Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cUk9gF1NAvXhh8uQPdgOvohfLq4.roa
File: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (raw, json)
Hash identifier: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=
Subject key identifier: 71:49:3D:80:5D:4D:02:F5:E1:87:CB:90:3D:D8:0E:BE:88:5F:2E:AE
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019425223AAA4E1F0403B009C061DC46319E
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cUk9gF1NAvXhh8uQPdgOvohfLq4.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210513
IP address blocks: 212.126.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:aa:4e:1f:04:03:b0:09:c0:61:dc:46:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71493d805d4d02f5e187cb903dd80ebe885f2eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:ca:b1:c2:25:7b:a3:40:de:fa:cc:6e:9b:
bc:e3:81:77:6c:0f:16:c5:b4:ca:5d:f4:34:64:e0:
0d:54:19:6e:8a:a2:49:6d:45:7c:67:09:85:e1:c3:
38:e9:5b:67:4e:19:a3:43:a6:8e:ad:02:05:23:f6:
16:a8:96:12:9e:95:70:ce:1f:5c:13:27:c8:b5:a3:
12:a1:c9:db:c9:fe:6c:54:a4:af:64:a0:19:9e:0a:
50:17:09:66:97:01:55:2e:7a:e3:88:26:37:df:f2:
c4:19:4e:e5:09:92:b7:7e:ae:cf:94:c0:0e:54:4c:
51:de:39:b0:5f:72:3c:e9:d0:b3:44:a5:31:3c:e9:
83:3b:46:99:d9:57:b9:be:a8:df:9c:d3:d5:0d:52:
2f:3e:a0:13:c3:9e:d1:45:be:92:ee:be:1d:de:9a:
20:44:8b:e9:0a:33:aa:7a:89:ac:cc:af:dd:15:06:
9f:56:16:b7:8a:c0:d0:0c:6f:70:79:4c:70:7f:0c:
09:42:9a:cd:1b:50:d1:82:fd:f4:82:c1:db:48:06:
af:66:ca:5e:d3:d5:3a:97:ad:22:8c:da:db:2b:04:
b8:2a:d0:b8:77:27:f7:26:5d:94:6e:1e:34:10:20:
17:39:c2:9a:de:88:3f:d6:76:53:5c:91:fb:bc:69:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:3D:80:5D:4D:02:F5:E1:87:CB:90:3D:D8:0E:BE:88:5F:2E:AE
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/cUk9gF1NAvXhh8uQPdgOvohfLq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:77:68:71:ff:3e:a6:04:3e:60:04:18:f4:89:f0:98:7d:8a:
eb:c2:d0:d4:38:5d:90:2b:21:e4:6c:15:bd:60:9c:20:ae:d9:
89:28:a9:c3:6e:20:fa:f1:fc:3c:8b:44:c3:71:87:19:97:73:
5e:4c:19:0b:97:12:32:df:99:6a:25:fd:6c:e6:05:ff:2c:6c:
90:84:3d:d6:ee:5d:0a:77:e2:24:db:a1:09:9d:83:0e:39:81:
b3:f5:10:d8:02:31:59:33:c1:fe:f4:ff:ed:ce:92:fd:56:f9:
ab:6d:28:5d:d9:df:d4:4d:63:82:c9:90:9b:1e:3d:06:da:87:
3c:24:3e:dd:00:3b:38:f0:38:a2:a1:46:19:65:0d:b9:0c:04:
ab:86:6a:2c:94:a4:79:e8:6e:89:4d:67:63:ae:36:46:6f:6f:
3a:7a:34:19:a9:39:4f:c7:e6:4a:05:3a:11:94:64:7d:5c:f4:
77:27:6d:66:94:46:38:06:6f:e6:51:25:70:9f:71:74:0a:77:
22:e3:ef:ac:f2:1a:bc:f0:d9:12:34:e4:19:79:1a:16:25:29:
97:19:b9:d4:02:de:21:a6:0b:00:75:b4:d4:55:24:dc:ad:d6:
40:57:08:a3:63:61:5f:00:8f:f6:62:25:a2:b8:4b:23:1d:cd:
8d:3e:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:58:46 2025 by rpki-client