Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0SPY3ehqSJEunmmMtILqWyyAEMs.roa
File: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (raw, json)
Hash identifier: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=
Subject key identifier: D1:23:D8:DD:E8:6A:48:91:2E:9E:69:8C:B4:82:EA:5B:2C:80:10:CB
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2CE8300FBC44C5FF890E77EC4FA5
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0SPY3ehqSJEunmmMtILqWyyAEMs.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201021
IP address blocks: 5.144.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:e8:30:0f:bc:44:c5:ff:89:0e:77:ec:4f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d123d8dde86a48912e9e698cb482ea5b2c8010cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:e6:e5:5a:a8:db:f4:5d:2a:a2:6a:27:19:
6f:b7:86:bd:04:8d:2c:3c:19:e1:f7:4b:d2:56:a7:
0b:a0:f0:66:f4:c2:aa:52:04:f6:4f:e7:86:8a:f3:
92:e9:13:56:d7:66:93:49:95:88:7e:f5:5f:d5:27:
c7:9c:55:49:7d:f3:77:f2:04:ef:4f:e4:7c:f6:55:
3e:a6:06:bf:ee:d6:54:49:93:34:df:a7:97:61:a8:
3b:2e:f4:4f:71:7e:c7:d0:9d:32:70:97:0f:ad:89:
db:d6:ff:79:b1:0d:5c:1b:37:2f:c6:3b:43:75:4a:
7c:1d:e4:44:12:b3:bd:62:31:8c:c1:88:b9:3d:83:
f3:c7:1a:6f:b4:e9:21:ff:c2:86:50:c9:f4:50:4d:
14:cb:1e:7e:86:28:dd:b9:4d:ab:24:ca:b9:9b:02:
d9:5e:73:56:f2:d5:b7:d2:5c:0c:af:15:fd:54:3b:
81:3d:c6:43:f1:aa:a0:dc:a0:23:b2:c5:a3:38:9e:
ae:60:4b:8b:f9:b1:1c:f0:8e:60:7f:4c:a0:db:4f:
29:db:8e:23:b4:c2:6c:fc:4f:ba:d2:3c:e4:76:74:
68:45:87:8b:e0:ea:da:4d:8a:1e:fa:c3:23:55:4b:
43:c2:2b:18:b0:1e:ed:d6:c5:8d:0c:c6:5d:30:98:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:D8:DD:E8:6A:48:91:2E:9E:69:8C:B4:82:EA:5B:2C:80:10:CB
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0SPY3ehqSJEunmmMtILqWyyAEMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:6c:04:0c:81:0c:d2:c3:33:a7:f1:09:3b:bb:e5:8f:0b:
4b:4d:aa:60:ec:57:c0:98:63:5b:41:da:b5:d1:48:51:d8:67:
d8:f7:eb:2d:81:c5:1b:03:0c:6b:58:14:25:e6:54:1b:64:e8:
98:66:6c:1d:e6:51:b8:11:8d:ea:c1:50:24:2b:9d:c4:dc:d9:
7b:22:6f:9a:87:b8:d7:c4:7e:e0:9a:fd:c4:cf:c8:e5:76:83:
99:05:31:b7:e4:6a:a3:ac:e9:36:22:d1:0f:47:c1:10:42:e6:
b8:fe:95:25:0e:ca:6f:7e:e3:63:6c:ad:e4:db:b7:9d:c5:57:
03:51:68:c4:71:b3:a8:b7:70:e3:00:58:39:c2:e8:dd:eb:8a:
9f:0f:6a:c9:7a:8b:7a:71:ab:12:06:45:3e:0c:1a:9c:a8:dd:
a2:3f:83:96:bd:ca:3f:f0:89:5a:3c:a9:52:c7:90:c6:02:2e:
1e:99:fb:05:df:f1:04:d2:e8:20:55:e4:6b:56:89:1c:c9:04:
17:19:29:5e:83:5f:4f:1d:88:96:97:2f:c8:46:f4:ad:98:0d:
74:81:7a:6f:b0:10:ab:e2:b3:a1:22:c1:8a:a1:6b:30:bd:0e:
0a:1e:57:17:ec:cd:ed:2a:0c:5b:d5:22:e5:2e:6b:c7:d2:18:
c4:2e:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:38:12 2025 by rpki-client