Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/pbWUlF6kph4C-luLlJFzTT778aw.roa
File: pbWUlF6kph4C-luLlJFzTT778aw.roa (raw, json)
Hash identifier: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=
Subject key identifier: A5:B5:94:94:5E:A4:A6:1E:02:FA:5B:8B:94:91:73:4D:3E:FB:F1:AC
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0194252235B2017E5F3B3339E4EE4FB56E2A
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/pbWUlF6kph4C-luLlJFzTT778aw.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213359
IP address blocks: 193.34.80.0/24 maxlen: 24
2a10:d840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:b2:01:7e:5f:3b:33:39:e4:ee:4f:b5:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5b594945ea4a61e02fa5b8b9491734d3efbf1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:42:1c:e0:5d:0f:ec:8b:78:61:a8:02:0d:
43:97:3e:9b:8c:ff:18:3b:01:30:a8:c7:ae:c5:1e:
16:f9:df:fb:9d:cb:a4:57:9e:00:b5:84:a4:70:8f:
c1:d0:03:cf:0d:26:73:67:67:de:25:85:5c:c5:bc:
2b:8c:b6:0d:55:29:95:6f:a3:f5:53:be:db:2d:7e:
cd:52:2c:b9:fa:85:49:36:a6:f5:87:7d:ff:a3:d0:
ff:78:97:1a:c2:8f:20:9d:ba:ce:a7:ab:d2:9e:f2:
34:e5:73:2d:a7:d4:a6:de:9c:88:b0:02:73:fa:11:
60:56:f0:bf:1c:21:eb:89:44:81:11:19:a5:61:be:
73:33:f8:60:59:c6:91:fe:7c:71:1f:c5:1d:cd:78:
f7:f4:d8:c6:51:fc:6e:92:10:7c:23:3b:35:e4:6e:
8f:ef:c9:66:5a:c2:66:32:63:99:90:90:f2:a8:ce:
0b:f8:21:9c:06:b6:e8:6b:65:da:fe:dd:39:20:7a:
97:d9:ac:a7:13:78:5e:68:71:da:55:25:75:7f:39:
29:9c:2f:b5:6b:ed:48:3d:a2:6d:00:e8:c1:88:ec:
ca:b2:b6:e4:6a:0a:fe:27:6d:de:94:8c:29:d8:6a:
91:da:1b:86:89:3f:6e:6e:91:07:3d:ce:8c:63:98:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B5:94:94:5E:A4:A6:1E:02:FA:5B:8B:94:91:73:4D:3E:FB:F1:AC
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/pbWUlF6kph4C-luLlJFzTT778aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.80.0/24
IPv6:
2a10:d840::/29
Signature Algorithm: sha256WithRSAEncryption
6e:ae:17:60:f1:76:e0:0a:15:56:13:fb:43:db:f0:fa:87:c4:
00:46:81:58:6d:fb:e6:4a:7b:0b:f9:bd:83:4b:69:a9:e1:e9:
40:8d:9b:4a:33:f9:37:14:5e:31:be:48:31:c1:68:54:96:d1:
7e:4f:30:bf:2a:54:38:17:f6:df:19:d7:71:1b:98:45:0e:41:
36:c6:36:ff:23:83:a4:18:05:77:0c:96:f4:66:ad:c2:32:ff:
57:b3:2d:5b:0d:6a:06:db:85:e5:c7:1a:d9:8b:f7:49:49:fb:
d5:b1:e2:06:11:72:61:17:23:0c:fc:5c:df:49:07:96:32:24:
60:f0:a2:a4:5b:63:e3:0c:94:76:9c:fb:65:f3:91:43:e1:57:
46:9c:6e:35:81:26:7a:cf:26:5a:1a:34:30:50:7e:ef:4f:c7:
32:b7:89:7c:8b:af:21:3c:b7:0c:da:d4:49:79:60:db:04:e3:
da:9c:94:39:75:a3:80:81:ee:53:5c:15:e3:67:e8:1f:8a:eb:
a2:34:56:7a:fb:fa:6a:19:53:57:46:be:e6:eb:ed:87:62:af:
bd:f9:64:bf:81:8f:11:85:2f:b1:21:86:3e:c1:a5:95:3d:fc:
fa:b5:54:87:e1:d5:a9:c0:b9:2d:40:38:23:fc:29:04:0c:c4:
5d:4f:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:33 2025 by rpki-client