Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/thsd_2EivTS0FbZ7b83mqFkVBNo.roa
File: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (raw, json)
Hash identifier: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=
Subject key identifier: B6:1B:1D:FF:61:22:BD:34:B4:15:B6:7B:6F:CD:E6:A8:59:15:04:DA
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 01941FFA1A75493D2DBC74378D4CAE9445AA
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/thsd_2EivTS0FbZ7b83mqFkVBNo.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 89.104.160.0/21 maxlen: 21
2a00:1708::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1a:75:49:3d:2d:bc:74:37:8d:4c:ae:94:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61b1dff6122bd34b415b67b6fcde6a8591504da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:5a:22:b2:a0:85:bc:b2:da:24:f4:52:19:
5d:ab:3c:b0:7f:16:9f:b4:5f:50:61:43:8f:02:0d:
5e:8c:81:44:79:3b:97:1a:af:69:66:87:3a:c2:d4:
39:f8:3c:1d:96:a2:c7:d4:b9:47:82:b7:73:fd:13:
31:6d:e2:c4:4e:7b:6c:c5:23:76:47:53:10:33:dc:
05:3f:be:a9:f3:9c:0c:c2:77:6d:f3:f3:22:c9:17:
72:fa:cc:36:65:83:2c:83:51:bd:b5:4e:29:be:f6:
e9:6f:32:66:15:14:59:c8:2e:37:5b:af:86:58:9e:
77:66:a8:fd:60:f8:0d:c7:62:ad:e5:f2:b7:cc:0c:
fe:ca:df:72:a3:44:0a:e1:7d:28:1c:24:29:f8:8d:
f2:9f:63:a5:f4:03:ac:36:65:74:dd:ba:e3:b6:ce:
8b:3c:ca:9a:a8:cb:ad:74:91:58:c9:49:f1:a0:a1:
d4:01:49:5d:66:64:00:da:9a:a0:31:57:66:ca:cc:
c0:59:e5:40:bf:53:a4:a7:b9:07:70:d5:7f:37:ac:
51:98:d3:5c:d3:b2:09:c4:c1:9b:ec:a9:21:45:6d:
ed:44:05:a5:d1:7d:8a:82:aa:37:62:d6:db:53:45:
58:59:10:2f:97:ce:96:66:d9:6d:23:e9:45:e4:89:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:1D:FF:61:22:BD:34:B4:15:B6:7B:6F:CD:E6:A8:59:15:04:DA
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/thsd_2EivTS0FbZ7b83mqFkVBNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.160.0/21
IPv6:
2a00:1708::/32
Signature Algorithm: sha256WithRSAEncryption
8b:8d:92:c1:05:6e:83:96:94:ab:93:20:f4:14:c2:64:28:25:
d5:c8:86:f6:8c:ec:ab:5d:f2:df:1c:10:48:58:a5:78:fc:6f:
70:cc:36:e3:8c:ff:a2:05:76:e8:2b:e5:de:f5:e0:06:8c:08:
77:20:95:75:73:0c:9d:16:0d:e8:86:11:a0:04:9a:61:59:34:
96:27:52:43:a2:00:dc:68:fe:e5:e3:e3:08:e4:fc:68:d0:c3:
04:ca:bc:c9:88:87:41:7b:27:c3:ac:79:ec:4e:43:02:57:68:
fb:76:0f:46:c7:b6:b0:70:13:c0:c5:29:9e:28:db:2a:6c:99:
e6:02:74:b4:f3:a7:30:b5:b2:25:86:6b:c7:76:ba:38:ee:44:
5f:32:39:db:78:94:9c:68:9c:97:fa:b6:bc:2d:5f:e1:d0:fc:
cc:53:c7:ed:a6:e3:8c:4e:95:22:ad:26:85:c5:07:1e:88:23:
9b:4e:c4:f7:42:3f:96:c3:34:0a:75:40:55:4b:a7:09:90:96:
0f:5b:70:21:a0:ff:f7:6c:03:18:18:a0:d6:54:83:bf:45:c2:
7b:ea:ed:ad:47:ec:7e:da:c9:49:d6:9a:8c:e6:e7:49:ba:bf:
fb:a3:48:01:e2:db:e5:4b:cd:00:48:f7:a7:36:15:fc:88:54:
a5:d9:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:19 2025 by rpki-client