Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/a1BlZIKaFtEFXShwRMtJXEWXi4M.roa
File: a1BlZIKaFtEFXShwRMtJXEWXi4M.roa (raw, json)
Hash identifier: ERqfuGIzGK00GO92FhZ0NbE6+Ekdpbfy2+flZQSTXhs=
Subject key identifier: 6B:50:65:64:82:9A:16:D1:05:5D:28:70:44:CB:49:5C:45:97:8B:83
Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial: 019422FB0FFFBC1E21CF48DD8AD9C57C450C
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/a1BlZIKaFtEFXShwRMtJXEWXi4M.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20555
IP address blocks: 213.135.44.0/22 maxlen: 22
213.135.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0f:ff:bc:1e:21:cf:48:dd:8a:d9:c5:7c:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b506564829a16d1055d287044cb495c45978b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:5e:3c:cb:0c:96:6d:f4:b5:6d:91:ac:b7:
4e:c1:85:98:05:a9:bf:6e:ff:b7:1a:72:53:da:73:
20:0f:fd:06:02:82:c3:54:2e:aa:b8:9c:61:ab:67:
20:2b:6a:52:42:cc:90:a5:3d:b3:59:fb:be:41:2a:
5e:67:30:c0:d9:b2:7d:95:b0:9b:32:57:15:9b:1f:
15:04:13:b1:9c:fa:f7:a3:ad:8e:f3:1d:0b:1b:d6:
b8:9c:7a:5c:ff:a3:52:af:b6:91:2c:f4:f8:05:ad:
cf:15:cb:db:25:ea:3c:61:e2:7d:0d:c7:dc:d8:af:
f0:5e:fc:71:c3:ea:ab:3c:92:41:63:62:da:00:9d:
c6:2c:ab:b9:22:11:0e:f2:7c:d7:26:35:26:99:50:
e0:3a:3c:8f:95:a2:11:39:3c:bf:e3:1e:80:2b:d2:
78:c1:0c:eb:29:1d:8d:1c:12:5b:cd:9a:d0:6f:84:
04:b1:83:3f:b4:33:06:a1:b3:c6:28:d3:e4:4e:ba:
a2:ee:27:d7:e7:bb:c3:49:5d:52:25:ed:ea:82:40:
25:e6:35:a4:22:85:0f:28:d0:24:32:61:b6:f7:52:
8b:08:d2:70:e4:ce:1a:e9:51:9f:6c:dc:85:ea:fc:
13:60:c4:6c:72:71:80:3b:f6:17:38:76:aa:f9:ac:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:65:64:82:9A:16:D1:05:5D:28:70:44:CB:49:5C:45:97:8B:83
X509v3 Authority Key Identifier:
keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/a1BlZIKaFtEFXShwRMtJXEWXi4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.44.0-213.135.49.255
Signature Algorithm: sha256WithRSAEncryption
0d:c9:e9:7e:4a:77:3a:5b:4f:4b:cb:84:03:45:54:eb:e5:54:
90:26:cf:c4:d0:d6:b1:b3:f1:d6:dc:6b:4f:41:b5:8c:69:3d:
03:a0:09:9f:7c:5e:3c:d4:2e:da:e6:38:60:fd:6e:55:99:20:
e6:74:9b:a7:7f:3f:73:00:24:11:aa:38:bb:43:4f:18:87:40:
69:e4:61:6c:f2:ad:5f:ef:40:63:da:a5:da:89:1b:4c:28:86:
5a:f3:ab:a6:04:a2:87:31:41:3a:91:8c:76:4e:b4:d1:ad:f9:
58:56:ba:a6:92:87:66:c9:d9:f4:69:9f:5f:76:6a:19:c0:de:
42:b1:9f:c5:44:42:a7:80:c8:6e:af:ca:44:50:d3:60:f1:48:
ce:ce:fc:ac:9a:92:ac:a8:e2:7d:f4:45:e6:92:92:06:14:5b:
76:2e:e4:e2:80:b7:58:a7:1e:d6:12:34:e1:1b:be:ea:e0:98:
24:ad:62:fd:05:26:06:8b:cc:87:ed:f4:bd:e6:16:f3:48:e1:
83:42:0d:b7:d5:cf:8c:06:83:a5:4d:41:99:13:58:08:04:b7:
8c:ae:36:2b:db:a2:2d:33:bc:29:f6:99:db:a3:9f:f5:83:ec:
78:e4:6b:d7:18:0a:22:da:59:a3:f1:c9:ca:bb:fd:63:76:f8:
46:5f:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:15:37 2025 by rpki-client