Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa
File: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (raw, json)
Hash identifier: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=
Subject key identifier: E6:FE:80:E1:44:DA:54:D9:C6:EF:A5:F8:67:01:8C:0E:74:33:C8:B2
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 019427B3D661061A2242D612421E2827AA55
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa
Signing time: Thu 02 Jan 2025 15:48:04 +0000
ROA not before: Thu 02 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211322
IP address blocks: 193.228.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:d6:61:06:1a:22:42:d6:12:42:1e:28:27:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Jan 2 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6fe80e144da54d9c6efa5f867018c0e7433c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:7b:16:fa:3a:11:1e:47:87:4d:e3:ff:57:
30:66:85:40:ed:19:be:fe:4a:7a:58:10:35:d8:91:
b0:26:a4:d7:b9:56:88:57:ee:60:68:71:98:a4:35:
f1:44:e5:90:80:4d:f0:67:43:2c:73:b8:6e:68:34:
41:de:80:6f:25:a4:d9:d3:4b:ad:b6:5d:88:7d:3d:
39:29:81:d0:e3:d1:01:0d:f3:9e:9c:ba:e9:c8:7b:
e0:f7:b5:e9:33:94:bc:ba:1d:81:f6:d8:b5:ed:5f:
91:11:08:33:12:fe:36:2c:c7:ef:0e:dd:c6:56:ba:
dc:38:c7:34:66:ce:af:58:53:82:73:50:a6:0b:8e:
ed:f6:75:7a:eb:ce:70:aa:17:8e:46:6c:c9:6a:cd:
c8:5a:63:6c:d1:27:87:7a:73:77:2b:8d:a5:68:aa:
07:70:78:f9:3f:6a:60:f5:30:0d:d6:56:a4:c5:19:
1d:7a:14:58:1c:a8:14:33:06:29:fd:93:51:b6:d0:
1a:51:4e:a1:f7:40:29:92:cc:16:38:3b:58:c3:69:
d2:2e:84:a0:89:ff:a8:82:66:39:82:98:80:1a:3f:
c6:83:6b:77:57:b2:fd:c6:73:96:cf:92:41:91:d1:
80:b0:40:1b:be:44:d7:86:de:0c:23:ab:ad:dc:2d:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:80:E1:44:DA:54:D9:C6:EF:A5:F8:67:01:8C:0E:74:33:C8:B2
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e8:65:5b:46:c3:ef:d1:35:01:be:24:95:6d:40:dd:3d:e8:
c4:3c:4f:5a:0b:64:13:54:a5:9d:ba:c5:57:dc:84:b6:4b:fe:
86:ef:23:35:ae:e3:7e:a7:b7:8c:cd:80:ef:98:e9:a1:21:4c:
3b:00:75:9b:8b:18:df:e0:94:68:0c:29:eb:09:5e:11:0b:f2:
69:96:8e:ad:5b:df:e5:c5:d3:15:a3:24:ae:0f:88:16:72:2f:
d8:38:20:d4:d1:3c:9e:d5:a9:b6:bf:c7:14:f4:56:66:ab:45:
13:be:68:d8:b5:94:cd:43:da:16:87:62:80:50:28:94:22:72:
5c:70:8b:20:9b:ee:b4:73:f1:20:1c:e4:e0:d9:14:06:52:37:
cb:01:70:8a:e0:92:eb:41:24:ec:58:5f:93:4e:49:0e:e1:8a:
a6:e9:00:2d:d4:be:eb:bb:f0:80:a6:6b:5a:14:42:e7:11:d6:
18:da:85:30:18:67:84:a8:23:48:4d:5f:3f:3e:c0:3a:20:06:
c0:40:42:45:e1:1b:aa:b7:f9:05:38:72:9d:5e:73:24:e3:e3:
a4:a7:fa:81:6c:2e:d6:6c:d7:7d:93:14:73:3f:cf:0b:9f:c0:
23:04:1d:7f:68:39:6b:bf:9a:7b:fa:61:25:ff:e8:e9:c1:90:
27:5c:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:41:53 2025 by rpki-client