Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa
File: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (raw, json)
Hash identifier: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=
Subject key identifier: B2:E3:F1:49:FA:4D:AE:1E:F3:E7:F4:DA:DB:1E:93:8F:09:D0:DA:C6
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019423D6E551EFE5EB6B02EE0A41065F2334
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 129.217.0.0/16 maxlen: 16
192.35.63.0/24 maxlen: 24
192.35.64.0/24 maxlen: 24
192.35.66.0/23 maxlen: 23
192.35.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e5:51:ef:e5:eb:6b:02:ee:0a:41:06:5f:23:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2e3f149fa4dae1ef3e7f4dadb1e938f09d0dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:d5:a6:2b:de:fd:45:65:99:46:13:c7:9e:
cd:55:d2:69:e4:a1:2b:90:08:1e:ae:95:7e:b3:64:
b0:38:bc:ff:cf:3d:1c:39:88:15:b1:b1:a2:81:14:
ac:9d:50:34:1c:f0:b4:a6:f3:f4:13:43:7a:7f:10:
a4:f9:60:6f:17:65:f6:2e:84:f3:83:d7:20:a1:41:
c9:70:cd:9a:38:2b:c6:c1:11:ed:3e:6f:2e:e9:5c:
5d:fa:6b:f8:70:cd:b1:f4:6e:64:a4:37:31:82:77:
2f:8d:04:ac:82:34:33:6e:02:92:3f:7e:33:fe:e2:
a3:4e:33:51:f8:4a:4f:73:9e:06:93:15:9f:ec:3e:
41:c9:1b:e4:8d:bf:bc:71:43:89:04:94:34:e8:8f:
6a:73:0d:5c:7c:3f:d0:2e:12:08:54:49:c3:61:0e:
95:cd:c1:f1:2b:35:dd:a5:f0:18:29:c4:16:81:23:
e7:05:b6:7b:ab:0a:ae:3c:d3:e9:98:f8:2c:c2:2d:
d9:95:92:86:9e:10:d0:f4:df:a8:f8:77:a6:a9:af:
e0:a0:34:f2:a5:81:0c:09:44:d7:44:50:41:40:0f:
cb:28:a3:56:c1:b0:81:7d:73:83:d6:21:a6:d8:71:
f9:78:00:35:da:68:33:65:07:79:8b:8a:89:64:83:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:F1:49:FA:4D:AE:1E:F3:E7:F4:DA:DB:1E:93:8F:09:D0:DA:C6
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.217.0.0/16
192.35.63.0-192.35.64.255
192.35.66.0-192.35.71.255
Signature Algorithm: sha256WithRSAEncryption
c4:b8:38:c4:4e:be:64:c4:12:2f:4d:ed:32:71:d9:32:db:03:
66:8b:c6:0d:26:4a:6b:20:cf:ad:61:45:7a:2b:aa:55:b2:a3:
93:b7:58:3a:f6:9a:cb:ca:56:07:83:b9:c8:19:11:fd:9d:be:
1f:47:13:93:e6:af:56:87:fe:e6:51:c1:c7:7a:4d:09:7b:7b:
d0:51:92:c0:61:58:a3:b4:c0:3f:c3:82:36:b5:48:ee:76:04:
99:dd:10:90:1a:8e:8d:a0:c2:c0:9a:4b:35:87:36:1f:42:cd:
c4:0a:e3:25:04:f0:32:90:ea:4c:66:7c:f6:bf:1e:55:c4:33:
e5:42:5d:58:75:27:63:e4:9a:c8:dd:96:01:eb:c9:8a:85:17:
fa:c0:07:a4:97:ea:6f:16:fc:39:95:c8:ca:9d:0d:59:b0:50:
26:45:5a:90:28:63:3e:78:f1:64:1f:96:a6:33:70:7a:14:d0:
ab:0c:a1:67:53:7f:5a:2d:ef:5c:42:6b:6c:75:bb:a9:1e:75:
d6:9a:59:62:b7:0d:b3:12:f2:dc:e9:78:8e:ce:b3:07:59:2a:
9c:ed:40:d3:4a:7d:0c:dc:92:3d:dc:5e:cc:81:b7:d3:5e:32:
78:f8:d4:5d:a6:a0:94:e3:a3:89:d7:42:3c:5a:81:44:3a:04:
71:32:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:01 2025 by rpki-client