Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/L6-VizqbQShaQBu3JV896s_4tGg.roa
File: L6-VizqbQShaQBu3JV896s_4tGg.roa (raw, json)
Hash identifier: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=
Subject key identifier: 2F:AF:95:8B:3A:9B:41:28:5A:40:1B:B7:25:5F:3D:EA:CF:F8:B4:68
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0194266BA35C85C9A307CCC70654F1A65033
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/L6-VizqbQShaQBu3JV896s_4tGg.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211660
IP address blocks: 185.1.201.0/24 maxlen: 24
2001:7f8:10d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:5c:85:c9:a3:07:cc:c7:06:54:f1:a6:50:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2faf958b3a9b41285a401bb7255f3deacff8b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:d4:91:51:3e:75:a5:c9:f7:58:b7:aa:7f:
ba:f5:21:ca:ca:d1:fb:87:4f:be:51:0c:b6:c7:be:
00:bd:22:ce:3d:23:4b:e3:ac:ac:53:a7:95:eb:4d:
d9:6c:65:38:4d:07:f3:45:a8:a3:f2:8b:a0:2c:ff:
1b:d5:5a:d6:a4:b1:35:f4:3f:b1:f7:70:9b:30:86:
f9:99:af:cc:ea:66:37:dc:09:94:5e:c2:01:c0:45:
4c:c9:b3:ac:db:37:f2:3a:97:9c:90:ea:70:b4:50:
28:57:27:0c:db:f7:e4:d3:c4:df:61:20:3e:07:17:
ec:2d:16:ee:2a:0e:0d:22:a3:1b:f7:c5:ef:c4:cb:
a0:29:26:0b:ef:03:0e:2f:f4:37:4a:02:41:88:9b:
2f:25:81:e9:03:70:9e:4f:36:26:7d:ac:1e:1f:28:
d9:ff:79:8e:a9:05:07:db:ca:f8:0a:70:f0:25:6b:
e5:78:47:0b:15:b0:5a:f8:dd:8c:0a:4e:0c:6f:11:
05:1a:7e:0f:8b:27:8a:1f:b1:1f:0f:0d:51:89:fc:
fa:64:ea:b0:0b:e4:4f:41:01:ed:23:c6:0d:90:ed:
95:f5:5d:18:11:57:5e:51:ce:72:ec:b9:82:22:f0:
f3:89:fb:5d:a4:57:a7:10:cb:aa:f2:63:52:80:88:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:95:8B:3A:9B:41:28:5A:40:1B:B7:25:5F:3D:EA:CF:F8:B4:68
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/L6-VizqbQShaQBu3JV896s_4tGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.201.0/24
IPv6:
2001:7f8:10d::/48
Signature Algorithm: sha256WithRSAEncryption
57:df:cb:1c:42:90:8b:5d:7d:e0:49:aa:d1:88:00:f2:dd:67:
40:6a:14:88:eb:50:77:1c:31:95:5b:eb:fc:88:41:f1:e5:3c:
6b:e7:b7:08:3e:31:51:0c:bc:03:dc:5a:50:2a:bf:e4:a5:0b:
73:30:cc:ed:38:5c:f7:35:c2:01:d2:aa:e6:93:3c:b4:ae:e3:
b6:7e:6f:f8:db:c6:3c:90:cc:21:15:eb:38:61:02:af:cc:e1:
03:d7:12:7c:ec:86:f1:ef:03:0b:43:d3:ff:03:fd:a5:22:37:
4d:af:8b:c4:0e:ff:23:45:8d:c1:3b:ae:8e:e0:50:20:23:3c:
af:c3:e6:77:86:70:04:6a:42:16:b7:fb:66:15:2e:c1:e9:15:
ec:8f:90:c9:0f:39:ad:9c:89:fb:8c:c7:75:c8:fb:38:e9:3f:
45:80:f7:69:0c:a5:9b:74:b4:d0:5c:2e:e2:bf:69:c4:e1:d8:
ad:65:01:25:34:2e:bc:5b:72:ad:e0:11:5a:ec:2c:94:34:a5:
93:2b:ad:ce:34:48:1f:dd:51:54:2d:33:e3:7d:11:b1:0a:bd:
14:20:53:e6:db:91:d7:d4:c2:c8:fe:56:17:47:6c:32:5d:3d:
03:ad:32:a9:fa:77:31:2c:d2:e8:22:da:74:4b:09:de:ac:19:
16:5d:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:30 2025 by rpki-client