Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/rB2INOwVRpDLnI62nHFRLMGjim8.roa
File: rB2INOwVRpDLnI62nHFRLMGjim8.roa (raw, json)
Hash identifier: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=
Subject key identifier: AC:1D:88:34:EC:15:46:90:CB:9C:8E:B6:9C:71:51:2C:C1:A3:8A:6F
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 01942369A5A0772A61DF84039116ABF38CC4
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/rB2INOwVRpDLnI62nHFRLMGjim8.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 702
IP address blocks: 213.208.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a5:a0:77:2a:61:df:84:03:91:16:ab:f3:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac1d8834ec154690cb9c8eb69c71512cc1a38a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:e4:60:fb:b4:28:01:3e:3f:31:1d:3d:8f:
48:bb:f0:d5:b5:0c:18:a7:a3:da:0d:58:d9:b8:6b:
d9:15:a2:1a:24:44:23:0f:97:6f:de:df:24:19:85:
38:9d:95:0d:8c:fd:a2:7d:8e:89:7f:8b:d2:e9:a2:
d4:e4:a1:a5:d9:d5:45:ca:c2:41:aa:c7:0f:ee:5f:
50:50:8a:37:df:af:86:2d:fd:92:66:f3:8d:c8:6e:
fd:31:d7:7f:35:2d:14:8a:f4:5f:b3:d1:97:3d:3c:
51:79:57:3a:a8:de:30:37:6b:f1:d4:e0:4e:a0:ad:
94:ba:97:71:68:f7:02:b4:d5:c6:dc:a8:e8:f6:6c:
a7:1d:d7:bf:38:f3:4e:ad:b3:3a:03:80:55:0b:ce:
6c:60:d2:47:1e:db:db:46:96:31:65:d4:41:db:5f:
49:2f:94:ce:a9:0d:26:68:c1:54:b7:89:9f:50:3e:
f8:e3:f0:7c:99:94:ed:66:c0:7d:12:3e:4c:cb:a9:
08:26:ad:e9:16:b7:21:37:dc:57:55:ae:f9:e1:a1:
95:4f:d5:3f:4e:c9:f3:83:51:ec:d1:fd:b3:14:a4:
20:4b:d6:b7:66:4e:79:da:d2:4e:9a:02:38:ad:97:
0b:98:a7:26:86:72:d7:1d:44:0b:d7:94:5a:1a:9a:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1D:88:34:EC:15:46:90:CB:9C:8E:B6:9C:71:51:2C:C1:A3:8A:6F
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/rB2INOwVRpDLnI62nHFRLMGjim8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.0.0/19
Signature Algorithm: sha256WithRSAEncryption
67:d9:8d:7e:d4:7b:64:59:c4:15:75:74:47:a3:e4:63:81:8c:
b1:ce:c7:e8:17:72:12:0b:da:1f:74:b8:54:2b:01:49:d8:f8:
2f:c3:8c:10:ca:5d:b7:56:ca:04:26:5c:36:36:b3:ca:f7:2e:
fc:4a:4b:68:ac:e5:45:71:9e:5b:7a:d4:f1:4b:a0:e7:c8:21:
af:61:89:cc:11:32:97:d0:da:5e:99:4f:1b:02:f2:39:14:34:
a9:4f:a5:4d:57:dd:b0:0e:65:56:93:d9:fe:fb:a0:89:4c:37:
dc:38:1d:73:36:fe:37:8f:31:b9:ea:61:53:bf:7d:33:94:83:
a8:55:e7:30:fc:55:50:a2:a6:f3:f7:53:e0:e2:55:1b:06:c4:
29:ad:0c:73:b5:53:aa:67:27:2f:1d:f3:db:ee:d8:e4:8f:c4:
04:ee:12:77:43:61:4d:bd:6c:9c:d6:bb:8d:69:f8:54:08:2c:
45:d2:c3:cb:db:30:01:ca:96:26:c8:c3:81:cc:89:c2:7d:4d:
78:95:c0:f7:74:4d:0e:01:37:37:a6:90:d2:36:5d:07:ce:9d:
69:98:a1:fa:e2:59:11:ee:af:be:b3:c7:c1:c5:8b:7e:50:2d:
0b:f4:71:3f:dc:65:08:d9:8f:08:6a:ae:e2:e6:da:f7:44:e2:
0c:31:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:58 2025 by rpki-client