Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iaSstrnsLfSa74yxY9tEW3c5Ayk.roa
File: iaSstrnsLfSa74yxY9tEW3c5Ayk.roa (raw, json)
Hash identifier: SHLtZoWZvJK7wN8gGQJ/oPkupZwLRTUpaweMLB+sb7Q=
Subject key identifier: 89:A4:AC:B6:B9:EC:2D:F4:9A:EF:8C:B1:63:DB:44:5B:77:39:03:29
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195A071D77EBC044FDF84F74F94595DB9FD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iaSstrnsLfSa74yxY9tEW3c5Ayk.roa
Signing time: Sun 16 Mar 2025 19:32:50 +0000
ROA not before: Sun 16 Mar 2025 19:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e5c0::/29 maxlen: 48
2a09:96c0::/29 maxlen: 48
2a09:ae80::/29 maxlen: 48
2a09:b440::/48 maxlen: 48
2a13:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:71:d7:7e:bc:04:4f:df:84:f7:4f:94:59:5d:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 16 19:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a4acb6b9ec2df49aef8cb163db445b77390329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:04:58:60:82:cd:08:cb:30:a4:df:d3:f5:
8e:b2:dd:21:0d:21:8c:50:e2:b4:38:0c:07:e2:77:
c0:bd:38:28:c0:3f:d6:65:ef:20:b4:06:81:c0:54:
3b:e1:8e:b1:87:4c:78:d8:d4:2d:dc:a1:d4:57:e8:
c6:2a:9d:6f:1e:63:4f:42:d2:61:0a:3d:df:a1:7f:
90:3e:a6:77:1b:09:a6:10:eb:78:31:9a:33:14:0c:
e0:e2:92:8a:98:97:3f:f3:5a:cb:62:26:f4:58:0a:
8c:b6:d4:a3:40:2c:c6:58:ac:3d:d9:e7:72:94:c0:
ab:fd:ae:60:fe:6a:87:51:d9:49:c3:a6:6e:27:5a:
0b:99:2a:9c:17:6d:6c:42:80:74:4c:8d:7f:fd:c1:
bc:3a:94:27:7c:5d:7f:49:e7:29:9e:24:8e:36:9f:
aa:2f:00:d3:3c:35:64:2c:06:2b:e4:c8:97:17:ce:
7b:6c:84:55:25:2a:c5:4a:1b:2c:2c:3f:36:d6:23:
bb:ef:4b:1f:96:f6:e7:b7:83:03:a2:5d:cc:19:4b:
f6:2a:ed:6a:e2:68:4b:ed:ff:64:fa:f3:fc:f4:3e:
aa:20:fd:fa:4c:71:31:ae:df:88:21:58:58:2c:b5:
fa:73:a9:2b:e5:13:75:14:f4:ab:42:35:b2:fa:fd:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:AC:B6:B9:EC:2D:F4:9A:EF:8C:B1:63:DB:44:5B:77:39:03:29
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iaSstrnsLfSa74yxY9tEW3c5Ayk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e5c0::/29
2a09:96c0::/29
2a09:ae80::/29
2a09:b440::/48
2a13:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
51:e3:bc:bc:c1:1a:b0:f3:40:07:83:66:52:7c:b3:9d:85:22:
31:0d:d5:3b:a1:93:0c:9d:22:45:89:8d:48:a5:fc:98:af:87:
fa:05:50:95:ec:52:87:df:2f:c8:b4:40:21:bc:af:34:21:ba:
2e:d5:02:8b:a2:bb:74:06:51:a5:81:21:2f:81:bc:7c:ca:47:
0b:81:45:f3:4a:54:fb:46:5a:ff:c3:ae:fd:38:8d:63:35:0d:
e6:6e:ea:74:21:f4:03:4d:30:ab:f7:9f:63:c2:51:73:bc:9f:
50:94:01:8d:9c:58:5f:ab:20:6b:d8:c3:dd:c7:c2:5f:8a:72:
b0:ac:6c:58:08:44:f4:86:8c:76:47:08:83:56:49:95:12:4d:
98:0b:20:17:bb:0f:99:06:9c:c8:c2:05:d7:0e:db:b2:2a:9b:
2f:96:50:f2:a2:93:da:82:dd:64:06:c2:26:c5:c3:08:6e:1c:
01:f4:ee:aa:51:54:27:08:e1:98:02:5e:73:c4:f5:52:de:47:
49:5f:7f:f0:e1:64:43:a2:b5:3a:ae:9f:e5:e6:7e:82:b4:a3:
4b:f0:8e:9a:04:30:36:9f:61:7a:4c:28:f8:bb:00:02:c0:b1:
ad:fc:e2:26:df:b2:b7:87:ee:35:23:b6:ea:34:40:8e:16:87:
4c:28:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:32 2025 by rpki-client