Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa
File: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (raw, json)
Hash identifier: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=
Subject key identifier: F9:C1:01:B2:D1:0A:E1:25:34:76:E6:BB:66:83:D3:E8:BB:F6:60:26
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 019424B3AC559EA723453B1DDCE17B4AC680
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43561
IP address blocks: 84.54.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ac:55:9e:a7:23:45:3b:1d:dc:e1:7b:4a:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9c101b2d10ae1253476e6bb6683d3e8bbf66026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:35:51:23:0c:dc:09:7a:e3:7f:a4:64:3e:
b0:85:9f:61:0c:b8:2e:ed:8f:2a:94:06:47:96:7f:
8e:4e:51:92:16:81:e3:e6:9b:8f:0e:5d:8e:fc:81:
2e:32:70:7b:9b:f0:a6:d0:12:9d:6d:3e:15:db:e5:
79:5b:80:f8:f6:ce:c0:21:10:d1:e8:72:f1:4b:ba:
7d:38:dd:90:7e:d8:6b:e3:a0:bf:5c:75:44:a0:15:
8d:1f:cb:ed:dd:a5:c5:6a:67:d8:d6:8e:ec:3d:5b:
02:19:c5:fa:b5:64:d1:51:ce:e4:a7:9a:a6:18:dc:
62:73:2d:92:2a:6d:76:4a:db:79:f8:d0:a4:43:87:
7b:2b:92:04:67:fa:d6:69:cd:63:e8:e7:ca:fd:a2:
18:4c:32:58:25:95:1e:a0:ae:4e:4b:a4:c1:89:65:
73:2d:3d:5e:de:4d:5e:fe:c1:fb:b4:ef:bc:22:2b:
ca:f9:49:4f:c0:fb:9a:f9:0d:1a:c0:7d:b4:9b:f5:
41:86:17:e5:88:7e:83:ba:a6:11:0d:49:fa:44:a2:
c1:a2:c9:34:7a:3b:04:e0:71:d2:af:e6:20:73:6e:
25:28:1f:bf:16:ab:b8:e2:f6:98:3b:1f:1d:f2:ee:
6f:0d:2f:d6:7a:c8:7c:d6:cc:7f:31:69:36:05:93:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:01:B2:D1:0A:E1:25:34:76:E6:BB:66:83:D3:E8:BB:F6:60:26
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.140.0/24
Signature Algorithm: sha256WithRSAEncryption
26:22:c4:3b:41:56:e4:42:4d:1a:66:5e:65:36:5b:db:6d:ee:
10:21:d6:1c:bf:f9:5d:a1:04:3a:9e:43:62:85:cd:b9:73:e8:
73:2b:40:81:c9:58:c7:a0:0b:b5:76:be:d7:49:a3:06:40:e9:
39:0d:cb:32:c2:7a:50:8b:3b:0f:1c:08:70:e5:71:23:96:2f:
9a:b1:be:92:84:39:02:f3:b0:e7:4d:08:81:39:0a:f5:83:c1:
5e:6e:34:ea:54:4d:a8:b5:e6:ad:a8:d8:45:3f:0d:e4:ac:1f:
62:ca:8f:4f:30:6e:89:cd:ec:66:6f:c7:4d:16:a2:dc:d5:79:
56:cd:3c:d5:46:99:0f:61:5a:80:f2:d2:00:ac:d3:35:c0:df:
fb:f4:8a:7b:c8:ff:d4:97:1c:e3:50:0e:ba:06:ce:a5:35:50:
93:bc:aa:81:2e:b5:87:63:fd:13:47:22:f4:e2:55:0c:3f:37:
6a:f7:49:9f:7c:f4:53:dd:cf:73:c8:1c:48:7c:29:a0:0c:91:
db:91:a2:f5:be:ee:08:bc:f2:63:b0:50:97:e9:e1:dc:0f:e6:
0e:6e:16:a3:2f:3a:9f:ec:33:07:9b:09:df:09:cc:3b:bc:09:
6f:8c:0d:65:d0:77:4e:b5:06:69:a5:c7:d4:4b:75:3a:eb:bc:
7c:13:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:35:14 2025 by rpki-client