Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B5ITaG675rOwtxmyHKlUKrju29M.roa
File: B5ITaG675rOwtxmyHKlUKrju29M.roa (raw, json)
Hash identifier: +AqbSac7p6E4ofChfyrHIry999XVEb7U0GQe4U9XL7c=
Subject key identifier: 07:92:13:68:6E:BB:E6:B3:B0:B7:19:B2:1C:A9:54:2A:B8:EE:DB:D3
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CA91BFD0111B58FD32684245F71D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B5ITaG675rOwtxmyHKlUKrju29M.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41521
IP address blocks: 194.209.55.0/24 maxlen: 24
194.209.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ca:91:bf:d0:11:1b:58:fd:32:68:42:45:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079213686ebbe6b3b0b719b21ca9542ab8eedbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:ac:f0:a9:ba:10:30:16:1e:c9:32:d0:a3:
dd:ee:21:f5:ef:0a:ca:8d:bb:29:43:3b:36:3b:24:
2f:f6:34:d2:d6:ac:5a:b5:fe:dc:9e:90:8f:56:f7:
58:80:e8:bd:83:af:ce:3f:a5:35:b7:c2:a0:e2:73:
16:0c:d9:2e:da:7b:63:0e:4a:7d:ee:5b:b3:7d:e1:
65:78:5b:ae:46:98:bb:dd:6f:fb:da:64:94:30:bc:
e6:46:4a:50:e7:64:2b:2c:fb:24:07:3e:b2:28:85:
f7:86:9e:0d:68:07:54:8c:d7:dc:80:28:d4:f9:ea:
48:a0:53:9b:6a:11:5d:e2:70:66:ee:74:00:bc:81:
f6:de:01:21:d9:08:b4:ce:60:54:3f:cc:21:b5:fd:
c3:fe:2f:44:b0:35:97:37:40:d4:7d:92:8a:56:30:
de:2e:26:52:79:e7:29:ef:0d:e9:fd:73:ba:49:83:
08:e7:4c:a4:22:a5:79:32:11:48:48:a8:35:de:35:
28:b5:14:8d:28:8b:18:20:a2:d3:42:50:69:4f:11:
7e:78:b7:81:fa:20:65:36:02:a0:81:c1:90:5b:0a:
8b:8c:fb:f7:69:9a:76:d6:41:55:f7:7e:b3:8c:cf:
95:b3:ab:e1:83:19:fb:fc:af:12:fe:8a:ee:34:4b:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:13:68:6E:BB:E6:B3:B0:B7:19:B2:1C:A9:54:2A:B8:EE:DB:D3
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B5ITaG675rOwtxmyHKlUKrju29M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.55.0/24
194.209.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d2:6f:e6:de:43:14:b4:11:ef:e5:ac:e4:a4:67:95:44:98:
be:5b:3d:7d:df:c5:b0:ab:40:bf:c7:95:9f:4e:9a:c8:70:d1:
3c:a5:e1:71:32:26:18:a8:30:0f:c9:e6:ea:7c:b7:1b:df:cc:
f2:da:fd:ed:49:a6:18:65:e4:45:a8:65:56:38:08:35:6d:e6:
5e:a4:83:2a:92:15:0c:f9:26:25:db:e7:4b:ef:01:0e:9c:7d:
9e:55:02:fa:a0:73:b5:47:64:7f:bc:54:59:5d:d8:1f:7a:27:
ea:c0:6b:3d:63:da:09:c0:73:68:8e:d1:27:77:17:52:0d:99:
2e:e1:a1:b9:26:0a:92:12:62:90:45:19:44:ad:35:d5:c7:3f:
f3:30:aa:9b:64:2b:7c:a8:ba:9c:07:f5:1a:f1:95:e6:72:ea:
00:2c:a4:8f:44:ec:4c:f2:2d:a2:82:38:1e:49:f1:01:b9:8a:
9e:94:94:01:63:5e:7e:66:42:66:3c:60:94:07:02:da:c1:cc:
e2:9e:38:67:b2:88:f1:d8:d2:64:ff:dd:94:d0:ac:78:76:72:
98:73:7b:5c:2a:79:93:0f:a2:b0:6f:2d:a6:d2:13:9c:9a:70:
3b:36:b1:9e:dc:31:2f:25:54:02:fa:32:94:33:f4:a5:d6:bf:
1d:74:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:08 2025 by rpki-client