Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/aZqtIonciFbuAVeQ2dXFcdSrl4g.roa
File: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (raw, json)
Hash identifier: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=
Subject key identifier: 69:9A:AD:22:89:DC:88:56:EE:01:57:90:D9:D5:C5:71:D4:AB:97:88
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 019424B3AD6B64641129E56816E24D69651F
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/aZqtIonciFbuAVeQ2dXFcdSrl4g.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59463
IP address blocks: 84.54.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ad:6b:64:64:11:29:e5:68:16:e2:4d:69:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699aad2289dc8856ee015790d9d5c571d4ab9788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:a5:a7:0f:fd:cc:45:67:fa:29:f9:35:1c:
5c:22:de:0e:8f:df:8b:45:ea:79:6f:1e:66:7c:cd:
ea:fe:00:14:4d:5d:e7:03:63:1a:fc:3d:e5:66:23:
0b:54:10:17:c7:49:ed:de:0d:52:18:15:0e:c3:b1:
57:ad:74:14:3f:b2:00:ca:25:f5:b1:59:26:0a:8c:
6b:ab:f9:e9:50:f7:c8:cc:49:2c:c9:02:12:f0:42:
14:cb:1e:6d:5c:b1:96:e1:0a:a4:dd:01:47:d1:b0:
75:35:7c:87:65:57:27:ea:87:36:ec:6a:13:15:84:
68:ea:fe:41:f7:e3:16:94:5f:f5:82:c6:67:85:10:
05:48:59:6e:45:de:ad:f3:4f:43:83:fe:a1:e1:3a:
f0:c4:37:80:d3:3b:07:e9:77:2e:2a:8f:d0:02:a6:
9d:14:2b:fe:44:0d:32:43:85:fa:bd:b3:52:a5:ed:
7a:6a:4b:34:24:73:c6:75:fa:67:7b:f2:d9:a9:9b:
6e:62:25:27:41:d6:60:6b:4d:78:21:66:b2:ef:af:
1c:de:90:f8:aa:1b:68:d5:10:fe:f2:cb:c0:90:0a:
45:60:b2:cc:01:c1:02:1a:96:90:73:be:27:21:8c:
7d:85:98:6f:25:bb:36:59:69:b8:e1:01:04:32:93:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:AD:22:89:DC:88:56:EE:01:57:90:D9:D5:C5:71:D4:AB:97:88
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/aZqtIonciFbuAVeQ2dXFcdSrl4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.191.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e4:33:e9:e7:66:9a:2c:e4:98:ac:48:c5:1b:b7:cb:93:06:
1d:13:56:be:c2:63:e6:d7:1e:ea:27:1f:8e:28:2d:ad:b3:38:
23:28:5a:d3:be:9e:ff:fb:34:43:5c:4d:e9:d1:9e:41:c5:b6:
0b:70:a0:04:92:b6:0d:c3:78:6c:c9:f2:28:e0:a4:20:9a:bb:
9e:6a:82:dc:19:63:8f:c2:ed:c5:7d:42:5c:22:10:c2:bb:f7:
e8:75:7b:74:c2:b5:31:44:97:fc:a4:d6:99:38:72:ee:97:69:
37:a2:44:ae:c3:e0:23:38:e0:40:1e:95:7a:1c:63:91:88:b7:
ee:e9:25:69:33:b5:a8:9f:51:e1:3c:27:d3:be:67:51:ca:19:
0e:17:49:78:11:14:bd:35:be:d0:d9:5f:d0:ca:0a:e3:3f:83:
60:ba:7d:cf:b0:a0:77:dc:b7:96:52:e3:8c:64:20:e7:f0:e1:
30:c7:2a:cc:b7:18:71:5d:f6:84:86:9c:a2:94:2a:24:a4:6e:
e3:c1:60:c7:ff:c5:11:cb:07:9c:15:25:79:74:38:5b:21:88:
f5:07:a3:16:59:bb:7f:11:78:73:b8:a6:21:f1:2e:ad:41:e5:
05:93:1c:55:5f:db:7a:12:cb:d1:ad:d7:c3:8d:f8:08:4d:8c:
a7:8d:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:07 2025 by rpki-client