Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/0XabXlC7deISiRQU33Gmn1-hwRM.roa
File: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (raw, json)
Hash identifier: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=
Subject key identifier: D1:76:9B:5E:50:BB:75:E2:12:89:14:14:DF:71:A6:9F:5F:A1:C1:13
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019420D6402BB6417F63EBA3BB6AB6BD8578
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/0XabXlC7deISiRQU33Gmn1-hwRM.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:1e80:303:200::/56 maxlen: 56
2a03:1e84:1900::/56 maxlen: 56
2a03:1e84:1900:200::/56 maxlen: 56
2a03:1e84:9260::/48 maxlen: 48
2a03:1e84:9261::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:40:2b:b6:41:7f:63:eb:a3:bb:6a:b6:bd:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1769b5e50bb75e212891414df71a69f5fa1c113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:fb:2a:2e:d0:cd:96:b0:72:f0:c7:1f:17:
0a:ea:e2:d1:92:1d:dc:a0:cc:93:a7:2f:fa:d6:41:
db:79:50:74:1f:a6:ec:f4:84:7c:b3:7b:0c:dd:d7:
51:96:f3:e4:42:f0:c9:03:95:df:37:92:b0:69:fd:
ac:d7:fe:44:e6:ee:b7:31:8b:2a:1c:79:21:60:f6:
ca:40:42:ec:e2:9e:80:8e:2b:da:5e:b4:2a:ff:f1:
6d:76:78:44:9c:81:16:a2:48:3e:82:71:a7:2b:c8:
74:05:86:a5:5f:41:eb:40:7a:9c:55:fe:b8:72:64:
de:f1:b2:07:b7:18:87:53:26:d5:b5:3b:c5:a7:3b:
db:7e:be:cb:3d:d5:91:d5:69:d7:37:29:40:4c:2e:
2b:d8:21:10:93:d2:79:f1:eb:69:66:44:f8:53:cd:
ae:4c:79:df:32:ff:f9:7e:de:20:db:af:16:99:96:
eb:d8:0f:9d:07:d8:77:a1:8d:17:4c:4a:0e:97:1e:
80:ed:ee:98:00:2b:fe:ab:37:62:4b:9b:77:d6:6a:
54:9e:30:da:2d:48:16:15:44:3a:aa:0b:ad:74:51:
29:09:d1:13:2a:d4:29:0d:e7:08:f4:7c:e7:bb:32:
7b:df:f4:95:f2:6a:b4:3a:ae:9c:9c:98:4d:09:fe:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:9B:5E:50:BB:75:E2:12:89:14:14:DF:71:A6:9F:5F:A1:C1:13
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/0XabXlC7deISiRQU33Gmn1-hwRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e80:303:200::/56
2a03:1e84:1900::/56
2a03:1e84:1900:200::/56
2a03:1e84:9260::/47
Signature Algorithm: sha256WithRSAEncryption
c1:21:64:79:10:ed:3b:b6:91:83:93:ce:74:47:20:4d:cb:46:
10:e6:c9:0b:a4:cf:b2:30:49:16:26:6c:53:d8:22:91:c1:c2:
a3:db:ce:0f:e1:25:5f:9e:ad:33:3b:0a:07:00:6a:6b:a8:b7:
e1:bc:31:dc:d4:ce:27:80:2d:f3:05:db:ff:ee:c9:13:f5:b4:
d1:54:2b:c2:36:55:bf:a9:f7:27:1a:ea:fa:1a:56:e6:75:2b:
19:b3:b7:e9:ea:37:0e:41:ee:f6:d7:87:77:7d:0a:ac:0a:99:
ca:b3:d5:49:9b:ae:19:d7:d1:8e:ea:be:c2:b7:b4:ed:85:76:
f2:15:bd:f3:98:c3:d4:a4:48:d5:9b:1a:05:3e:f9:8d:f3:aa:
a9:12:55:66:ba:64:d2:a9:1c:5d:b2:96:4e:3e:48:56:b1:aa:
a2:c7:19:83:f7:97:3e:d9:17:61:9c:df:ea:73:18:46:ec:30:
4e:13:08:a2:fa:f0:35:6a:b3:89:b3:33:b6:8d:3d:69:e7:65:
be:fd:03:15:2a:e4:b5:17:91:d0:3f:6d:65:53:6b:31:f1:fe:
e9:85:f2:ac:26:cb:bf:6e:76:3f:90:52:35:9e:61:4b:44:cc:
f5:2b:7d:20:7d:5c:91:c2:3a:07:2c:0d:c7:7c:10:db:97:ad:
95:a5:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:05 2025 by rpki-client