Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/cJzFJRb6EBurjmJ9hvq2xccSDEk.roa
File: cJzFJRb6EBurjmJ9hvq2xccSDEk.roa (raw, json)
Hash identifier: mMiq7V/3Y4gzo/doQBzdeVFdS7yqVlMFwN3QKRnpEsY=
Subject key identifier: 70:9C:C5:25:16:FA:10:1B:AB:8E:62:7D:86:FA:B6:C5:C7:12:0C:49
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 019422FC4DE14CEFB81502152880DDE13718
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/cJzFJRb6EBurjmJ9hvq2xccSDEk.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5619
IP address blocks: 146.192.0.0/17 maxlen: 17
153.110.0.0/16 maxlen: 16
192.146.163.0/24 maxlen: 24
192.146.164.0/24 maxlen: 24
192.146.169.0/24 maxlen: 24
212.18.128.0/19 maxlen: 19
217.17.0.0/20 maxlen: 20
2a02:9c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4d:e1:4c:ef:b8:15:02:15:28:80:dd:e1:37:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=709cc52516fa101bab8e627d86fab6c5c7120c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:29:9f:83:4d:0d:60:d7:71:f4:44:10:5a:
8f:d5:23:31:ed:f4:cd:57:c5:a5:ed:1e:db:34:52:
61:0a:12:93:93:33:1e:75:1c:9c:bc:cc:bc:7a:1e:
39:19:bc:89:43:ab:0f:cc:03:9f:3e:b8:32:f4:ed:
48:17:5c:ea:c8:09:2d:a8:43:13:4e:f4:6e:ec:55:
76:d5:46:73:96:16:34:ac:e9:d1:be:03:fc:65:a9:
76:22:a0:31:b3:1f:fc:e3:0a:a9:36:2a:e7:dc:c5:
df:ea:77:a0:65:8c:58:23:64:22:9e:12:0a:e9:8f:
15:a2:03:df:c6:11:08:8b:ee:f4:c4:b7:3b:35:14:
02:46:2a:a8:c9:b8:2c:0c:95:f6:b7:eb:d3:3d:7d:
3a:0b:d5:11:7d:4d:27:e2:34:11:eb:32:42:20:84:
11:91:db:dc:66:d6:20:cc:83:84:af:ac:b3:8b:3b:
67:5c:a8:9f:85:2b:55:2c:1a:b7:ad:c0:00:ed:08:
ff:b9:08:81:79:a5:a6:65:91:10:57:53:93:3e:66:
48:43:83:e7:23:62:75:13:7e:ea:94:6c:19:69:59:
27:78:4a:ed:6d:9b:ce:52:c1:64:d4:53:93:01:ad:
5e:cb:3d:c1:75:fc:6c:b2:6a:56:2e:9a:67:8b:e0:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:C5:25:16:FA:10:1B:AB:8E:62:7D:86:FA:B6:C5:C7:12:0C:49
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/cJzFJRb6EBurjmJ9hvq2xccSDEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.192.0.0/17
153.110.0.0/16
192.146.163.0-192.146.164.255
192.146.169.0/24
212.18.128.0/19
217.17.0.0/20
IPv6:
2a02:9c8::/29
Signature Algorithm: sha256WithRSAEncryption
63:ad:de:ed:b4:2a:77:00:1e:7e:37:37:cb:49:68:37:72:f3:
33:63:f4:63:b0:dd:cc:05:ee:87:96:0e:bb:8c:6a:ec:cd:05:
4c:0b:64:ed:8a:13:87:51:14:c1:51:93:de:3e:36:ca:3c:18:
db:9e:09:14:a2:5c:01:d8:f9:e7:24:f6:9a:37:4b:60:a8:83:
73:4a:32:ba:78:f2:d1:e0:8b:da:82:bd:2d:b5:a1:00:93:97:
26:ea:e8:73:07:bb:51:4c:6a:44:51:34:4f:9b:3e:94:28:5e:
a7:57:ed:52:d3:d2:26:72:27:95:8e:39:d1:47:6e:f4:37:3e:
34:52:fc:fd:19:1e:0e:b6:cc:cf:8a:eb:68:51:58:7e:65:93:
3a:2f:50:37:33:63:e9:3c:35:c6:88:b5:ec:10:ba:e0:69:a8:
b8:89:27:b9:b0:89:e8:66:bc:8d:ef:c0:ff:5f:c9:79:0b:a2:
84:21:59:df:f9:21:10:9b:32:03:85:ab:d7:60:e2:cd:fd:c2:
7d:67:eb:33:14:83:7c:0b:b6:33:77:8e:c4:54:96:a5:e9:df:
63:64:e3:44:51:73:2d:fa:a4:a7:cc:3d:ad:8f:75:6e:c4:c1:
30:80:32:af:82:78:8e:47:97:23:21:1a:f7:57:05:78:cf:32:
bf:04:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:28 2025 by rpki-client