Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/DL1hBwC058Ly5gbOYmTudqMnhLY.roa
File: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (raw, json)
Hash identifier: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=
Subject key identifier: 0C:BD:61:07:00:B4:E7:C2:F2:E6:06:CE:62:64:EE:76:A3:27:84:B6
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 019426D9F15EECB81C8F46364EF4E319C225
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/DL1hBwC058Ly5gbOYmTudqMnhLY.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205020
IP address blocks: 5.11.28.0/22 maxlen: 22
5.11.28.0/23 maxlen: 23
5.11.28.0/24 maxlen: 24
5.11.29.0/24 maxlen: 24
5.11.30.0/23 maxlen: 23
5.11.30.0/24 maxlen: 24
80.251.0.0/20 maxlen: 20
85.31.64.0/19 maxlen: 19
85.31.75.0/24 maxlen: 24
85.31.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f1:5e:ec:b8:1c:8f:46:36:4e:f4:e3:19:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbd610700b4e7c2f2e606ce6264ee76a32784b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:be:f2:65:15:8f:9a:78:0a:e8:dd:21:89:
3c:eb:dd:9b:86:fe:6d:10:13:d0:4e:74:4e:d4:84:
fc:ee:9d:0d:d1:a6:d3:6f:3f:11:36:c4:76:eb:9e:
89:4e:fc:3f:47:47:16:21:1a:91:ac:40:5f:34:51:
d6:bf:35:0b:0a:62:56:48:10:ea:b7:fb:48:19:82:
b8:a4:dc:7e:75:d9:58:15:63:a9:3a:02:6f:3f:f7:
49:58:8f:f8:27:51:9d:2b:ee:50:51:33:11:39:84:
c0:2d:f8:38:99:60:32:cd:55:ef:cc:77:ce:be:55:
0f:20:62:18:38:96:b2:75:c0:42:36:9c:50:a4:56:
8d:cc:ba:e3:b8:cd:dc:fd:ed:e7:f7:1b:34:e5:2c:
96:ad:77:ca:5e:72:e4:41:fe:1b:f6:70:3b:8d:38:
e3:3e:46:c3:37:0f:a7:25:f3:d0:0e:22:9f:12:e9:
a6:63:99:20:b2:cf:c0:8b:5b:aa:d3:af:8f:0c:43:
f8:54:5e:b2:af:7b:f9:a4:b2:a5:34:34:29:eb:90:
51:5c:fb:70:f4:45:1e:54:7e:ce:f6:62:af:a2:d6:
8b:8b:94:bb:f2:e9:59:6e:1d:81:7f:f0:d6:f5:55:
94:17:6c:7d:bb:f0:88:c6:c8:8e:06:56:ed:c9:25:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:61:07:00:B4:E7:C2:F2:E6:06:CE:62:64:EE:76:A3:27:84:B6
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/DL1hBwC058Ly5gbOYmTudqMnhLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.28.0/22
80.251.0.0/20
85.31.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:59:17:51:30:55:a8:36:5f:bd:1c:3f:75:f6:c8:8c:a1:e2:
ea:02:ea:9c:03:04:0d:8f:e6:ce:4f:ef:71:4d:5d:a6:73:c6:
cb:cc:0d:ca:11:22:1f:80:c4:80:91:fd:89:62:9f:9d:9c:40:
c1:73:45:f6:53:06:83:82:ee:3d:15:00:cb:60:fb:3a:48:e9:
00:7e:b3:e2:33:f5:06:fa:1a:78:e9:a3:58:12:7f:17:46:5f:
02:ff:73:cd:3d:dc:71:b9:83:f5:f5:49:b1:46:52:10:d4:fd:
7a:af:f5:ce:39:53:52:3b:6c:d8:69:7a:8c:db:fe:ba:40:19:
5e:07:52:1d:b4:56:57:9a:f0:81:ce:51:9e:42:5e:a0:d7:0c:
f1:2e:2b:2f:9a:a1:a6:0b:fb:3c:ac:12:83:e5:3b:81:e8:47:
bd:ed:d1:d1:87:e9:35:1c:18:4f:cc:39:fc:63:15:7e:22:cb:
32:59:1a:97:e6:3c:4f:8a:a4:52:13:9b:3e:6b:cd:54:37:56:
6e:67:c5:4d:d6:ac:b8:1a:7f:3b:bf:3c:41:f6:c7:3f:db:23:
2d:dc:e9:70:06:00:4a:19:b0:61:08:84:58:b7:86:4e:ff:e9:
76:b2:98:c9:da:1f:03:7f:9e:c2:6c:fe:17:b7:5a:d4:1d:04:
d2:7d:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:58 2025 by rpki-client