Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ORedMLYnb0LVXOgGX5x6fgTqghE.roa
File: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (raw, json)
Hash identifier: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=
Subject key identifier: 39:17:9D:30:B6:27:6F:42:D5:5C:E8:06:5F:9C:7A:7E:04:EA:82:11
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F4926C533223221A92A5B4458A690
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ORedMLYnb0LVXOgGX5x6fgTqghE.roa
Signing time: Wed 01 Jan 2025 13:47:43 +0000
ROA not before: Wed 01 Jan 2025 13:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 2a10:5e80::/29 maxlen: 29
2a10:5f80::/29 maxlen: 29
2a10:6080::/29 maxlen: 29
2a10:6480::/29 maxlen: 29
2a10:6580::/29 maxlen: 29
2a10:6680::/29 maxlen: 29
2a10:6780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:49:26:c5:33:22:32:21:a9:2a:5b:44:58:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39179d30b6276f42d55ce8065f9c7a7e04ea8211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:8a:b5:bb:01:18:b0:64:10:17:a1:30:da:
55:ca:73:36:8c:5d:dd:e1:2c:0a:e3:ac:fe:2a:49:
d4:9a:7d:37:ae:98:1e:23:66:c0:25:41:26:97:fa:
58:21:cc:67:e4:56:c0:fb:c7:79:d5:22:15:77:53:
a8:2f:3e:7a:14:85:c4:c6:6b:d8:0d:6b:ac:6e:c2:
70:2a:0e:d1:57:5b:9e:8d:be:e5:9c:34:1b:47:5e:
25:f7:72:e9:d2:6d:7e:a6:cb:c2:f9:29:c4:fc:0e:
94:fe:7d:26:09:d8:06:43:08:e1:67:d9:df:24:4e:
80:3b:11:b4:4b:9b:9e:1c:76:42:56:f3:70:03:49:
e2:b3:5e:64:fd:e0:e0:99:fd:bf:b5:73:c9:28:6a:
24:c1:11:e3:8b:57:5f:b8:2c:8b:56:99:bf:1c:71:
9b:05:26:6b:38:dd:18:73:36:ce:85:82:03:d4:af:
c5:61:7c:7e:39:49:63:96:07:ba:10:08:06:db:be:
53:1e:e0:81:01:6f:5f:2b:6a:ff:d3:b4:5f:6a:c4:
9f:f8:e8:83:eb:12:e1:18:22:8e:1e:c8:20:29:25:
1a:69:0b:c2:0c:db:43:0e:aa:10:69:9c:6d:45:65:
7e:d3:0b:5a:6e:af:ee:5a:2a:16:21:10:2b:e9:26:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:9D:30:B6:27:6F:42:D5:5C:E8:06:5F:9C:7A:7E:04:EA:82:11
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ORedMLYnb0LVXOgGX5x6fgTqghE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:5e80::/29
2a10:5f80::/29
2a10:6080::/29
2a10:6480::/29
2a10:6580::/29
2a10:6680::/29
2a10:6780::/29
Signature Algorithm: sha256WithRSAEncryption
4d:08:df:9e:50:0f:9e:6c:d6:d2:44:c7:8d:ae:92:75:0e:3d:
ee:76:f3:5e:a0:7e:74:32:78:bd:35:9a:ff:08:fa:15:7e:1c:
70:f9:44:bb:69:be:ae:31:43:0b:c8:21:49:f6:8a:80:81:8f:
8f:f3:8c:eb:9f:4b:3d:8b:26:16:6a:d7:d3:fb:f0:7d:8d:4d:
d6:f5:f5:0c:d9:07:b1:c8:66:ee:ce:67:5b:e0:47:00:75:b0:
23:87:ac:be:e1:86:2b:b7:f0:28:9f:b6:0c:5d:2d:0d:e4:4c:
72:f8:c4:d6:c0:f3:4e:a9:24:d7:2c:3d:f8:e4:95:7b:c5:6e:
87:f6:f8:c6:6d:95:6c:2b:6c:c0:17:4f:cf:17:5e:46:0a:53:
04:05:0a:12:24:f0:4d:3a:18:22:47:3b:1e:f5:2d:35:ff:8f:
3c:80:72:7e:82:c7:76:b8:be:14:96:4d:e2:05:cb:71:bf:69:
cd:58:e1:54:9a:a2:ea:c6:d1:5c:70:dc:d5:a2:65:9b:82:35:
90:25:a2:02:cb:43:bc:c5:4f:5c:96:af:e5:c1:a3:52:fd:33:
59:41:88:3b:a0:bf:36:9c:01:39:19:e6:8d:89:0d:50:fa:07:
2a:97:ef:c0:8d:8e:99:bd:4b:00:3e:15:26:2d:a2:98:6f:10:
dd:6e:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:52 2025 by rpki-client