Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/J5roBlA5puw3qKKb1FvCi0jVSzo.roa
File: J5roBlA5puw3qKKb1FvCi0jVSzo.roa (raw, json)
Hash identifier: kfWG0LXc7ZWCpz1fFslOhZB1KDuyEVdFS239GndkOhM=
Subject key identifier: 27:9A:E8:06:50:39:A6:EC:37:A8:A2:9B:D4:5B:C2:8B:48:D5:4B:3A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C30369314F80A2A7EF1ECFB328E95
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/J5roBlA5puw3qKKb1FvCi0jVSzo.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 5.178.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:30:36:93:14:f8:0a:2a:7e:f1:ec:fb:32:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279ae8065039a6ec37a8a29bd45bc28b48d54b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:07:69:83:ab:4c:ef:50:ab:dc:f8:8b:b1:7b:
1c:6b:67:88:2b:06:c5:21:b9:80:c8:b6:36:7a:8b:
a3:63:a7:5d:14:0c:ad:a8:ba:8a:67:83:e3:0d:e3:
7b:ee:62:64:0f:00:02:e4:ed:0e:04:56:88:77:5c:
59:67:33:2a:8c:47:91:70:d8:8f:d2:8c:85:7b:64:
5e:1b:e7:84:fb:d9:e7:64:35:40:f7:62:67:51:9e:
9a:d9:57:54:72:54:f1:0b:42:ca:ee:25:3e:eb:6a:
a0:a9:d1:61:54:af:76:b0:b3:3a:88:df:60:e3:c2:
a4:89:f4:5b:c9:ca:44:7b:c2:9b:b8:6f:77:02:71:
9b:06:df:f3:62:b0:96:5b:b9:40:25:e5:92:2c:a9:
a9:50:c0:60:80:25:3b:ac:9d:12:7d:ba:eb:23:e6:
eb:4b:22:88:97:43:0d:be:42:2a:04:43:ad:f3:65:
a0:e0:bd:da:d5:fb:b0:64:a2:c0:da:3b:e0:1b:15:
a9:86:fd:4e:62:69:52:60:ef:f5:da:0c:76:35:34:
a0:87:b3:40:51:25:a1:4f:53:50:ca:dc:63:59:61:
a6:fd:1e:33:ec:3f:df:3a:17:30:3e:25:be:80:f3:
de:2a:d7:aa:78:fe:f5:b9:9b:a5:91:8f:1a:3b:db:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:E8:06:50:39:A6:EC:37:A8:A2:9B:D4:5B:C2:8B:48:D5:4B:3A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/J5roBlA5puw3qKKb1FvCi0jVSzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:0d:66:e9:86:5c:7f:6c:1a:4f:77:e2:21:33:60:49:16:51:
7f:35:de:65:0c:75:25:12:ee:2c:67:0f:b0:db:c8:bb:8c:19:
c0:00:e5:9a:38:5a:35:f3:5b:7f:ec:08:c5:dd:76:61:f4:53:
8c:27:bb:c8:92:5b:26:d9:dd:91:07:19:f4:a0:37:37:65:a8:
46:b6:7f:9c:ca:bd:0e:18:eb:f2:09:49:30:40:8f:41:09:a4:
24:34:d0:f5:c9:91:a4:34:d7:df:40:cb:81:a8:ed:e1:b0:c9:
42:a8:67:a2:12:b9:0f:d4:93:22:50:a8:31:d0:19:b3:77:9f:
16:7f:70:55:5c:5b:82:07:54:1c:be:37:67:e6:55:75:69:4c:
a7:08:4c:d6:27:6f:c0:dd:65:4d:46:82:86:74:4e:e2:2e:15:
5e:1f:9a:30:ba:ce:9c:60:72:fe:e8:4b:39:17:18:26:2e:66:
ff:6f:ac:40:42:b4:5e:d6:d8:e8:af:27:66:5b:48:18:3b:ec:
43:fe:5f:79:2b:30:fb:31:5a:c3:aa:74:da:a4:18:ad:59:d7:
8f:e8:10:0e:f2:a2:2d:27:c3:4c:b0:39:8c:78:47:e1:9f:42:
38:54:7b:9b:4e:a8:38:53:d1:21:a9:2a:ae:1b:e2:4e:7e:2c:
2f:63:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:47 2025 by rpki-client