Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/u0oJmkSedaonOs5uLkSqqL59uJ4.roa
File: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (raw, json)
Hash identifier: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=
Subject key identifier: BB:4A:09:9A:44:9E:75:AA:27:3A:CE:6E:2E:44:AA:A8:BE:7D:B8:9E
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D64A9BD7BCA84A6EFE1407A79847A0
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/u0oJmkSedaonOs5uLkSqqL59uJ4.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29321
IP address blocks: 80.243.96.0/20 maxlen: 20
94.143.168.0/21 maxlen: 21
109.239.64.0/20 maxlen: 20
194.59.240.0/22 maxlen: 22
217.195.160.0/20 maxlen: 20
2a02:b20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4a:9b:d7:bc:a8:4a:6e:fe:14:07:a7:98:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4a099a449e75aa273ace6e2e44aaa8be7db89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:0e:3b:a1:65:3f:22:c8:54:98:57:b8:74:
9d:81:8a:aa:ca:98:41:2f:b6:e3:d3:d4:02:9d:05:
5d:68:11:21:b2:ac:fe:4d:53:d2:44:18:b4:0f:1b:
fc:ff:16:9d:57:a5:93:5d:43:4c:1b:0c:0e:57:22:
d0:3b:c7:09:94:02:ae:85:35:6f:5b:7a:ab:fe:b0:
be:4a:66:d9:6f:f4:e7:04:6c:58:16:9d:44:30:27:
e4:8a:46:9c:11:d5:49:2d:a4:1b:ed:45:a7:6b:fb:
57:ea:ee:af:4a:6c:cc:62:ed:8c:69:38:23:ac:25:
f2:b0:ed:ed:eb:bc:25:0b:06:22:f7:6e:b0:c7:e4:
22:e3:4c:23:4e:e7:46:79:d4:c9:1e:11:51:be:a3:
c9:34:64:c2:e0:3d:f5:43:cc:0f:54:b6:6e:9d:e6:
a0:96:89:19:64:19:c1:ef:8b:aa:f9:73:5e:81:65:
15:33:12:18:09:d3:c3:a9:c5:10:f4:34:42:b5:61:
5f:16:92:e7:7c:39:9c:dc:72:08:c5:f3:7e:91:d8:
a1:7f:eb:52:9f:65:17:e8:d6:ae:fd:7c:cf:33:47:
bc:20:f6:16:23:e5:8f:ec:af:36:fa:f1:60:1a:e9:
b1:1f:cc:a6:f3:5f:ea:45:39:0d:5f:b8:5d:f1:b1:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:09:9A:44:9E:75:AA:27:3A:CE:6E:2E:44:AA:A8:BE:7D:B8:9E
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/u0oJmkSedaonOs5uLkSqqL59uJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.96.0/20
94.143.168.0/21
109.239.64.0/20
194.59.240.0/22
217.195.160.0/20
IPv6:
2a02:b20::/32
Signature Algorithm: sha256WithRSAEncryption
a5:5a:e9:63:8b:f6:fd:65:84:88:69:81:78:31:1e:18:4c:b7:
3e:16:b6:93:15:71:0d:a6:1d:56:4b:ff:1a:d9:f6:b5:85:0c:
18:a0:08:4a:e5:d2:dc:fe:50:d5:fe:37:ca:04:6e:d2:05:3c:
88:2c:5d:d0:35:cf:e4:b6:ac:fe:e6:fd:19:b1:e1:9e:a4:24:
f0:4b:26:2c:91:b2:4a:68:1b:3a:f7:71:d6:24:5e:e8:b1:f7:
52:4f:96:e7:fa:ce:17:7f:52:3f:c5:63:3f:85:21:c9:43:0a:
59:48:7f:ce:07:b7:e5:1e:76:b3:14:40:f6:f7:49:ed:ff:7c:
66:d8:8a:a3:08:87:2f:3f:0e:87:8a:3f:94:41:8b:7b:68:7f:
ac:71:dc:a7:2c:27:a8:a8:b7:3b:08:47:52:62:2a:62:2e:cc:
79:e9:e8:77:5d:2e:40:af:24:b6:16:6e:cc:18:41:e9:d7:1c:
5f:15:e7:15:ef:e1:17:fe:28:da:3d:c6:8b:38:9f:a8:9c:cf:
56:25:68:55:94:95:33:b4:71:8d:48:a0:4d:0e:1e:41:11:dd:
c0:58:48:a2:5a:c4:f9:05:d9:3c:06:c3:fd:9d:08:36:6c:ec:
7e:7b:87:ce:8d:11:1a:92:6d:3b:7e:18:ab:d3:dd:fc:45:e3:
5f:55:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:31 2025 by rpki-client