Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/I5reVL-BXJfY2Z3gT_5fSnkoUTE.roa
File: I5reVL-BXJfY2Z3gT_5fSnkoUTE.roa (raw, json)
Hash identifier: ALXgmd3ykQOOIKQvujh2ml+BuZb8VuXYSCCq+Ev6wWI=
Subject key identifier: 23:9A:DE:54:BF:81:5C:97:D8:D9:9D:E0:4F:FE:5F:4A:79:28:51:31
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369FD2AAD6E8F04E97159D7588B10A5
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/I5reVL-BXJfY2Z3gT_5fSnkoUTE.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215857
IP address blocks: 2a0f:7803:fe90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:2a:ad:6e:8f:04:e9:71:59:d7:58:8b:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239ade54bf815c97d8d99de04ffe5f4a79285131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:6d:bc:80:f2:6a:d7:aa:90:45:91:e6:01:
1d:b4:de:fa:5f:f8:30:a2:30:9f:ea:bd:24:e1:d8:
05:b9:83:6c:48:aa:04:52:e4:25:e4:f1:47:60:9a:
ac:f1:f0:46:cc:07:75:ff:1a:85:1a:44:56:8e:a6:
44:6c:e5:c8:39:ee:1e:c6:bf:b3:9c:39:30:21:4d:
3d:8e:60:6f:97:30:97:33:1a:80:c1:7d:57:6e:ba:
4b:64:ea:76:fc:ee:b5:77:34:89:8c:2f:35:3a:a3:
07:93:ba:03:02:22:0d:0b:2d:49:48:86:c3:61:10:
9d:f7:cc:09:66:24:2c:7b:27:5d:69:f7:f8:bd:3a:
6f:d1:4f:5a:0a:82:3e:e0:49:6c:c8:43:13:db:17:
98:d4:d2:0d:90:bf:dd:94:74:5c:de:f6:4f:a7:fe:
d2:07:5b:3f:a9:2a:09:4c:14:a7:2d:94:bf:08:57:
43:71:cd:91:4c:60:18:68:66:0b:67:44:5e:76:f1:
d5:3e:2a:bc:d7:7d:ae:d8:29:de:d5:8e:f1:39:02:
37:61:1c:0d:07:b0:2e:df:b2:9b:e1:ec:3e:5d:9f:
e0:1a:3b:d8:5b:e3:52:76:19:d2:c4:d6:d2:90:55:
e5:b8:c4:5e:7d:3b:a6:58:d3:00:6e:6a:59:8e:05:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:DE:54:BF:81:5C:97:D8:D9:9D:E0:4F:FE:5F:4A:79:28:51:31
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/I5reVL-BXJfY2Z3gT_5fSnkoUTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe90::/44
Signature Algorithm: sha256WithRSAEncryption
44:4f:21:81:02:a4:10:be:d0:35:40:5a:a1:01:70:29:89:1a:
6f:39:30:26:9e:a4:d9:c6:fd:5e:af:17:ea:bd:94:58:cc:67:
27:1b:00:fa:70:0f:00:a3:db:1c:83:5b:b8:b5:02:d2:fc:2a:
1c:7d:65:df:ed:9e:c0:82:3a:d4:eb:35:8c:9c:ba:a7:ed:19:
b4:4d:f2:68:3b:df:c2:6f:3e:85:dc:3d:43:4d:7d:43:db:7d:
2c:0a:a5:6b:7b:3c:66:b1:77:cf:8a:a5:6e:b8:cd:ff:89:6c:
73:07:68:74:71:1a:5a:2c:70:75:a0:86:f4:1a:e1:ca:cf:a9:
c2:78:8d:e4:e1:62:b9:99:62:92:41:6a:0d:d1:1d:8b:51:d7:
6f:56:24:89:a8:11:6c:74:1c:b1:44:ff:57:c9:5f:af:f4:a0:
ed:af:f3:d0:e2:d2:1b:41:65:12:be:bf:09:b6:b3:ee:bc:02:
a5:98:05:db:71:ac:51:28:4f:0e:8e:28:a1:78:f9:83:f6:3b:
17:e9:f3:25:c6:41:4f:8a:e7:e7:1f:f7:bf:be:eb:e6:e0:b9:
87:4b:ca:5e:c2:25:ee:1c:fb:f7:ae:5e:87:71:80:5e:6e:08:
8a:fc:c8:a7:3c:99:54:71:8d:5b:f5:69:06:fc:dd:47:5a:77:
43:c7:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:58 2025 by rpki-client