Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa
File: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (raw, json)
Hash identifier: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=
Subject key identifier: 46:F4:AA:D1:FD:7F:28:7D:D6:6C:E2:FC:0E:69:63:99:AA:77:65:5A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C29B2C180381C2BB61E116ECDCBD2
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 5.178.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:29:b2:c1:80:38:1c:2b:b6:1e:11:6e:cd:cb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f4aad1fd7f287dd66ce2fc0e696399aa77655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:1c:9e:7b:4b:57:86:84:0a:9a:9f:7c:81:
07:b0:a6:a8:db:08:fd:dd:9c:39:51:12:a9:fa:3d:
cc:98:2a:11:dc:1f:63:41:cc:57:73:42:05:99:b9:
11:5b:93:a7:84:7e:e8:ef:e4:b2:5f:ff:2c:e2:34:
28:24:0a:25:51:12:82:44:4a:6f:4b:67:84:94:b7:
35:0e:0a:02:c1:37:69:a1:2d:1c:a7:d2:79:d0:dd:
2f:e1:20:11:68:f1:50:44:93:39:42:81:b7:10:d8:
ff:09:d6:ed:76:f2:bb:3d:7f:fb:36:a4:3e:f1:ca:
6c:0f:7d:4a:7e:3d:6e:19:83:f0:68:dc:f1:3b:30:
84:a5:8a:f2:e3:9d:ae:c5:a6:e2:03:8e:3e:a7:38:
4f:46:a9:03:0d:58:84:a5:14:18:d0:06:6c:c9:f8:
cd:3d:a9:5f:2b:30:18:4b:ff:3b:cb:8a:b8:c7:5c:
49:b6:e6:54:1a:21:e4:e2:a7:29:53:4b:e9:6e:23:
92:9c:8e:f1:b9:c2:d1:f8:73:58:90:e1:42:34:1c:
d7:de:b4:4e:fe:cf:b6:35:63:3f:f4:e7:69:44:48:
e5:88:85:c2:71:21:53:2f:23:dd:ce:d9:98:22:a8:
ff:ef:8a:a2:6e:f0:aa:10:df:6c:73:b9:ec:b2:17:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:AA:D1:FD:7F:28:7D:D6:6C:E2:FC:0E:69:63:99:AA:77:65:5A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b9:96:3f:0f:90:80:b8:df:1d:84:12:4f:91:1b:72:65:90:
b4:71:a0:46:fc:5c:8b:9a:fd:df:06:15:46:5e:c3:4d:4e:60:
34:4d:12:ab:f3:1a:63:34:39:ec:aa:0d:ce:72:8c:66:d0:29:
29:9e:ae:fa:8e:81:00:07:ec:d0:42:02:a0:b0:21:b1:f6:dd:
3b:8e:71:b2:7e:be:7b:ad:79:b7:ad:d2:d6:69:90:b5:8b:83:
3f:a0:2c:33:ca:b3:1e:1c:19:39:00:37:b4:ef:5f:d4:85:df:
90:b2:bf:22:52:13:5f:e0:af:79:f2:0e:d5:cd:63:1d:6b:d5:
45:b1:d2:3b:3c:8e:5c:91:95:5f:bc:a7:c6:7a:9e:38:9b:c5:
09:c3:53:e5:dd:32:6c:25:a4:a9:94:91:b0:24:d0:7c:da:2b:
ab:9d:04:af:c4:09:b0:fd:7a:16:b2:ac:36:32:9a:ad:96:37:
57:72:77:5b:65:64:c3:96:05:b3:54:b7:10:a7:9d:89:c1:50:
f9:40:f0:4c:75:ae:81:52:da:0d:66:9d:5f:cc:87:26:b4:b2:
83:59:dd:84:59:ba:d8:cc:72:34:9c:b3:d2:4c:98:04:20:2c:
f0:9f:bc:de:4f:25:cb:e6:da:52:ed:66:05:df:e4:d1:a1:6e:
fc:10:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:18 2025 by rpki-client