Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sP9AUGchNWq9z-ewhSavIILNHs.roa
File: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (raw, json)
Hash identifier: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=
Subject key identifier: E6:C3:FD:01:41:9C:84:D5:AA:F7:3F:9E:C2:14:9A:BC:82:0B:34:7B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B46D75FD499B5E3C33E7418BBBA9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sP9AUGchNWq9z-ewhSavIILNHs.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 81.21.3.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b4:6d:75:fd:49:9b:5e:3c:33:e7:41:8b:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6c3fd01419c84d5aaf73f9ec2149abc820b347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:8d:8f:20:d1:f5:7c:f5:63:c5:dd:7a:a9:
53:5c:97:8f:69:78:4e:3a:ce:c2:74:2d:9d:2d:35:
19:f5:4b:2f:85:cf:4b:47:c8:66:0d:ba:aa:a5:83:
d2:87:7c:77:4e:e6:f0:3e:7b:84:58:d2:c1:e5:b2:
21:a1:63:32:16:a7:79:d8:27:ce:10:02:07:13:95:
9a:62:23:4f:1f:03:d9:f7:d7:9a:4e:55:fd:d5:e9:
ac:b4:7e:86:9c:e3:e6:6e:5c:c7:98:cc:8c:c7:f1:
a3:51:84:e9:af:43:46:6d:8c:c5:cc:b2:02:a0:3c:
03:21:61:c5:02:5c:be:7c:b3:bc:5e:5b:5d:7e:5b:
5d:29:d4:c3:54:bb:5a:2f:39:c9:1e:b4:73:b9:5d:
eb:16:de:33:92:e0:76:2f:c0:89:3a:85:62:d3:a1:
82:1c:ed:47:0f:2f:57:a4:81:f1:71:c9:55:26:ad:
90:e9:b3:24:a9:d9:9b:39:9f:4c:75:f8:97:35:8f:
8a:6b:78:17:e1:bb:3d:c2:85:d3:d6:ce:e4:09:4d:
ef:75:3e:fa:57:63:35:11:39:9d:b6:4c:69:7a:b3:
0e:63:e8:77:d0:db:63:99:cf:d5:6b:a6:f1:9d:3a:
7d:98:49:7b:db:ad:b0:f9:50:e6:ff:75:46:02:95:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:FD:01:41:9C:84:D5:AA:F7:3F:9E:C2:14:9A:BC:82:0B:34:7B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sP9AUGchNWq9z-ewhSavIILNHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.3.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6b:8a:2e:1e:f5:0d:c1:ef:07:8d:88:12:1a:65:07:77:51:
87:d7:1b:9d:6c:1e:b8:e5:c3:4b:2b:3c:38:f0:05:9e:1e:f8:
80:8f:fb:a0:ed:98:1e:35:5b:a7:9d:4f:59:04:c4:0a:51:83:
3c:44:3b:cd:7e:f1:1f:ee:aa:fe:b0:7c:54:56:d8:e7:66:7b:
b5:b4:e1:8c:3a:71:d2:0d:90:f2:43:b1:f7:50:7f:b5:ce:f7:
be:62:61:ba:39:4f:f4:49:47:65:17:ab:a9:77:f0:6f:56:a1:
20:8d:3a:5e:1f:a3:6a:9e:f6:9a:5c:23:eb:01:e1:76:6a:bc:
f2:fb:99:2b:3d:9f:a1:04:e6:7c:e6:c0:39:33:56:82:ef:32:
55:8e:cd:80:c0:02:61:88:3a:97:c3:0a:b7:29:1c:bc:45:25:
2c:dc:f8:cf:a8:28:a3:ad:bc:40:cd:ef:0c:fd:74:fa:21:e7:
ce:9c:aa:d6:69:68:50:9e:1d:b0:51:ab:df:bc:9c:ae:51:22:
4f:17:74:82:e2:5f:86:de:7a:f2:3f:c1:5b:f9:e5:74:b6:e8:
3c:45:9e:fd:8b:f5:d4:ff:1c:86:64:12:c2:1f:14:82:9f:29:
cc:69:19:34:10:a5:16:75:3f:7d:dc:cb:e5:f7:23:4f:17:71:
6a:42:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:46 2025 by rpki-client