Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/csLlB2_7ZU9INE3L_6ugKHhSDQQ.roa
File: csLlB2_7ZU9INE3L_6ugKHhSDQQ.roa (raw, json)
Hash identifier: BxnQAxFWJTM/5t57UZc7jxNqT2v2r8SrFwjEv7ulSZQ=
Subject key identifier: 72:C2:E5:07:6F:FB:65:4F:48:34:4D:CB:FF:AB:A0:28:78:52:0D:04
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019422FB5887C45D769E2CABA1B453BD1100
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/csLlB2_7ZU9INE3L_6ugKHhSDQQ.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48093
IP address blocks: 37.26.152.0/21 maxlen: 21
91.207.112.0/23 maxlen: 23
2a03:28e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:58:87:c4:5d:76:9e:2c:ab:a1:b4:53:bd:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72c2e5076ffb654f48344dcbffaba02878520d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:35:ea:81:66:07:8b:e8:36:48:e3:72:9f:
bc:0a:08:5d:60:22:63:fa:e8:84:c7:d0:74:2d:e4:
9d:0c:be:76:b5:49:53:6a:c7:c5:83:0d:1c:0e:2d:
18:1e:5a:ab:3c:0f:a3:46:7f:78:ce:5c:f4:11:8b:
d8:b9:e3:52:c3:a0:d3:4a:e7:04:70:d3:82:8a:6a:
55:64:ff:33:ed:77:27:17:dc:a6:8d:74:c6:20:c2:
13:07:ac:59:e6:a4:f9:05:95:0f:56:9c:03:5e:9b:
51:3b:f7:5a:21:d6:e8:8a:24:1d:26:07:aa:d4:9c:
43:f4:16:42:53:f3:43:f7:74:a4:a2:d0:ed:e1:5c:
36:2b:a5:0a:9b:81:5a:5a:17:88:6a:d6:7b:40:1a:
ae:f8:34:91:09:f2:bf:08:69:ac:48:b3:bc:83:0a:
32:49:5e:9d:54:85:87:a0:a9:f7:ae:0d:b7:a0:00:
72:90:b5:84:7f:39:5a:17:e4:61:79:d1:16:3b:29:
25:a8:37:f9:f5:25:1f:77:08:e6:dc:78:6c:90:8a:
cf:d8:38:41:c0:d8:67:37:51:41:cb:eb:2d:6a:aa:
d4:ab:d3:bd:ca:86:c2:c9:0e:3b:70:7f:97:4f:73:
a1:9e:91:ca:89:26:4b:2c:ff:47:d8:41:99:5d:57:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:E5:07:6F:FB:65:4F:48:34:4D:CB:FF:AB:A0:28:78:52:0D:04
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/csLlB2_7ZU9INE3L_6ugKHhSDQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.152.0/21
91.207.112.0/23
IPv6:
2a03:28e0::/32
Signature Algorithm: sha256WithRSAEncryption
95:f7:25:86:c7:ca:29:c3:67:36:a7:07:d8:fb:29:c8:bf:49:
e4:d3:ff:86:44:b3:d7:68:ee:de:03:10:22:52:5b:9b:8b:fe:
c3:e7:7b:5d:4f:6a:69:72:6c:1a:5e:32:4e:b9:85:dd:cf:69:
b4:fa:9d:74:a9:7a:56:f5:25:b0:32:50:b7:ed:f0:08:99:36:
77:87:75:cd:48:d3:13:68:c2:6f:e3:39:b7:df:2c:d7:fc:0f:
0a:3a:5b:28:13:26:15:05:e4:01:57:85:2b:32:6b:c7:6f:e7:
2a:eb:a6:59:7a:a8:ea:07:fb:f8:09:1b:d8:30:10:25:14:32:
65:26:4d:02:1b:f8:a1:34:48:13:4e:08:de:fc:ec:17:31:74:
f7:30:dc:f9:f4:9c:81:76:b0:15:c1:2d:6a:61:38:40:12:d6:
e0:ff:b5:d6:7c:93:0f:28:d3:ac:2f:91:a3:2b:5d:ab:c6:0d:
ff:21:ac:50:27:de:f2:f9:d7:4b:39:60:46:4d:f0:54:4b:3c:
a2:6b:8f:b3:d3:fc:64:9c:55:80:1a:5e:89:78:20:b4:a9:48:
9c:7b:7e:ba:93:06:7e:09:20:df:ce:33:46:43:26:5f:d2:73:
2e:30:24:9f:18:36:36:81:c6:7f:ee:f0:b4:45:a5:00:da:80:
1f:2c:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:40 2025 by rpki-client