Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/5LHo1rIxEBH1YyvcCV5J0OCLikI.roa
File: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (raw, json)
Hash identifier: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=
Subject key identifier: E4:B1:E8:D6:B2:31:10:11:F5:63:2B:DC:09:5E:49:D0:E0:8B:8A:42
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 019426D90DD99B3C6FFEF9EF683FF68DB1CA
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/5LHo1rIxEBH1YyvcCV5J0OCLikI.roa
Signing time: Thu 02 Jan 2025 11:49:06 +0000
ROA not before: Thu 02 Jan 2025 11:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209429
IP address blocks: 45.66.72.0/22 maxlen: 22
2a09:6540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0d:d9:9b:3c:6f:fe:f9:ef:68:3f:f6:8d:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Jan 2 11:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b1e8d6b2311011f5632bdc095e49d0e08b8a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:94:82:a7:1c:ca:20:30:c7:1d:ff:34:98:
86:7f:f2:a6:e5:98:73:fa:80:33:1f:19:3f:7a:a3:
c1:0f:c2:43:77:b0:b0:a9:4a:13:25:ef:49:88:e5:
9c:ab:8e:51:8e:22:a0:9d:8d:ac:28:5a:68:35:94:
b6:18:2f:ef:82:c6:bb:94:cd:66:b9:8d:e8:4c:df:
d1:4a:2b:61:68:b3:9c:1a:e2:59:dc:6c:fa:34:b8:
34:b3:25:77:4e:a0:c4:aa:4d:ae:10:fc:07:02:27:
57:a8:2e:57:73:80:41:1b:5d:ac:60:13:cf:7c:34:
89:b3:bb:06:92:91:02:7c:ea:8b:69:39:c0:93:74:
6a:a8:a3:ad:c9:b9:4f:c3:a6:b1:64:76:8f:c7:b7:
0d:32:59:38:f6:13:d5:a3:2f:40:e2:fb:e1:3e:a9:
e9:6c:99:73:4e:e1:56:b7:ad:5f:4f:92:88:24:7e:
3f:fd:85:a7:36:ba:8e:9d:b6:66:07:d0:1e:a4:42:
cc:d3:c5:29:94:a1:2b:f9:e9:2c:6c:40:10:ff:7a:
03:79:6f:7c:1c:7c:cc:b0:ae:50:a9:d9:20:6c:7e:
71:50:b9:62:6f:26:cb:05:e8:42:da:42:30:c6:dd:
ef:42:91:7f:20:eb:03:bb:ef:d5:9b:b1:63:61:f1:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:E8:D6:B2:31:10:11:F5:63:2B:DC:09:5E:49:D0:E0:8B:8A:42
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/5LHo1rIxEBH1YyvcCV5J0OCLikI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.72.0/22
IPv6:
2a09:6540::/29
Signature Algorithm: sha256WithRSAEncryption
b8:1a:b7:d4:82:b8:61:20:9c:06:77:42:ee:69:49:b7:81:85:
48:ca:bd:81:98:16:5b:c0:ab:0c:a5:e9:ef:eb:5c:dc:ad:ab:
d0:08:9b:40:82:b0:c9:a2:dc:68:1a:13:dd:a5:f0:2e:ff:86:
0e:75:60:02:01:78:80:98:2b:a2:cf:8b:02:20:8a:c0:6e:a9:
57:c5:db:34:22:ef:ec:78:a7:f6:a2:73:90:fe:f1:fe:b7:89:
2c:0d:74:01:3a:5a:6c:70:e7:09:9e:4a:64:94:5f:e3:e7:4d:
66:cf:6d:25:24:b6:72:bb:1c:5b:6e:9f:5c:a7:65:4a:f1:59:
4d:86:8e:33:3b:ec:c2:91:9a:9d:4d:37:ee:73:e6:90:a4:cc:
61:95:a5:a6:e1:1d:9e:2f:00:3f:af:76:25:07:1a:51:a9:13:
e2:d2:80:94:60:11:b4:34:72:8e:ad:91:86:69:03:df:54:42:
d7:28:d6:e8:f5:a5:75:3d:dd:96:1e:4a:1e:f7:b9:02:e7:b3:
e3:3d:39:91:ba:dd:8d:6f:6d:e1:1b:32:ca:40:c6:0a:6f:16:
98:74:08:ca:8c:7d:c9:9c:67:00:68:f9:47:07:e0:59:38:39:
43:cc:0b:1e:9f:76:c1:80:64:26:db:eb:f5:49:fb:5e:6f:82:
d1:4a:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:31 2025 by rpki-client