Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa
File: 5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa (raw, json)
Hash identifier: zgbevUmIAJrzV5Ei+G6fiiOaUat2c7OgWp0BEvn+Gtk=
Subject key identifier: E7:FB:1B:A4:3F:5B:97:67:BE:F5:95:33:C1:AD:1D:C7:57:DE:91:B1
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019425FD39D2D2AC96196C26D5E02FFF6709
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa
Signing time: Thu 02 Jan 2025 07:48:59 +0000
ROA not before: Thu 02 Jan 2025 07:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214286
IP address blocks: 2a14:43c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:39:d2:d2:ac:96:19:6c:26:d5:e0:2f:ff:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Jan 2 07:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fb1ba43f5b9767bef59533c1ad1dc757de91b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:f2:8e:55:d9:12:68:81:2b:d6:f3:90:2d:
ae:cb:1f:89:78:04:88:a8:0a:16:1a:af:4a:e6:fa:
be:2b:f6:95:42:59:aa:d4:9b:08:64:2c:82:59:d0:
b1:c2:d2:6a:41:20:ff:34:04:37:a5:66:3d:25:0c:
80:9a:8a:26:64:94:a3:3c:f0:73:5c:6d:50:47:cc:
cb:d8:ff:61:86:50:40:e6:5e:e5:a5:7b:de:d0:89:
c5:43:fc:71:b5:e8:3f:78:7f:06:99:58:6f:7e:9c:
3c:3d:b6:4a:12:cf:c9:7c:94:02:8f:8a:48:44:31:
f6:57:16:e7:aa:88:74:d2:87:88:d2:47:ba:c4:a6:
56:7b:67:5a:a2:23:23:de:22:bb:f4:64:cf:fc:2d:
23:07:50:7c:8c:e5:8d:b7:d0:6c:ce:71:11:0f:20:
2f:6a:af:cf:ad:49:7d:02:5b:97:98:5e:f6:d8:13:
f6:60:d4:de:4e:d7:09:aa:6b:fe:85:d8:df:cc:1d:
b2:0a:55:46:13:e4:11:6e:70:16:48:e3:c0:af:d8:
0a:e9:f9:2e:3f:48:f6:2c:47:b1:c5:64:ec:55:c6:
25:0b:0c:e4:1d:97:a6:42:f8:43:3a:3a:0a:f6:1c:
60:0e:cb:2a:ea:ae:cf:29:2a:f8:ef:d2:8f:53:5e:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:1B:A4:3F:5B:97:67:BE:F5:95:33:C1:AD:1D:C7:57:DE:91:B1
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:43c0::/29
Signature Algorithm: sha256WithRSAEncryption
73:bf:43:64:16:44:c8:59:a2:47:d5:3e:ef:fa:e8:f3:fc:7c:
ad:37:aa:4e:92:1a:af:e0:6d:77:d7:17:c1:0d:12:58:05:7e:
35:14:8d:e9:e6:d6:a2:4d:21:c9:de:73:0d:b6:47:25:c8:f3:
c7:54:49:98:b8:f2:68:ec:c6:ff:a8:28:c5:42:9b:b0:2b:55:
e9:6c:a8:bd:73:28:28:97:77:c9:64:12:b0:7e:6d:0f:43:02:
ba:20:c8:8f:87:8a:ed:f6:f8:82:e5:87:c4:b1:74:84:23:72:
da:6f:32:28:cb:5f:7d:59:13:5a:19:fe:91:de:27:29:39:9f:
25:53:0e:82:ab:c3:c1:4e:3d:fd:65:cb:38:87:bd:3a:b0:28:
76:20:a6:ed:eb:89:53:c8:fe:1c:54:a3:08:32:88:81:00:01:
22:9f:7b:9d:12:41:74:18:e2:cd:51:bf:94:64:a3:23:0a:3f:
a0:6e:54:c0:6e:4a:28:df:6c:fa:ad:50:8b:ce:2d:e4:eb:a7:
b5:f7:29:57:6c:b0:c8:89:ca:57:53:f4:31:71:fe:c6:38:88:
27:b7:b9:84:e0:e7:8d:56:78:b0:3e:cf:13:c9:d2:0a:83:01:
80:78:76:d3:87:ab:63:16:79:f7:c5:70:db:45:b4:48:dd:58:
ff:c4:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:28 2025 by rpki-client