Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/b3rpvlrUc4F3iSwCht-ScFiNdQU.roa
File: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (raw, json)
Hash identifier: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=
Subject key identifier: 6F:7A:E9:BE:5A:D4:73:81:77:89:2C:02:86:DF:92:70:58:8D:75:05
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019425FD5E11C7AC71815AD04F4C0FA17678
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/b3rpvlrUc4F3iSwCht-ScFiNdQU.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 5.56.34.0/24 maxlen: 24
5.56.35.0/24 maxlen: 24
2a01:47c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:11:c7:ac:71:81:5a:d0:4f:4c:0f:a1:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f7ae9be5ad4738177892c0286df9270588d7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:7b:e6:75:a3:96:88:29:00:0d:1c:44:f2:
1c:65:c8:c2:f4:38:72:f4:4c:5c:1e:99:60:91:dc:
69:8d:44:0c:c6:7b:c1:16:24:28:47:52:31:91:f1:
3a:50:ab:73:dd:32:1e:ff:d1:e5:29:08:7c:42:74:
c5:ba:2d:eb:27:f1:03:b4:8e:5e:71:84:fc:bf:ad:
f3:94:5f:13:a0:71:82:65:10:e3:4b:ba:0a:dd:96:
14:26:bc:4f:12:27:27:5d:41:72:c6:53:7d:e7:bd:
d5:26:5e:4a:de:62:9c:12:1e:47:d9:a2:be:71:c9:
17:20:a3:b7:4b:ae:7d:9e:76:14:f3:28:1a:a6:67:
c7:18:88:ae:f6:73:58:88:84:83:1f:a4:61:9d:3e:
68:fb:b0:54:92:2d:c2:ba:2f:83:4b:77:0c:14:82:
36:31:d9:c5:7a:13:b6:97:26:72:5e:b7:f3:bc:92:
a3:32:ed:6d:52:e2:20:a7:07:ba:b3:c6:27:19:c3:
20:7d:e2:39:e7:ce:82:67:12:57:77:85:23:03:f0:
44:f5:d1:3b:bd:b5:d2:a6:83:e3:67:5c:b8:2a:0a:
68:86:22:e0:6d:62:60:1c:02:4d:ea:39:42:fa:4d:
3f:06:ac:65:f4:fd:9d:26:a0:5c:28:e4:8e:05:28:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7A:E9:BE:5A:D4:73:81:77:89:2C:02:86:DF:92:70:58:8D:75:05
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/b3rpvlrUc4F3iSwCht-ScFiNdQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.34.0/23
IPv6:
2a01:47c2::/32
Signature Algorithm: sha256WithRSAEncryption
38:54:69:44:b9:0e:ae:43:be:93:78:44:75:93:61:0f:80:3b:
8b:6a:c3:63:5b:2b:9e:f4:fc:d3:c5:8c:c5:d9:2f:1e:8c:af:
97:2a:02:7a:8a:f8:bb:63:b6:1d:db:54:f9:ee:d6:91:5a:a5:
2c:97:a1:23:d5:d3:63:00:7b:57:12:c2:3f:3b:6d:90:55:2b:
b0:63:bd:a0:0f:fb:39:5c:57:91:01:9f:60:54:0a:ac:8d:45:
e3:dc:7f:74:f9:42:40:18:37:2a:dd:92:93:ea:1a:ca:da:b9:
88:ca:92:80:14:d0:5f:e4:4b:ed:21:3f:b0:e4:a1:38:e5:af:
98:ef:46:00:e8:76:d1:a6:21:25:17:51:81:d6:71:3c:53:0d:
d4:50:7e:77:fe:e0:d0:13:7a:17:f7:0f:68:a1:0e:35:5c:6d:
04:73:bc:40:d8:78:15:a0:8e:2a:d9:88:bc:96:27:d6:4d:12:
63:f0:8f:2e:a7:67:e5:62:be:38:9c:12:40:90:13:e9:2a:72:
f7:e8:ca:d2:d3:c9:e4:d0:af:05:90:bf:76:a4:2e:65:39:b0:
4d:30:a2:12:01:3f:0b:b9:1e:b7:88:ee:02:74:26:d5:78:01:
e4:4b:df:0d:6c:71:e3:6f:d5:98:26:33:b8:c4:3a:c5:d2:af:
05:b6:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:17 2025 by rpki-client