Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/lX5lUBRMr0qRNeUQdaN4ltutYPA.roa
File: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (raw, json)
Hash identifier: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=
Subject key identifier: 95:7E:65:50:14:4C:AF:4A:91:35:E5:10:75:A3:78:96:DB:AD:60:F0
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019427B603B69CC305735BEC5F322037A00C
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/lX5lUBRMr0qRNeUQdaN4ltutYPA.roa
Signing time: Thu 02 Jan 2025 15:50:27 +0000
ROA not before: Thu 02 Jan 2025 15:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56648
IP address blocks: 185.20.5.0/24 maxlen: 24
2a13:2900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:03:b6:9c:c3:05:73:5b:ec:5f:32:20:37:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=957e6550144caf4a9135e51075a37896dbad60f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:a4:68:88:68:1d:3f:07:ab:8a:6f:dd:89:
8b:0f:fd:c1:d8:92:e1:b6:73:e3:66:d1:64:a8:50:
c1:9c:51:a2:4e:08:20:70:88:c9:8e:4d:a7:15:fa:
d6:14:b5:4d:82:e3:30:4d:db:73:06:71:7b:f2:05:
ca:18:9e:9f:53:32:5e:fb:59:cc:5f:82:cb:be:fb:
31:86:a6:6d:92:39:35:c5:bc:2e:94:56:09:c9:ed:
cd:04:f2:ca:71:e8:14:12:41:d4:f6:4b:74:43:74:
d7:9d:05:91:bf:1d:fa:4e:02:f5:36:fd:06:aa:7e:
c2:40:b4:f1:3c:d0:13:86:75:96:fe:43:eb:89:8b:
2a:ea:7a:05:88:8d:96:2a:23:4b:ab:86:ef:b8:6a:
59:dc:03:13:36:ed:b4:6d:f7:2f:70:1f:8e:14:0e:
fb:a4:a5:52:08:3c:7f:2f:32:12:1f:91:90:f9:c0:
16:fd:82:3c:10:a2:9e:dc:91:02:8a:f8:01:12:90:
5f:5a:73:5f:82:03:34:b3:c6:8f:6a:67:c5:60:81:
68:92:22:84:91:a6:c8:c7:ae:7f:c7:6d:2f:d1:47:
ab:4b:df:8a:7a:65:71:fd:d3:62:b3:b2:d6:b4:19:
45:ea:9e:08:5e:56:14:22:1a:0a:ce:cc:7f:3f:65:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:65:50:14:4C:AF:4A:91:35:E5:10:75:A3:78:96:DB:AD:60:F0
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/lX5lUBRMr0qRNeUQdaN4ltutYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.5.0/24
IPv6:
2a13:2900::/29
Signature Algorithm: sha256WithRSAEncryption
36:3b:77:55:9d:ed:0c:50:e1:a4:f1:46:ef:51:c7:ba:c2:f9:
86:dd:f6:5e:79:f8:ec:32:f6:24:8e:df:b2:ce:84:4b:38:6b:
af:ea:d0:21:88:47:12:c9:19:54:57:ca:ae:2c:e5:0a:dc:cd:
e6:8f:2c:5c:94:8a:20:22:cc:75:7c:46:22:eb:fb:87:9e:c4:
26:d7:83:82:b0:93:1f:91:26:ee:4c:1f:ec:b1:8c:5e:64:74:
92:a4:7f:9b:54:4c:9e:95:4a:ec:04:b5:9d:b1:23:e7:26:15:
f4:33:0d:43:d5:1d:92:08:58:20:7c:d2:89:83:06:f1:ac:49:
35:fd:e5:44:e4:59:33:b5:85:a6:99:9d:e4:d8:cc:86:a0:8b:
60:15:07:e9:7a:b6:2a:52:80:c0:ff:77:5a:fa:f4:46:36:96:
a2:9e:34:53:0b:91:f1:89:8d:6c:77:9f:51:32:9c:bb:fa:6f:
50:6f:99:a7:6d:4d:7a:7b:2c:a4:10:7b:68:80:a1:cf:9b:f5:
e8:0d:18:6f:7a:63:84:e1:8f:42:00:90:bc:c3:bf:52:f7:a2:
59:5b:a9:0f:20:de:c5:6b:5a:cd:d7:82:36:f1:54:0b:58:35:
ef:d1:5b:0d:01:2c:d1:65:df:92:f6:ee:ef:47:20:57:3e:5e:
31:b6:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:24 2025 by rpki-client