Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AECbsIhKbWJ_Ff0F92F1-4KSX08.roa
File: AECbsIhKbWJ_Ff0F92F1-4KSX08.roa (raw, json)
Hash identifier: XeOu6WbkVXZWORsNFez3zH3cLGNSOvG9l/JIT9zyGeY=
Subject key identifier: 00:40:9B:B0:88:4A:6D:62:7F:15:FD:05:F7:61:75:FB:82:92:5F:4F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0195222D825281CAC600E705043A7885ED8A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AECbsIhKbWJ_Ff0F92F1-4KSX08.roa
Signing time: Thu 20 Feb 2025 07:06:02 +0000
ROA not before: Thu 20 Feb 2025 07:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 176.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:2d:82:52:81:ca:c6:00:e7:05:04:3a:78:85:ed:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 20 07:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00409bb0884a6d627f15fd05f76175fb82925f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:e9:e5:0e:8c:1f:b3:72:ca:95:37:93:6b:
3f:02:f6:cb:d9:a9:9b:fe:17:8e:bf:11:00:53:3d:
38:78:d4:0e:12:ed:38:8e:b2:22:b6:f4:c0:4b:12:
3b:2e:73:77:dd:95:ce:1e:a8:dc:11:d8:e4:5c:50:
12:59:ea:3f:7d:9b:ae:7d:be:dc:2f:51:7b:39:6c:
af:33:10:cb:5f:bf:10:64:49:d0:18:a5:ad:d4:b6:
8a:a0:a5:4f:ba:3b:55:46:24:5c:c8:1e:2c:8f:7f:
20:a1:7c:05:9b:1b:52:70:b0:b2:19:8c:70:44:96:
13:d9:60:a0:21:b3:62:2a:13:05:77:43:99:0b:71:
2e:fe:d4:24:a8:8b:a7:9a:f4:4b:89:54:6c:96:d6:
ce:18:49:95:05:f0:1b:3d:3e:fa:04:0d:82:e3:e5:
ed:cb:02:20:81:23:b7:bb:81:67:aa:40:37:a5:61:
02:29:35:2c:e9:75:06:4d:15:98:ff:80:fd:bb:15:
78:3d:e8:05:76:29:3b:b4:4a:b0:0d:c8:f3:b7:f5:
21:2f:24:b0:70:6e:cc:ea:c6:3e:5d:08:72:4f:c3:
f5:63:aa:2f:18:dd:4b:0c:1c:a8:e9:cc:d9:55:a9:
69:96:ea:8c:89:dc:3b:17:ad:52:a5:d6:f7:4e:be:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:9B:B0:88:4A:6D:62:7F:15:FD:05:F7:61:75:FB:82:92:5F:4F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AECbsIhKbWJ_Ff0F92F1-4KSX08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:4c:e3:f7:65:7a:f9:3a:2e:32:a0:2c:d6:df:81:82:09:
17:ab:38:03:4a:d4:5b:20:da:38:67:db:5f:6b:61:1c:06:e2:
b8:ff:13:48:8a:98:af:81:29:38:9c:a7:36:48:09:1a:13:13:
37:11:ca:1c:b9:df:4c:5f:98:0e:f1:6a:67:e0:b1:c1:f1:88:
a7:8e:e3:a0:60:ab:8c:27:8d:f3:3e:3c:15:3b:7a:0d:5e:79:
02:0c:27:9d:e6:6e:a6:15:6a:76:bd:5b:c2:32:cb:7a:93:17:
f8:ff:f2:2c:4c:6c:4b:18:6d:e1:dc:35:ab:5d:43:62:33:62:
f9:4d:b0:e8:33:4f:ed:cb:cb:46:a7:8d:22:fa:0d:ee:e1:0d:
7f:55:96:c4:36:e7:f5:3f:8c:5b:dd:e4:d8:5e:03:33:66:e4:
ed:3d:bc:7a:78:83:cc:26:7a:90:93:7e:71:aa:45:d5:70:43:
86:2d:eb:0f:35:97:ec:8e:ba:7a:1c:3f:4e:e1:6d:44:6f:bc:
b3:f4:65:4a:33:bd:3d:53:a9:36:a7:56:20:7c:bc:0b:b5:f2:
af:e4:37:d3:76:02:f2:50:71:f5:f8:9c:49:56:a2:4c:9c:32:
1e:f9:1a:7c:05:fc:02:a8:ee:c1:86:62:1b:5e:f0:6a:76:ff:
d0:42:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:21 2025 by rpki-client