Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CW68CDNMmV7NWVhREtGFmIgBkd4.roa
File: CW68CDNMmV7NWVhREtGFmIgBkd4.roa (raw, json)
Hash identifier: gL7tnFuVxpE9JD+Lf5D7L4SuNfXpKPK2JNEvj6jJ/6Y=
Subject key identifier: 09:6E:BC:08:33:4C:99:5E:CD:59:58:51:12:D1:85:98:88:01:91:DE
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C581BDD0817374D806B2EF8879915
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CW68CDNMmV7NWVhREtGFmIgBkd4.roa
Signing time: Thu 02 Jan 2025 09:50:22 +0000
ROA not before: Thu 02 Jan 2025 09:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12380
IP address blocks: 80.248.144.0/20 maxlen: 20
89.20.16.0/20 maxlen: 20
212.58.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:58:1b:dd:08:17:37:4d:80:6b:2e:f8:87:99:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=096ebc08334c995ecd59585112d18598880191de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:58:0f:0a:96:53:01:b4:10:81:7e:63:53:
64:e9:f2:57:a8:3e:b7:21:8b:31:60:98:a4:76:2d:
37:05:0c:c8:3f:79:15:8f:78:9a:5c:41:19:07:62:
e6:0b:5e:9e:f8:15:62:30:c4:92:4b:54:27:bd:1b:
5f:d4:f8:f3:48:fc:d5:14:45:69:28:78:12:a5:15:
ff:39:22:a8:21:82:0b:3b:71:77:7f:3e:58:80:3d:
6b:9a:e7:e5:0d:a6:3e:c0:b9:aa:81:52:24:15:04:
53:02:99:63:79:61:d7:bc:e6:31:9b:30:5f:f2:2c:
6e:ab:ae:96:df:fb:0d:bf:1a:b5:d0:2f:f5:d7:92:
a6:6e:11:48:89:f4:86:27:09:2d:4c:4a:53:e5:7b:
cf:1c:d4:f5:d0:bd:9b:55:e6:05:3b:74:86:1f:02:
e1:ce:ab:3a:04:c6:0a:0d:1c:2d:b2:af:03:44:b2:
54:12:e1:a5:6a:76:6f:db:58:82:ef:e4:e9:4f:54:
6b:de:95:90:45:bf:e9:f9:6d:6d:e5:cd:b2:8c:2f:
45:44:81:16:f8:c0:93:aa:bc:83:64:a7:27:3e:23:
31:e8:14:9f:74:19:d1:53:99:e2:87:7c:7e:50:2d:
5e:10:a8:d3:56:e6:63:9e:aa:14:fd:cd:9f:7a:b1:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:BC:08:33:4C:99:5E:CD:59:58:51:12:D1:85:98:88:01:91:DE
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CW68CDNMmV7NWVhREtGFmIgBkd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.144.0/20
89.20.16.0/20
212.58.192.0/19
Signature Algorithm: sha256WithRSAEncryption
32:e5:b2:1a:b9:89:48:22:4a:4c:df:50:65:7b:cb:5c:7e:e7:
d6:67:19:cc:c7:3a:23:31:8a:88:50:4f:56:d6:47:dd:62:b3:
c5:12:0d:a0:24:ae:c7:7b:2d:41:9f:1e:c7:f1:32:61:a5:ba:
ee:fb:ea:3d:0d:86:88:df:53:07:ab:46:cd:af:04:18:94:c5:
a6:c2:58:77:51:0a:85:f2:1c:fe:55:76:cf:64:53:46:13:3c:
24:e4:3b:26:a6:7a:bb:4d:5f:a4:82:96:f8:77:dd:d9:68:5a:
b5:c5:0b:6d:54:82:8a:4a:c8:a7:2b:06:b3:35:a8:ac:db:2d:
d4:46:14:cc:c6:04:5c:8a:9b:46:32:e6:cc:25:25:53:f9:91:
7e:d1:f1:5e:a9:80:a4:28:8d:3d:96:98:54:a7:3f:6f:5f:5c:
6b:4b:af:12:a9:74:1f:24:24:f9:62:ce:9d:fc:3f:c0:d0:6b:
19:21:ce:0c:e8:41:0c:cc:0b:36:c6:e5:2d:4b:16:ec:f9:e6:
ed:b6:ef:7d:c3:de:7b:ce:39:96:67:be:9b:b5:64:94:4d:94:
1e:2a:ce:07:98:e4:2f:05:69:cf:91:c4:d6:9e:46:66:a7:fb:
45:84:16:b7:54:25:e8:20:82:25:9b:b0:a4:d5:74:be:db:26:
f8:39:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:39 2025 by rpki-client