Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/_As1hISE4fUwVCAvs0BVnXhQCD4.roa
File: _As1hISE4fUwVCAvs0BVnXhQCD4.roa (raw, json)
Hash identifier: zJ5RP70+pw8LBg5tY/zUbPYLP4843KODSCoOJ4Zx6TY=
Subject key identifier: FC:0B:35:84:84:84:E1:F5:30:54:20:2F:B3:40:55:9D:78:50:08:3E
Certificate issuer: /CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Certificate serial: 019421446E3961D115EEA16816BE76B3BD23
Authority key identifier: C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/_As1hISE4fUwVCAvs0BVnXhQCD4.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38915
IP address blocks: 178.21.216.0/21 maxlen: 21
193.203.220.0/23 maxlen: 23
2a00:1de0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:39:61:d1:15:ee:a1:68:16:be:76:b3:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0b35848484e1f53054202fb340559d7850083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:33:27:50:54:41:aa:28:5e:63:9b:21:ba:
1e:dc:8c:07:03:11:9d:4e:6c:bd:db:2a:39:fd:da:
c3:ab:c7:82:f9:6e:68:cc:1e:79:c1:31:da:91:f4:
f2:e6:4e:f4:a0:8b:e3:97:be:3b:a0:95:73:c1:ce:
28:17:37:28:cc:50:3e:5c:6a:35:a5:1b:4b:b9:c7:
cd:74:47:9e:8f:27:79:de:87:98:79:c8:3c:b6:e8:
98:fa:96:a8:6c:31:b8:c4:b7:da:e3:24:21:61:40:
96:3f:19:8e:c2:bb:86:62:bc:71:8d:09:ac:00:2c:
62:f9:4a:b4:76:82:b9:3a:2a:a7:e0:35:9e:46:e0:
fd:dc:a9:47:c0:73:16:e7:d7:41:83:43:dd:ea:8f:
52:4d:44:4c:9f:e9:70:d0:14:ec:af:47:03:86:6e:
80:88:21:2a:b8:3c:4c:93:c5:85:63:dc:e0:ff:e4:
02:a6:aa:1a:fb:c6:0e:c4:48:40:b5:c6:2a:10:ab:
6a:1a:f8:9b:d2:f5:33:24:38:f3:57:4c:d3:0a:4c:
66:61:99:1f:49:1b:92:9b:70:96:69:10:0b:1e:36:
bd:df:22:57:fc:d4:82:63:12:5b:6e:89:0d:b0:0c:
38:da:a0:97:41:22:ef:87:6e:d2:fb:a4:27:ec:04:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:35:84:84:84:E1:F5:30:54:20:2F:B3:40:55:9D:78:50:08:3E
X509v3 Authority Key Identifier:
keyid:C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/_As1hISE4fUwVCAvs0BVnXhQCD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.216.0/21
193.203.220.0/23
IPv6:
2a00:1de0::/32
Signature Algorithm: sha256WithRSAEncryption
54:a1:19:84:1c:84:0e:fb:06:09:10:5b:16:ce:6e:dd:08:4f:
be:6a:1d:0e:42:d4:f5:80:44:69:42:d3:65:47:9b:6e:f0:af:
26:28:55:54:01:b8:72:0e:1d:ca:b8:7c:d7:9a:6d:0c:b3:49:
36:b8:16:00:98:d0:82:f1:5d:69:3a:ce:e1:0e:ca:80:12:27:
99:ec:bd:a2:03:38:b4:ab:fc:8a:00:5f:21:37:23:43:6e:ef:
d7:cf:fa:73:ab:05:1f:14:cb:53:e7:35:9f:fc:a7:52:e5:c9:
b6:9a:ef:14:b2:1d:73:d6:60:8f:1f:2e:22:17:51:f1:91:bf:
06:cf:3f:20:fa:8f:89:3c:70:02:5b:63:fc:e5:83:7e:19:78:
b1:ee:b1:ae:67:52:32:5c:e2:82:32:6e:4c:2b:df:91:88:ae:
0c:f2:b0:be:66:29:70:44:5b:0f:2d:cd:04:29:cc:26:5a:18:
6c:d5:af:b8:6d:03:45:ea:21:06:5a:a5:ec:d5:79:f1:c4:db:
ae:fb:ff:52:d6:1d:fc:2c:93:c0:a6:04:75:da:43:39:e9:fa:
50:d7:d7:f0:7b:84:76:6e:7a:04:45:98:6f:75:1a:04:9b:26:
7f:a4:b8:c8:2f:82:b6:dd:15:0a:10:57:99:ef:2f:71:a1:b4:
fe:de:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:51 2025 by rpki-client