Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa
File: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (raw, json)
Hash identifier: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=
Subject key identifier: AD:25:C3:61:D0:E1:B4:66:3A:98:08:63:D9:8C:79:74:03:26:F5:76
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019424B3D760305EAF1ED134185BDA45508E
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 80.69.66.0/23 maxlen: 24
85.10.156.0/22 maxlen: 24
85.158.254.0/23 maxlen: 23
2a01:7c8:f0::/46 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:60:30:5e:af:1e:d1:34:18:5b:da:45:50:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad25c361d0e1b4663a980863d98c79740326f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:53:01:3c:f0:94:a1:c6:44:98:9d:64:f7:
1a:db:1c:28:49:4a:fc:dc:39:ee:a3:47:f7:74:4d:
b4:9a:7e:ed:c2:b1:58:95:2c:14:ad:82:3a:2e:27:
af:f4:7d:a3:d4:d2:3f:b2:c9:62:9e:0b:e2:9b:7b:
73:ad:e7:2a:08:21:a0:5e:e7:19:1a:c2:66:48:c1:
a0:cc:23:ee:10:39:23:40:62:01:fd:03:aa:8f:f1:
6f:2e:8e:63:1c:cd:2c:6a:f5:97:3c:89:a2:16:70:
5b:58:9a:d1:5e:9e:7a:56:67:05:7e:4b:8f:45:b8:
10:d7:7b:68:20:86:98:15:12:cd:f6:34:7d:57:05:
45:1a:18:68:09:4e:20:32:6c:45:9e:f8:c5:b4:30:
12:02:86:d1:e1:c1:73:bb:1f:c7:6c:ff:be:4c:85:
9b:cb:bb:51:a9:eb:d5:ae:15:ee:e4:4e:d0:3f:53:
af:32:e6:1e:2a:d8:c3:58:92:06:46:d3:be:00:bd:
3b:b0:31:7a:d8:5e:a2:a2:cb:6a:64:99:16:f9:ee:
42:2e:e6:fe:b6:48:00:63:a6:a7:81:49:75:e3:cf:
ba:11:6b:cc:df:17:d9:99:05:58:82:27:2d:27:12:
29:8f:fd:36:c1:fe:dc:9f:b6:3c:c8:10:11:af:4f:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:C3:61:D0:E1:B4:66:3A:98:08:63:D9:8C:79:74:03:26:F5:76
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.66.0/23
85.10.156.0/22
85.158.254.0/23
IPv6:
2a01:7c8:f0::/46
Signature Algorithm: sha256WithRSAEncryption
73:50:df:9a:de:a6:16:4a:12:b1:ec:5e:f7:0a:12:a0:d3:51:
93:30:6f:d9:eb:2b:5b:cf:a1:e1:db:4d:f2:06:da:5e:65:47:
20:1a:9a:19:e3:e5:f8:be:e8:62:23:35:68:ba:4b:b7:79:b3:
2e:9b:cd:86:66:1e:e8:76:63:67:77:cf:da:d0:e4:57:e0:ae:
37:98:6e:26:75:c3:9f:46:9c:19:e5:5a:a3:4f:68:84:db:e5:
fc:ce:ac:32:7a:00:7b:4c:0b:3d:8a:18:c5:be:f3:e4:81:1b:
f6:f9:76:1a:9b:e0:c6:5f:1f:4e:97:35:64:b3:7b:80:35:fe:
00:95:4a:d8:73:38:3d:64:50:29:39:5c:9a:f7:00:d8:7c:b6:
6b:0a:4e:0c:4e:8f:26:9d:5b:c6:16:ac:8a:a0:c3:d4:87:26:
f3:2f:6b:62:f7:76:51:d5:b7:82:33:80:1e:43:a2:22:79:ae:
00:72:7e:27:39:7d:ac:82:f6:c7:48:08:bb:3a:37:bd:33:87:
5d:f7:29:51:f9:fb:5b:24:31:42:20:86:15:35:b6:07:83:58:
da:23:60:bf:4a:55:dd:c9:6a:26:4b:2a:7e:c0:fb:dc:09:48:
76:39:3c:87:4d:d5:88:38:69:85:b9:3d:ce:51:14:cf:20:ef:
fe:85:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:30 2025 by rpki-client