Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa
File: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (raw, json)
Hash identifier: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=
Subject key identifier: 45:5D:4E:08:EE:AB:55:84:51:B5:39:19:DF:0A:1A:45:D0:4A:3B:A1
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 0194214460FDD02B47711F2D448AA21DF41A
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51048
IP address blocks: 31.210.24.0/21 maxlen: 24
64.253.32.0/19 maxlen: 24
185.2.196.0/22 maxlen: 24
2a03:4300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:fd:d0:2b:47:71:1f:2d:44:8a:a2:1d:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455d4e08eeab558451b53919df0a1a45d04a3ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:9d:9d:01:b5:5c:62:cc:b6:e1:e2:cd:c1:
e5:7c:3f:32:a3:17:c6:f9:97:c7:ce:d1:03:0d:76:
61:4d:41:7a:0f:3b:9e:59:e1:87:ff:5c:f2:69:44:
8f:2e:c5:6a:76:d7:97:dd:cc:d9:b1:0c:99:bc:73:
02:12:08:b9:91:bc:62:68:74:4d:e9:fd:b4:99:d9:
0b:eb:af:f9:7e:3d:0f:a3:cb:ea:d6:be:6c:6f:d9:
03:9b:94:9a:91:68:1a:e0:79:6f:6d:07:87:52:2a:
31:8f:50:c7:d7:03:45:b8:28:ba:16:43:7e:18:85:
43:36:7e:a2:84:47:d4:f1:d1:fd:ab:f2:f2:f9:03:
8e:bf:45:2e:f2:fa:2b:f4:70:06:7b:00:56:6b:d4:
f2:4e:84:bb:c2:ac:ec:2e:7e:7f:39:9c:84:ca:3e:
04:48:e7:7a:65:ad:7a:9a:17:eb:f8:66:a5:b0:40:
52:00:0a:0a:b0:18:8f:c8:85:e2:c3:d4:3a:db:67:
1b:a8:35:0c:88:4d:f7:27:20:28:f9:2a:c5:3a:1d:
95:01:51:ff:86:2a:ea:88:e3:b8:f3:86:5b:19:14:
0d:a9:9b:97:20:83:ec:bb:0b:0b:d1:13:49:cb:09:
ce:a7:07:9b:be:5b:b7:89:50:d3:36:cb:21:3c:99:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5D:4E:08:EE:AB:55:84:51:B5:39:19:DF:0A:1A:45:D0:4A:3B:A1
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.24.0/21
64.253.32.0/19
185.2.196.0/22
IPv6:
2a03:4300::/29
Signature Algorithm: sha256WithRSAEncryption
74:2f:7f:ba:72:7e:71:45:0b:85:b4:82:9e:40:30:1b:9c:f7:
57:71:85:40:f8:bc:4b:d3:f7:c6:01:a6:f5:f7:0a:ab:04:b7:
6c:e6:c7:42:69:7b:6f:75:4e:4b:ae:2b:90:bc:ec:37:7d:a6:
9d:1a:35:0e:c6:6c:88:7c:ae:89:c9:15:7a:4c:35:63:c2:af:
01:7f:05:1d:7e:06:42:c1:69:b3:d5:5c:51:fc:7b:4f:29:a0:
b1:40:30:97:fc:a0:6f:cd:e8:b4:f4:11:74:dc:c3:62:1a:c8:
42:4a:e6:97:c9:82:89:5e:2f:85:46:ef:f5:df:e8:ed:e0:56:
11:2e:c9:77:d1:6c:31:a2:38:5e:f8:b1:08:cf:a6:92:31:d4:
a2:72:a8:66:92:b8:18:27:0d:00:5e:e3:46:a4:6d:98:59:50:
c6:ba:ae:c9:0c:59:ee:f1:73:1b:ca:0a:ac:02:fc:93:95:45:
ac:1c:b1:d5:ff:05:b9:db:04:5a:9a:ce:b1:ad:0d:87:0d:c6:
1f:67:8f:a2:a7:76:94:0b:08:1b:b3:0a:53:bd:25:0a:54:d8:
44:22:ec:e5:e9:4f:6b:71:ef:9b:db:bc:d8:77:74:da:7c:10:
5a:fe:a1:8e:1d:5d:40:ff:31:2a:49:a5:c8:09:ee:19:ad:3b:
a0:61:0e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:23 2025 by rpki-client