Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa
File: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (raw, json)
Hash identifier: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=
Subject key identifier: EB:46:5A:3E:20:69:8B:C4:B1:05:38:CE:8D:05:13:F4:58:84:53:64
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019423690417A0AF63EB214E495E03F35A43
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1221
IP address blocks: 153.112.128.0/24 maxlen: 24
192.131.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:04:17:a0:af:63:eb:21:4e:49:5e:03:f3:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb465a3e20698bc4b10538ce8d0513f458845364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:4b:b8:d2:d1:ba:1a:b9:28:a5:ed:1a:1a:
3d:6a:0d:ef:99:98:4f:de:52:0f:51:13:14:5f:10:
ce:60:32:be:74:ba:4b:54:0c:0d:ab:ee:27:f5:4d:
02:d4:fc:a8:67:c9:4a:d7:2f:19:11:ab:dd:90:8f:
fa:f9:16:12:1f:5e:ce:68:ae:c8:78:1a:cb:c4:d5:
59:94:cd:3f:2b:e6:4f:d6:25:19:67:c0:75:2c:75:
5d:cb:ab:f4:18:29:1f:6b:79:d0:2b:7b:8a:3e:6e:
57:21:c0:13:21:07:2c:da:67:d6:02:3f:79:62:54:
4c:07:23:ac:cd:d7:c9:b0:ca:c8:f9:f8:5c:96:56:
fe:c0:f4:54:bd:62:81:74:c1:bc:24:9f:c1:34:74:
01:7a:8a:93:0d:60:7c:59:04:e9:2c:15:43:16:f8:
46:d3:13:7b:95:c0:2c:21:c3:84:dd:9e:75:44:51:
08:b8:f1:28:2c:28:b1:41:db:ef:1d:4a:05:bc:2e:
41:87:18:ea:1e:e0:9c:99:59:0f:89:2b:f7:fa:f4:
67:35:7f:03:d0:0f:ae:de:1a:e1:88:44:7f:54:04:
e3:44:15:70:0b:cf:76:a7:81:7d:e0:fd:72:a5:37:
69:10:b2:3e:52:39:76:c5:e8:7d:ae:f7:4c:40:3d:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:5A:3E:20:69:8B:C4:B1:05:38:CE:8D:05:13:F4:58:84:53:64
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.128.0/24
192.131.25.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:13:37:33:fb:54:f9:d7:37:e9:a2:05:a7:57:d0:14:67:
18:15:c2:f3:b9:56:44:5f:37:04:54:04:53:a7:42:5a:c8:26:
f0:b4:80:a6:c1:09:cf:2f:03:73:9a:65:16:9a:5a:3e:1f:70:
47:96:b8:d2:0c:9d:e5:64:cf:e3:85:f7:70:9c:cf:0a:c3:47:
1d:69:ea:ee:88:5b:8c:5f:cb:c2:1a:b3:aa:1b:ca:b3:20:a2:
56:bb:d1:20:c2:2a:9e:69:06:7c:56:dd:5c:05:fc:5c:19:1a:
14:28:cf:74:74:8c:99:21:90:b1:92:e0:75:77:12:d5:94:6d:
8b:38:6d:e6:7d:76:dc:7c:a2:0a:07:12:b4:8d:78:36:f4:83:
5f:5b:6e:fc:a7:91:e7:67:3d:47:a6:9c:b6:3b:fe:bd:46:fc:
dc:ab:94:6d:b9:41:75:66:2a:6d:0d:b8:b9:e5:71:b2:11:95:
7e:4e:e6:fe:9a:a0:c3:54:3c:53:cf:08:cb:f2:5c:fd:c0:39:
be:08:32:b2:4b:3a:71:05:b0:86:a9:2c:24:4d:1c:09:17:a2:
12:18:a8:11:5e:3d:69:61:da:bd:5a:99:f4:20:b1:05:56:83:
8d:0c:73:ed:9d:e3:2b:2b:e5:2f:68:39:29:bb:a9:c2:3e:65:
10:a6:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:52 2025 by rpki-client