Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1alnEIjoVasMbBMK1V1H-6P-Lsw.roa
File: 1alnEIjoVasMbBMK1V1H-6P-Lsw.roa (raw, json)
Hash identifier: wBsDMzM0Z27Jh9FWwqXRv8wo9+RcaN59uBeDwjCkaZ0=
Subject key identifier: D5:A9:67:10:88:E8:55:AB:0C:6C:13:0A:D5:5D:47:FB:A3:FE:2E:CC
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5CD5155F12D41C7B130FB01EF834
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1alnEIjoVasMbBMK1V1H-6P-Lsw.roa
Signing time: Thu 02 Jan 2025 09:50:23 +0000
ROA not before: Thu 02 Jan 2025 09:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13056
IP address blocks: 37.76.160.0/19 maxlen: 19
78.132.128.0/17 maxlen: 17
91.202.20.0/22 maxlen: 22
91.202.20.0/24 maxlen: 24
91.202.21.0/24 maxlen: 24
178.75.64.0/18 maxlen: 18
193.33.62.0/23 maxlen: 23
213.135.128.0/19 maxlen: 19
213.135.128.0/24 maxlen: 24
213.135.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5c:d5:15:5f:12:d4:1c:7b:13:0f:b0:1e:f8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5a9671088e855ab0c6c130ad55d47fba3fe2ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:b4:b3:df:1c:a4:bd:21:a4:53:ff:0a:8b:
88:84:f1:d8:a7:29:e7:ca:c5:ae:e9:d3:ea:e4:ec:
f7:dd:08:4d:9b:fd:81:42:13:2d:eb:5b:17:83:67:
2f:60:16:69:07:c0:1c:21:ac:a9:ec:6a:0b:1f:81:
58:f9:d9:7a:99:70:b2:c0:53:20:2c:e1:58:8c:4d:
23:17:88:0e:2a:a7:fc:28:0d:4d:3c:07:8a:82:22:
1c:be:6b:32:3c:a9:ca:d3:90:e8:b2:ce:2e:73:7d:
8c:a7:e0:cc:7d:8f:1e:95:ec:f2:15:a6:16:d1:10:
82:cc:0d:9c:2c:ed:a0:64:7e:2d:7b:f3:c0:26:cd:
7c:3e:4b:5f:dd:4d:b6:51:2a:d5:51:9e:14:2c:ad:
cf:fd:09:23:1f:d3:29:30:b9:ad:8b:77:65:55:bb:
5a:0c:ff:76:26:a0:bb:47:a8:9c:88:4a:0b:b2:70:
c5:0e:60:51:b0:9f:a5:08:cc:d7:25:57:19:4c:08:
3f:b9:59:be:af:a0:79:63:d1:e8:e5:2f:d2:9a:29:
e3:e7:fa:24:5e:bb:74:df:d3:02:26:75:11:5b:df:
54:ca:e1:56:9c:3e:2e:de:7d:e9:59:ae:56:5c:2b:
b6:40:15:1d:5a:a5:09:7e:e0:e0:ff:77:dc:72:7d:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:67:10:88:E8:55:AB:0C:6C:13:0A:D5:5D:47:FB:A3:FE:2E:CC
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1alnEIjoVasMbBMK1V1H-6P-Lsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.76.160.0/19
78.132.128.0/17
91.202.20.0/22
178.75.64.0/18
193.33.62.0/23
213.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:07:37:80:e3:7a:75:02:d3:cc:42:ca:63:30:a0:c7:13:49:
28:3f:08:dc:3f:44:58:86:39:3d:8d:75:6b:41:e3:d6:79:08:
41:cb:0d:15:95:bd:f8:87:dc:6f:ca:29:c2:db:14:38:4e:f6:
07:54:8b:da:f4:c2:2f:19:f4:07:b3:82:ba:23:54:7c:f0:1b:
50:ef:c0:93:75:65:7b:a3:9c:71:6f:c4:df:81:00:7c:a7:9c:
4f:93:3a:8c:30:1a:e5:07:98:44:ee:a6:ff:4b:28:d5:d2:99:
75:14:38:74:16:4c:a9:4b:3b:0f:ab:ae:6d:9b:bc:2d:b2:80:
5b:53:42:db:87:20:2f:9e:00:c8:b0:2e:46:f0:7b:25:55:e0:
28:4e:46:96:dc:72:b2:d6:e4:1c:2c:64:c0:a2:20:06:fb:ba:
4c:e0:63:5f:0d:fa:ff:47:dd:f6:7c:93:0b:49:0c:8a:24:6a:
ba:d8:00:f2:a6:0e:72:7f:0e:97:ef:d7:93:c1:c9:1a:23:45:
7f:da:30:6b:2a:c9:d3:69:df:20:9f:ce:49:a4:3c:d6:28:d0:
61:8b:5f:62:e0:0c:56:96:9e:3b:31:65:55:5e:27:6d:0f:d0:
4c:b9:92:5c:c8:9c:38:ca:3f:30:ac:41:ed:ab:55:85:18:29:
53:50:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:22 2025 by rpki-client