Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/6PsTHYIIX51kdSojaJW-z28646w.roa
File: 6PsTHYIIX51kdSojaJW-z28646w.roa (raw, json)
Hash identifier: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=
Subject key identifier: E8:FB:13:1D:82:08:5F:9D:64:75:2A:23:68:95:BE:CF:6F:3A:E3:AC
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 0194520909225CC6BA670C40B6005E5F7584
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/6PsTHYIIX51kdSojaJW-z28646w.roa
Signing time: Fri 10 Jan 2025 21:05:11 +0000
ROA not before: Fri 10 Jan 2025 21:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.19.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:52:09:09:22:5c:c6:ba:67:0c:40:b6:00:5e:5f:75:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Jan 10 21:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8fb131d82085f9d64752a236895becf6f3ae3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:db:eb:87:61:9c:19:eb:bd:17:5c:0a:74:
3f:2b:c4:6f:ba:0f:e1:70:1c:38:1e:5b:bf:ce:aa:
8f:91:2f:9f:e5:22:b2:dc:e9:cb:88:ab:5a:4b:0b:
5e:84:2f:b7:01:35:d8:aa:7b:e4:aa:68:ee:a1:05:
3e:ea:b0:ef:fa:66:4b:cc:42:95:6c:2e:96:d9:f3:
21:f7:9d:9f:52:2a:dd:f0:06:08:76:48:32:d5:e1:
02:f7:ff:bb:03:51:a7:bd:b2:4f:dc:97:5e:f6:ef:
38:36:a7:45:d2:c9:7b:ae:96:81:22:bd:51:78:98:
46:9e:a7:82:6f:5b:28:80:c8:56:f6:eb:2b:d4:a5:
2c:fd:20:8d:9b:0e:1b:33:2d:a8:2d:f3:0c:f4:51:
46:dc:57:ef:41:db:72:ec:3c:8d:ce:e1:4f:d0:28:
76:c4:1c:be:f1:70:78:bc:3c:11:c7:8c:4c:fa:8b:
b4:49:51:ac:2c:7d:21:55:1e:e3:5e:50:5c:de:a2:
d2:ca:e1:ee:d6:a2:a6:ef:2a:15:29:4a:3a:68:ae:
ce:d1:80:af:2b:bf:aa:8d:c7:72:21:9d:17:b3:cd:
39:d1:3f:66:1f:52:84:98:71:b8:92:03:3a:14:ec:
8e:48:88:0d:e5:c8:af:2d:1c:3f:6f:36:56:c3:06:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:13:1D:82:08:5F:9D:64:75:2A:23:68:95:BE:CF:6F:3A:E3:AC
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/6PsTHYIIX51kdSojaJW-z28646w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.33.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:64:93:6e:0f:50:08:08:32:de:b4:ba:62:34:bb:7e:46:e3:
29:03:51:0c:dd:47:60:e4:2b:55:4c:3a:70:2d:4f:71:2a:2d:
20:a2:aa:61:5b:89:0a:61:fd:4b:3b:d9:ff:8e:79:e8:de:03:
62:74:92:de:92:90:a6:1b:b8:2b:84:a5:0f:1d:20:b9:47:0e:
a4:55:a7:1a:6b:ca:05:8f:89:61:f1:ad:b8:16:60:c0:1d:6a:
cf:ac:2c:90:d6:56:cf:87:a7:db:c2:50:a6:0a:8a:d8:cb:63:
57:eb:cf:cf:67:f1:4d:95:3b:e5:f0:8f:48:81:b7:27:fb:04:
5f:b9:9c:22:c6:92:42:53:08:10:30:a3:eb:1c:ca:df:a2:1f:
d4:d2:35:4e:03:bc:f2:2b:1d:ee:4b:4b:a8:7c:35:32:9e:37:
5d:06:0f:a8:de:cc:31:03:d7:36:a7:23:34:6c:a9:63:2c:8e:
97:33:3a:46:b6:3c:96:19:4d:2f:9b:bc:ea:c3:3c:56:b3:43:
35:27:88:b8:10:99:3d:42:45:41:18:73:77:44:8f:04:b3:4d:
70:7d:37:a8:3a:cb:da:f0:ed:80:1c:1d:b3:2a:01:48:53:e8:
5d:5c:07:99:5a:b8:13:3c:c9:f7:1f:bb:4f:18:76:46:8e:1c:
c6:2b:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:22 2025 by rpki-client