Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/5gxDURtK1rmOAdh1eWuh-NkY76k.roa
File: 5gxDURtK1rmOAdh1eWuh-NkY76k.roa (raw, json)
Hash identifier: QaQOgPlbLBzFETMJyWwYJQCd8vML1MyClKfr5uYQDoc=
Subject key identifier: E6:0C:43:51:1B:4A:D6:B9:8E:01:D8:75:79:6B:A1:F8:D9:18:EF:A9
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 0194252182CEF8A0B5937918D45CADF144B3
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/5gxDURtK1rmOAdh1eWuh-NkY76k.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29063
IP address blocks: 193.221.84.0/24 maxlen: 24
193.221.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:82:ce:f8:a0:b5:93:79:18:d4:5c:ad:f1:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60c43511b4ad6b98e01d875796ba1f8d918efa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:4c:3d:8e:4e:9c:64:1d:19:d8:cb:7b:27:
b5:08:15:97:c7:ae:e8:a4:67:57:0f:20:47:c0:16:
b9:06:e3:5c:6a:54:e0:47:14:8b:a1:52:16:47:6f:
bc:de:b1:cf:80:be:8d:e3:75:cd:0c:42:5d:fc:2e:
9f:bf:6c:4f:01:ce:a4:b9:08:53:da:55:07:e6:cb:
32:c1:3d:f7:d0:b8:d6:95:14:ab:72:f6:03:83:26:
c2:aa:bc:c1:e0:05:f4:77:5b:d6:0d:bd:7e:9a:a7:
c4:3e:4f:d8:49:9c:13:f0:4e:85:b1:ec:eb:2f:0e:
39:4f:01:fb:c0:a4:d1:0e:2e:fe:64:cf:9c:a7:30:
e9:f9:d0:58:52:35:21:0d:13:7b:73:68:a6:01:eb:
87:b9:b5:11:49:ae:0a:88:34:da:a8:c4:18:31:2d:
16:0a:02:9a:cc:f6:80:2b:97:fc:b7:73:c1:ab:05:
12:96:ba:0d:b6:3e:dd:be:89:79:bd:43:16:d4:a5:
bb:66:f8:6a:59:a9:26:62:eb:09:e8:83:8c:e1:ec:
aa:fc:37:be:54:fd:53:58:6e:3a:8b:33:ff:bb:7e:
7d:75:aa:70:40:80:9a:38:cb:0d:65:47:0e:78:a9:
24:93:a0:be:66:f4:a7:8e:e1:a6:5a:52:be:bf:3c:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0C:43:51:1B:4A:D6:B9:8E:01:D8:75:79:6B:A1:F8:D9:18:EF:A9
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/5gxDURtK1rmOAdh1eWuh-NkY76k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
62:30:31:e4:13:ef:26:ca:5b:aa:9c:eb:e2:1e:aa:c4:7f:32:
bf:82:94:20:07:f4:0c:27:3d:30:28:9b:4c:29:e3:88:46:92:
95:2c:31:c3:90:aa:09:34:5b:18:5b:3e:70:7b:0d:ad:c6:65:
7e:16:5c:c8:4b:2d:dd:91:bb:91:81:ae:9c:ef:fd:65:52:ff:
ad:71:0a:a1:1a:33:a4:28:92:4f:8b:e2:fa:61:27:20:37:d4:
b4:c7:ba:3b:d1:3a:5e:d3:49:9a:97:86:db:ca:26:b6:7a:db:
f7:94:ef:08:61:93:4b:62:83:ba:b1:16:50:54:33:e9:4b:69:
94:b3:78:f9:16:89:1a:69:f9:6c:5d:32:e2:21:ce:ca:7d:c3:
ce:0e:1b:44:6f:a0:0d:f6:cd:2d:a3:e7:4a:eb:64:be:45:a2:
32:f6:2b:7c:c7:5e:c1:1f:32:19:0b:90:c9:40:21:35:d0:ad:
f6:b6:4f:a3:ac:3a:3c:1c:02:5a:05:d9:93:cc:e1:66:34:0c:
0a:25:e8:c9:16:ef:4a:9f:2c:08:44:cc:2a:b4:1f:80:ab:ca:
68:c0:06:00:76:92:b2:37:12:50:4b:78:66:da:27:a4:15:8a:
b6:60:54:67:fd:30:35:2d:59:44:c8:61:ca:bd:3c:5a:57:97:
2c:0b:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:36 2025 by rpki-client