Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/k5ydTa5DTriL3x0F0EbNZljZ2r0.roa
File: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (raw, json)
Hash identifier: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=
Subject key identifier: 93:9C:9D:4D:AE:43:4E:B8:8B:DF:1D:05:D0:46:CD:66:58:D9:DA:BD
Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial: 019422FC0566C0CAD10DFAB08FB22A6237FA
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/k5ydTa5DTriL3x0F0EbNZljZ2r0.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209578
IP address blocks: 160.20.96.0/22 maxlen: 22
2a07:cf40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:05:66:c0:ca:d1:0d:fa:b0:8f:b2:2a:62:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=939c9d4dae434eb88bdf1d05d046cd6658d9dabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:6c:3a:3c:f5:1e:b6:9e:04:a3:a0:18:22:
b9:ab:64:e5:ec:19:8e:5d:14:f2:c5:b3:5e:1d:0a:
0f:97:b3:91:59:29:d0:5c:23:81:d8:f7:1b:be:18:
29:8d:79:e6:2d:a6:3b:79:d0:78:d1:8d:2b:f1:8b:
cd:eb:1c:11:4f:35:32:8c:4c:6a:cf:c9:ed:19:e6:
11:50:57:dd:b0:60:47:71:26:51:fa:20:1b:f6:2f:
ca:78:09:82:26:e1:d7:45:04:4e:1c:d0:17:1e:a2:
d3:19:d0:d2:93:cf:13:3c:fa:7c:40:aa:69:85:f0:
2c:33:c0:f6:4b:e6:d3:49:78:f4:fe:97:fd:7e:bd:
6c:7a:97:19:23:42:ea:4c:12:40:b9:69:a6:32:96:
16:da:7c:cd:1b:f2:12:88:9e:f6:92:d6:ef:65:6b:
88:42:cc:84:68:c7:82:01:8a:77:6b:36:7b:42:d3:
3d:ba:dd:ea:2b:e2:85:52:14:5f:4d:cc:50:d0:4e:
9d:60:62:f8:95:b3:3e:48:36:d1:32:18:0e:ed:32:
9c:37:02:54:31:98:37:54:c1:c9:23:61:dc:5b:d9:
10:79:5e:64:9f:96:75:e1:99:14:2b:c7:f1:0a:01:
93:b8:9e:ab:8f:84:1c:f4:b6:9b:5b:c7:75:70:d5:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:9D:4D:AE:43:4E:B8:8B:DF:1D:05:D0:46:CD:66:58:D9:DA:BD
X509v3 Authority Key Identifier:
keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/k5ydTa5DTriL3x0F0EbNZljZ2r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.96.0/22
IPv6:
2a07:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
31:22:4c:0c:b4:c2:00:7a:77:9a:9c:a4:da:fc:e1:a2:3a:24:
91:aa:d1:56:b5:30:8b:37:10:06:fe:43:62:85:5d:ea:66:47:
33:7f:fd:05:32:e0:f3:33:8e:e8:6d:e7:ed:3b:5b:e0:0b:1a:
23:64:0d:6b:41:2a:c1:a0:80:43:84:83:78:70:fd:da:62:0e:
4a:a4:f8:07:45:dd:89:04:70:23:dd:91:6f:2d:14:1b:66:33:
8a:b1:3e:5d:c3:b4:b0:d6:fc:25:1d:41:74:fa:a8:0f:32:1f:
d2:93:a0:41:79:df:ad:8f:14:8a:0d:f0:e2:ef:ff:58:df:f0:
78:ca:b3:c2:20:67:b3:90:6c:6f:25:13:da:85:5c:7b:74:9a:
13:a3:71:8b:c8:60:ca:69:09:a1:e8:9d:e7:85:14:a0:c6:1e:
ed:b4:b2:e5:b5:e5:2b:a4:f2:80:73:8e:dd:c6:b1:76:5e:35:
79:f8:0e:b7:3e:91:5b:84:31:19:61:cb:76:cf:3e:2d:20:4f:
e5:f4:bb:42:7c:36:a1:16:0c:c0:bd:43:42:6f:8f:72:78:20:
03:e1:96:47:12:7c:36:c4:79:16:f8:82:63:87:b5:ec:16:7a:
4e:5e:d6:0f:6e:92:20:4e:b3:da:25:9d:64:77:e3:02:d9:6d:
bb:0d:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:32 2025 by rpki-client