Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/E5ldtRDNq7PF5yZrAMEvxowWuR0.roa
File: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (raw, json)
Hash identifier: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=
Subject key identifier: 13:99:5D:B5:10:CD:AB:B3:C5:E7:26:6B:00:C1:2F:C6:8C:16:B9:1D
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019420D5D9F121D17043707E223576486FB8
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/E5ldtRDNq7PF5yZrAMEvxowWuR0.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59827
IP address blocks: 185.70.72.0/22 maxlen: 24
2a05:2880::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:f1:21:d1:70:43:70:7e:22:35:76:48:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13995db510cdabb3c5e7266b00c12fc68c16b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:d4:e3:fe:34:8e:dc:6f:4d:15:d6:18:15:
97:77:1f:30:76:dc:14:42:fe:55:d8:9a:aa:cb:0f:
f3:04:64:3e:08:ce:bd:f8:35:ae:b7:15:b6:16:bb:
83:33:49:df:93:3c:a8:5d:37:95:a5:2f:78:d9:b4:
28:45:21:f4:cd:60:a4:7e:61:5e:5b:b2:48:2e:08:
18:67:d5:30:2d:b7:22:99:a0:3a:37:e7:0f:72:6f:
10:ff:06:dc:86:ea:7e:d5:4b:66:48:78:20:48:ca:
28:9a:32:29:eb:22:91:85:9d:d9:db:6d:f3:6e:2c:
6c:2c:83:ac:c7:52:e4:88:7e:60:76:33:35:89:94:
fa:b9:58:3e:00:76:28:da:0b:fe:a1:6c:e2:4c:06:
c9:a8:b6:85:44:bd:bb:c4:e3:bc:31:ea:ad:69:fd:
82:50:0a:e3:dd:2e:77:2d:c1:e2:cc:da:5c:87:15:
58:ef:4a:d7:17:2e:fd:d3:f4:89:e3:66:34:59:e3:
09:13:28:33:1d:10:81:c5:c1:4a:90:70:a2:44:a4:
28:8f:ec:27:d9:8b:da:a2:9c:60:12:7a:78:93:66:
ae:af:3d:3f:b7:41:6d:ab:be:6b:e2:03:8d:82:a7:
f3:55:48:e7:ac:b3:71:55:3e:32:ce:dd:c8:fc:8a:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:5D:B5:10:CD:AB:B3:C5:E7:26:6B:00:C1:2F:C6:8C:16:B9:1D
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/E5ldtRDNq7PF5yZrAMEvxowWuR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.72.0/22
IPv6:
2a05:2880::/29
Signature Algorithm: sha256WithRSAEncryption
5a:b4:27:c0:a6:11:c7:e9:0b:b0:cd:37:44:80:fb:44:b0:e8:
a3:cc:a9:8f:d3:d3:1c:ce:04:65:ae:de:ad:dd:4f:a2:9a:ec:
8e:ff:67:d5:80:3a:53:69:e9:97:8b:30:f1:61:b0:c1:2f:90:
82:70:75:22:f0:92:82:73:a5:58:5d:92:75:a8:8f:64:30:78:
c7:3d:8d:e9:7f:4f:32:e1:59:ef:ee:f3:a9:7e:fa:4e:3d:40:
9f:9b:69:63:41:d1:7c:c0:97:98:0b:ad:3c:34:18:3d:1b:8d:
a3:34:57:b4:cb:40:e3:ee:62:88:34:de:dc:e1:fe:0a:b7:15:
36:3a:d3:f0:05:7f:3d:9e:b6:83:1e:96:59:83:a6:87:2b:2a:
98:e2:cb:c0:fa:eb:a6:4e:4e:a4:f3:ff:41:08:fd:75:36:62:
3a:de:2a:37:ad:bf:f6:df:4f:72:db:50:bc:bd:e6:5e:45:65:
f2:68:73:a0:c4:63:4d:ea:a2:50:9c:c2:c8:46:0f:b9:3f:ac:
8a:c1:bb:be:5b:a4:a5:e0:50:70:86:3f:b4:ed:23:cb:49:9b:
54:31:7a:48:f8:59:d5:90:92:a2:ae:94:76:05:c9:96:8a:d4:
db:05:42:d3:7f:57:31:54:d5:f5:41:0d:39:01:35:f2:1a:0b:
f2:97:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:21 2025 by rpki-client