Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa
File: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (raw, json)
Hash identifier: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=
Subject key identifier: 03:94:58:90:38:79:89:01:EC:30:21:22:F5:E2:A2:13:75:18:41:36
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 019421B1E519C39C30BAF91B678EDFA5FDDF
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399471
IP address blocks: 185.28.37.0/24 maxlen: 24
185.28.39.0/24 maxlen: 24
185.126.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e5:19:c3:9c:30:ba:f9:1b:67:8e:df:a5:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0394589038798901ec302122f5e2a21375184136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:5e:81:8e:e2:ec:17:68:28:90:5c:7b:bb:
3a:1e:46:6a:4e:27:a6:ca:7d:16:f9:cc:28:bd:3c:
72:da:0e:1e:e1:38:5e:6d:2d:0b:ff:b4:88:b5:33:
96:31:64:ec:34:e8:a2:8e:cb:bb:6c:35:77:4c:2c:
92:cc:be:d3:68:aa:bb:28:2c:05:56:bf:df:d3:87:
82:44:6d:b5:3f:5e:f3:2e:c8:4a:7b:ef:30:4e:a5:
06:ba:0b:39:e9:28:d3:02:26:83:a5:33:5c:72:0e:
5b:b2:b7:31:74:fd:2e:0e:a9:7b:4b:1a:36:29:ca:
ad:a8:0b:39:aa:b1:61:f8:a2:7c:19:ed:7d:94:c5:
e4:f8:ea:07:0b:c6:b3:b9:15:aa:21:7b:e5:5b:28:
d2:cc:41:c7:c2:f1:13:90:32:0e:81:8c:31:8b:ff:
7e:40:69:28:23:99:87:25:62:89:bb:36:9b:c9:30:
92:8b:86:a8:3a:ea:c0:b4:db:56:58:71:d1:60:b7:
85:9b:67:1e:2d:99:d1:03:f8:26:d6:b0:99:dc:62:
a9:1e:43:13:f4:2d:e6:47:fb:e4:3c:3a:76:c8:aa:
ea:8a:2b:ea:85:8b:97:b7:3b:65:ff:6b:e2:c3:e0:
89:04:92:e1:ea:92:da:f6:43:0e:9e:05:0c:ea:be:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:58:90:38:79:89:01:EC:30:21:22:F5:E2:A2:13:75:18:41:36
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.37.0/24
185.28.39.0/24
185.126.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f9:e6:cf:61:79:66:1e:9d:fb:15:2c:92:d4:95:56:44:1a:
18:c9:f5:d7:8d:91:74:41:92:f1:2f:12:b3:bf:c5:f2:cc:3d:
a1:0d:1b:04:41:06:89:f9:77:2a:84:6f:9a:e6:ac:93:6f:31:
1c:2f:5b:2f:78:6f:a8:02:6d:8d:50:cb:42:74:b7:f2:76:01:
b5:ae:cb:51:f4:75:7c:e8:23:33:7a:79:5f:6d:a6:ff:93:59:
f5:78:c9:eb:51:14:c3:4c:36:05:3e:4f:d1:1c:f0:fc:49:0c:
9f:4d:75:cd:ac:b7:0c:0a:0e:aa:e8:ce:9c:8f:42:3a:91:62:
95:f7:03:09:39:b1:8a:00:e2:d6:ec:e2:bd:34:3d:3d:68:42:
c3:91:25:8e:8f:38:eb:b7:96:5c:6a:ba:38:51:26:ed:4c:ec:
ae:6f:0c:ec:e1:24:4a:2e:a4:5d:27:e8:7a:b7:12:79:7f:07:
91:eb:e6:01:38:8c:fe:5c:11:93:2c:c0:09:f4:ed:f2:0e:a8:
75:80:5a:48:74:b8:df:85:7c:6e:60:01:0f:30:98:d7:5b:3d:
f5:7f:d6:43:c7:ce:69:34:4f:d7:5c:81:57:b0:a3:e4:32:55:
c4:4f:39:70:ae:1f:bf:ae:c4:93:bd:08:59:78:4d:24:26:ea:
95:90:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:32:37 2025 by rpki-client