Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/60SN0C5WIf6xee2zdPp6NtBUZT4.roa
File: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (raw, json)
Hash identifier: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=
Subject key identifier: EB:44:8D:D0:2E:56:21:FE:B1:79:ED:B3:74:FA:7A:36:D0:54:65:3E
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 01942747AD0E296DA80D7A5546AB14D8D61D
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/60SN0C5WIf6xee2zdPp6NtBUZT4.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50554
IP address blocks: 89.106.160.0/21 maxlen: 24
139.28.112.0/22 maxlen: 24
185.3.176.0/22 maxlen: 24
2a00:1bc8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ad:0e:29:6d:a8:0d:7a:55:46:ab:14:d8:d6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb448dd02e5621feb179edb374fa7a36d054653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:c1:58:9c:ed:28:64:ac:85:80:6f:60:93:
68:39:f6:92:f8:76:f0:8f:66:f3:3d:50:2a:9a:9e:
6c:69:3c:da:c1:06:31:19:bd:02:40:3d:47:68:bc:
fd:76:21:15:5c:16:23:0d:2d:62:8d:49:c5:35:fb:
6f:cc:31:72:27:15:4a:99:df:ab:89:fc:7b:e2:1d:
b5:ca:f6:f2:e7:32:28:1f:6b:ed:7a:ec:2c:96:32:
3c:54:17:ba:23:e7:90:f6:ec:9d:54:1e:6b:75:f5:
c8:1b:69:f4:69:14:b7:23:58:e0:19:47:72:77:83:
d3:d1:eb:97:e4:6d:be:d5:f7:27:4a:fe:dd:c4:65:
3e:2b:95:13:20:79:ec:dc:7d:5d:05:34:05:60:b5:
b8:12:b1:fe:dd:6e:eb:0b:0d:96:af:55:78:74:56:
d3:f5:d0:6f:6b:23:a9:dc:7e:7d:f0:f0:0a:d1:de:
45:00:eb:b2:f5:9f:1f:e0:1f:a2:af:85:4c:53:60:
0b:40:dc:b8:0e:40:da:8a:a0:d2:15:6b:97:dc:88:
a3:5b:af:c3:a2:aa:af:e6:36:35:55:9f:a9:56:60:
3f:84:d0:2a:0a:65:0f:01:6b:ab:b8:72:d8:76:b1:
e6:58:cf:b2:14:cf:c8:85:a1:df:09:4e:50:a2:24:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:8D:D0:2E:56:21:FE:B1:79:ED:B3:74:FA:7A:36:D0:54:65:3E
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/60SN0C5WIf6xee2zdPp6NtBUZT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.160.0/21
139.28.112.0/22
185.3.176.0/22
IPv6:
2a00:1bc8::/29
Signature Algorithm: sha256WithRSAEncryption
83:37:19:1b:fe:87:a0:db:bd:16:88:ab:71:39:9c:09:82:87:
0d:5a:f6:0f:0c:57:81:f8:90:67:5f:4c:ef:c0:eb:cb:1a:69:
ab:e3:97:1c:a1:79:84:a7:f7:49:36:fa:31:88:b9:8f:3e:7c:
7e:af:fb:3a:38:c8:a1:2c:91:47:45:cb:9b:65:9c:44:74:36:
eb:c8:60:0b:4c:c1:b3:91:3b:d1:fb:2f:65:ef:4d:ba:73:89:
45:63:d4:a4:e9:01:1e:f4:f9:8f:fc:8b:2b:2f:02:93:fa:b5:
c1:89:6d:ac:5d:be:34:7c:26:c4:9f:e2:0e:20:38:b3:5f:04:
cb:4d:62:84:03:2a:4b:3c:2f:15:61:02:a0:5a:88:31:d1:72:
aa:60:c2:da:85:cb:70:9e:c3:2a:de:47:80:7b:1a:ce:b7:6a:
02:54:20:96:74:7d:84:3b:d5:cd:f0:02:70:e8:3c:be:db:3f:
23:82:54:54:bb:79:e2:67:10:6a:f8:e2:1a:e3:fa:f5:b0:cb:
56:ba:c7:14:a7:23:cc:5a:3a:78:ab:d3:b8:44:7b:cf:11:4a:
55:7f:15:a5:dc:43:fa:61:79:3c:5c:4a:c8:3b:60:d3:a7:e1:
63:30:70:cb:9e:a4:7f:95:32:c3:db:8f:12:e1:d5:16:c1:58:
f7:9f:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:15:35 2025 by rpki-client