
f1:11:10:de:57:56:23:3a:ea:a1:2b:84:e9:79:40:
cb:c9:ab:0b:b1:fe:27:1c:36:40:c3:42:47:4f:df:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:39:FD:35:18:62:8D:01:5D:FD:89:0F:2E:34:48:1F:2D:01:56
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/DsE5_TUYYo0BXf2JDy40SB8tAVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.165.0/24
IPv6:
2a14:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
99:6f:30:4c:be:f6:28:d3:83:7d:f0:93:50:6c:6f:a7:9f:6a:
a4:3b:32:bc:78:8a:94:c8:07:08:da:87:6e:04:4b:eb:9e:42:
17:f5:9a:16:c6:ca:42:4d:66:a4:01:c5:30:70:52:2f:42:a1:
2f:2c:d7:e3:b6:a1:ab:91:93:a3:52:dc:ce:d3:f7:e7:68:23:
cc:ea:84:fe:8c:d8:51:29:83:90:c6:fc:e6:69:1c:fc:8d:18:
4c:2b:cc:af:b9:e0:f0:39:4c:dc:53:a9:30:8d:1e:0e:2d:0f:
cd:6b:09:c8:b5:d7:20:5b:ab:c3:32:8d:e1:2b:04:f1:92:4d:
c0:d8:c9:2b:62:66:1a:2a:24:c1:f3:44:bb:92:78:b0:66:1c:
7d:ff:90:8e:06:57:20:72:7d:d8:db:f7:37:e0:74:6a:fa:26:
20:6e:05:16:d2:60:11:01:fe:5c:26:cc:3c:04:8b:5b:21:8e:
df:b9:fe:1c:81:3e:2e:a2:dd:56:78:dc:5a:b3:f6:5f:b5:a9:
60:e2:c4:a3:cc:14:aa:23:23:f4:8e:f3:07:eb:b3:f6:25:b3:
ab:5f:8b:2f:9c:a7:ba:8e:50:b7:56:c9:bc:1a:9e:8c:f3:7e:
0b:cc:46:d0:70:c4:14:22:74:f0:ee:4a:fe:86:10:5c:dd:4a:
3f:ff:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:48 2025 by rpki-client