Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa
File: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (raw, json)
Hash identifier: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=
Subject key identifier: 11:22:E5:F9:B6:7D:EC:BA:AA:12:EF:B9:73:67:30:DB:E1:D6:B2:31
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 01942521B0889C229BD6C3D49B33B4FB44E3
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215718
IP address blocks: 185.206.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b0:88:9c:22:9b:d6:c3:d4:9b:33:b4:fb:44:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1122e5f9b67decbaaa12efb9736730dbe1d6b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:03:f3:4c:6c:2e:cb:a4:b1:5e:02:9b:36:
b8:29:86:01:65:b6:34:2a:c0:6a:a7:4c:b4:4d:cf:
a8:6a:16:ea:72:65:cb:4b:71:bf:0c:47:a0:86:0b:
cd:09:67:4d:93:82:18:e0:a4:6e:da:f2:c3:34:56:
7a:42:29:38:2b:aa:34:de:28:82:52:39:3c:e6:df:
2f:c4:10:96:3b:51:26:d5:79:53:5d:c8:54:36:ee:
62:d0:23:43:d5:9e:55:ba:2a:56:84:a0:b0:6b:fc:
fe:0a:28:08:a8:5e:8b:d8:04:c9:22:b3:bb:75:e5:
8c:47:f1:04:1d:f9:29:9f:b9:b6:ec:0e:0f:cf:5d:
b9:5f:ce:f9:53:60:ae:eb:d9:78:e1:1a:b7:6a:39:
b9:79:e0:e9:fb:d9:20:5e:35:72:65:92:1d:71:6a:
67:19:86:b5:51:ee:0e:12:c9:f6:77:73:30:8b:00:
41:47:54:4a:70:d9:6f:d7:4c:1e:78:18:bc:9c:83:
58:53:b9:09:f1:16:4d:78:d2:3c:5a:1d:04:90:46:
39:68:97:42:a9:1b:56:b5:bd:1c:25:25:2b:04:51:
f3:b3:13:46:e6:36:75:74:ae:b4:86:7e:db:4f:4e:
ef:22:23:24:8e:fe:b1:d8:56:5a:fe:9e:b9:e2:48:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:E5:F9:B6:7D:EC:BA:AA:12:EF:B9:73:67:30:DB:E1:D6:B2:31
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:58:2a:7c:53:c5:81:35:c1:28:17:72:ca:0b:8a:bb:27:04:
c8:b2:59:d7:d0:fc:ea:7a:43:4d:1b:45:96:d6:e6:9c:e7:5a:
bb:af:6e:2b:c1:87:c3:3f:3b:e0:52:63:3b:59:1e:77:dc:4c:
67:f7:8d:4c:72:14:cf:0e:47:30:fb:d1:f0:23:e2:bd:f0:7c:
ff:63:fd:97:26:e0:13:5d:77:a6:e6:d5:a4:37:0d:b3:05:53:
aa:9f:d7:9c:bd:cb:1f:cc:f6:3a:22:e8:d1:f0:82:58:9f:5b:
dd:0f:ce:1c:ec:70:0a:9b:af:1b:cd:d7:66:81:04:23:1b:7f:
a8:3e:e9:97:33:a7:98:f5:02:a9:28:95:78:7f:5e:8c:cd:7e:
d2:c9:36:75:79:5a:c6:97:d9:4a:7a:92:d7:01:90:df:69:fd:
b3:c1:8f:ff:27:46:0b:0b:79:cb:9e:40:95:5a:3c:30:e1:5e:
73:58:e7:65:ab:c7:4b:6d:6b:9f:62:2b:df:65:39:ca:df:5b:
ef:a3:5a:83:dc:d6:59:79:34:09:db:d9:4b:a0:d4:e2:ba:4a:
68:26:47:15:f5:ff:00:50:9e:af:e7:7b:9c:6e:da:0c:be:76:
94:48:4c:23:bb:5c:02:8c:09:d8:87:c6:b1:92:ff:60:a5:fa:
49:e9:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:11 2025 by rpki-client