Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5k0l33eoi3Brg_78Lfio8CwECJY.roa
File: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (raw, json)
Hash identifier: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=
Subject key identifier: E6:4D:25:DF:77:A8:8B:70:6B:83:FE:FC:2D:F8:A8:F0:2C:04:08:96
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC13E75887CD4325405403C51CC29
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5k0l33eoi3Brg_78Lfio8CwECJY.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136557
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c1:3e:75:88:7c:d4:32:54:05:40:3c:51:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e64d25df77a88b706b83fefc2df8a8f02c040896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:14:89:b3:17:37:80:dd:ec:a9:a4:36:cf:
36:89:93:35:75:56:a7:a3:07:14:fa:19:d9:02:e2:
06:fb:db:00:7b:57:7a:db:c1:d2:a2:83:c2:61:fb:
df:a9:12:37:dd:01:5c:a4:06:e3:55:c7:91:90:e1:
7d:0e:a3:74:d8:97:24:3a:f0:90:f5:ce:26:3c:6f:
c3:d0:da:7c:bc:bc:e2:bb:4b:77:40:07:0b:dc:ca:
2b:a3:ba:b0:af:da:ca:58:ab:21:02:52:8f:33:ff:
49:27:b5:57:1d:e0:15:62:25:c9:70:0e:ad:44:f1:
e0:6c:9d:73:23:23:f4:ca:52:ec:61:44:8e:15:61:
3e:cd:5b:43:e0:78:ae:60:9d:12:df:9b:88:3f:5e:
57:33:44:87:9a:f2:0b:24:60:42:8a:70:80:57:b2:
0a:c3:8f:59:09:51:3e:23:4c:58:b8:24:93:3e:c2:
fa:86:6e:5a:ea:03:87:5f:9d:90:92:9d:c6:5b:a0:
69:08:27:7b:5e:fd:e9:33:82:de:0c:6b:68:f5:86:
20:40:da:dd:f9:7b:63:87:1e:37:19:1f:fc:8a:ca:
e7:e7:99:9a:54:04:0b:bc:73:75:6c:6f:c1:c2:f3:
7d:78:ff:6e:57:c4:0e:b5:c1:82:d6:e9:2c:3e:f7:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:25:DF:77:A8:8B:70:6B:83:FE:FC:2D:F8:A8:F0:2C:04:08:96
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5k0l33eoi3Brg_78Lfio8CwECJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8a:b5:ac:76:d1:dd:5a:48:a8:19:af:ad:c0:23:75:78:8c:
5c:95:0f:2f:ac:17:03:00:5b:1e:35:a3:56:96:5f:e0:06:43:
61:51:86:15:ae:ea:8a:ad:87:0c:65:16:69:e6:be:98:44:db:
67:3f:1d:79:ec:20:9d:90:06:52:cc:2f:d3:7a:d2:67:3b:7b:
86:b5:8b:8f:22:ec:54:28:c4:31:0d:44:3f:18:88:a8:0a:29:
dc:d2:1d:e0:99:8e:e5:d9:d1:6f:c3:c4:a5:90:c6:13:24:aa:
b0:7a:a8:5f:90:24:ab:95:cd:19:62:36:57:b5:8e:65:d6:87:
8d:89:a5:5b:b5:ef:f5:84:e4:cb:fe:86:cd:f6:30:b6:6b:5c:
cc:d2:86:e4:92:1d:71:19:5f:66:11:02:30:b1:70:0c:0c:9c:
7e:fa:92:7c:0b:d7:d2:4d:75:5b:25:6d:8e:72:2e:7b:fb:e7:
5f:91:86:ac:8c:7c:70:5d:22:ff:90:14:28:b8:16:bb:ec:7c:
36:a6:ad:6e:56:8f:a1:0a:ae:f6:76:a0:5d:12:16:46:59:ce:
9a:e0:89:f0:b9:93:0a:cc:ac:26:38:21:5d:ed:0c:1c:f8:65:
c7:ce:9e:ad:89:eb:34:3b:70:6c:18:68:84:bc:bc:48:19:fa:
2a:1b:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:43 2025 by rpki-client