Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa
File: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (raw, json)
Hash identifier: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=
Subject key identifier: 37:99:73:35:8F:C0:48:7C:EB:2B:11:36:F9:CA:FE:74:ED:0C:85:75
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 0194236A47D46AC419D487F526FD666B5523
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12315
IP address blocks: 185.215.40.0/22 maxlen: 22
193.254.214.0/23 maxlen: 23
213.34.32.0/19 maxlen: 19
2a04:c580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:d4:6a:c4:19:d4:87:f5:26:fd:66:6b:55:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=379973358fc0487ceb2b1136f9cafe74ed0c8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:89:34:84:9f:0e:9b:72:b6:73:b0:04:55:
5c:84:b1:7e:ce:b9:32:b5:ee:43:c9:c3:22:86:1d:
e8:70:da:a1:a0:b9:d3:5d:de:b5:86:35:94:49:ef:
35:08:a4:9a:d3:81:ad:fc:58:c0:28:5f:53:6e:07:
41:57:52:25:80:8a:a0:d7:46:52:01:34:3b:69:1f:
d8:87:73:79:f9:b9:35:df:ed:ac:b0:b9:37:4e:03:
73:30:69:5d:fd:74:a6:b5:a3:c8:2e:b3:a9:1d:f4:
19:66:04:19:37:85:e0:1a:c8:e6:b2:c2:90:82:83:
a0:78:b3:f4:3f:95:1a:0d:02:97:9e:a0:d2:0d:f5:
c2:eb:bc:05:d1:ed:ab:ed:74:d8:2e:c6:6c:7d:ab:
1c:c7:5c:87:e9:1a:ad:8b:44:2a:68:45:e5:05:f5:
3f:70:02:cb:75:6a:33:90:be:77:51:8b:9d:47:84:
e5:6c:d2:91:24:b7:cb:d5:41:0f:46:07:88:03:70:
b9:20:27:23:56:68:53:b1:e8:cf:a3:4d:5a:f4:b0:
d6:e1:c3:69:a4:32:90:64:00:f1:93:3f:28:15:b9:
69:3e:f5:62:00:0d:d4:d7:85:b2:48:11:6c:7a:22:
41:03:45:ee:d0:c4:20:8e:32:d1:43:f3:39:a9:2a:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:73:35:8F:C0:48:7C:EB:2B:11:36:F9:CA:FE:74:ED:0C:85:75
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.40.0/22
193.254.214.0/23
213.34.32.0/19
IPv6:
2a04:c580::/29
Signature Algorithm: sha256WithRSAEncryption
5c:f8:2f:fa:11:73:10:74:d0:09:f8:7c:40:3b:5d:83:ae:64:
1d:d7:aa:6e:27:20:60:bf:50:ec:68:60:24:63:52:0d:71:40:
7a:3d:28:c7:cb:51:36:e0:f6:70:94:f0:af:f3:75:fd:dc:64:
86:6e:7e:3f:17:f3:f7:1b:a3:b3:e5:ed:c7:af:ce:e5:d8:e3:
1e:35:a9:66:8b:17:61:81:14:59:c4:9c:f3:77:07:7a:88:aa:
b2:4a:27:3f:88:a4:88:51:5b:d1:65:2b:ba:06:51:7e:ca:49:
7b:90:df:90:54:1e:cf:70:5e:71:bc:8e:4d:2a:80:ad:63:37:
3b:4b:52:dc:7f:8d:0c:0c:81:87:ff:af:d3:f2:91:4c:c4:f0:
d2:31:75:ec:19:b8:42:8a:54:92:07:4b:54:0d:59:66:01:f4:
af:2d:a5:7e:83:70:9a:10:73:db:ab:b5:05:10:f5:6f:e0:13:
9b:7a:0a:b9:7d:9f:3b:99:35:09:90:e9:08:47:5b:e3:a8:41:
6e:0c:b4:77:93:8d:71:d7:b9:94:c3:e0:c8:09:e3:90:11:f7:
7b:c5:03:41:97:b0:16:b2:b7:d1:2b:c3:08:41:80:96:04:8c:
4c:f7:b0:75:75:68:9c:8c:7c:c2:64:d2:b4:27:a6:14:eb:cc:
1a:b7:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:58 2025 by rpki-client