Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/5khyx2A9d0Q0e3huYGosj5KCOlo.roa
File: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (raw, json)
Hash identifier: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=
Subject key identifier: E6:48:72:C7:60:3D:77:44:34:7B:78:6E:60:6A:2C:8F:92:82:3A:5A
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F39CDC0ABA4926752FB09F71DE541
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/5khyx2A9d0Q0e3huYGosj5KCOlo.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34463
IP address blocks: 213.202.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:39:cd:c0:ab:a4:92:67:52:fb:09:f7:1d:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e64872c7603d7744347b786e606a2c8f92823a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:20:6f:4e:62:ee:39:98:9d:23:87:b7:fc:
e2:54:66:45:15:2a:e2:45:4e:96:2a:89:14:a8:8b:
d1:6f:a5:65:26:03:09:38:b3:8d:73:c2:4f:57:89:
97:bb:af:d7:ff:20:23:66:71:f8:7f:32:e4:e8:6f:
24:3a:a6:33:15:30:d9:80:73:6e:c3:e9:39:d0:b5:
ae:c9:b0:31:af:79:56:07:0a:16:ad:b5:ab:9b:a6:
18:db:5d:3b:30:20:2c:83:e5:62:d1:7a:11:20:fb:
d3:21:3d:e7:ce:63:47:c4:ab:68:db:40:cc:cb:6e:
ab:b1:7b:ef:98:81:55:64:15:9d:a5:2c:79:e8:75:
b7:b2:93:ca:75:f2:5e:89:e7:ca:86:65:ae:ee:b4:
4f:84:df:3c:a8:d5:5a:1e:a9:74:4e:01:30:65:c5:
a9:c9:9e:9a:14:1b:5c:49:74:57:06:e9:35:32:a8:
9e:34:09:1e:48:ce:aa:3e:42:e9:3c:10:9d:9a:0e:
44:9d:5c:08:6d:e8:41:ef:1b:88:45:f7:d9:21:45:
a2:8b:f7:20:66:e0:0c:cb:05:a6:21:49:f5:64:08:
cb:9d:0d:4d:96:87:02:e8:c8:7b:84:59:74:43:c4:
0d:6e:de:5d:dc:58:39:17:7a:ee:6c:4e:8d:4a:a2:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:72:C7:60:3D:77:44:34:7B:78:6E:60:6A:2C:8F:92:82:3A:5A
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/5khyx2A9d0Q0e3huYGosj5KCOlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.202.118.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9e:51:fc:70:72:a3:20:29:04:f2:b9:59:67:f4:f3:fd:e6:
2b:7c:2e:8e:b3:fd:a6:eb:a8:49:70:59:ad:c9:3a:67:f0:e8:
4d:df:f8:84:bd:02:dc:63:26:46:07:00:dd:5f:40:b0:19:38:
67:82:d7:0c:7e:56:40:c1:12:7f:08:7b:11:b2:24:77:a1:e6:
04:8e:a0:bf:f1:91:62:e5:af:97:6c:e0:30:2c:15:14:64:d6:
4b:bb:f3:1a:17:21:d6:7c:76:96:38:50:2c:9f:62:35:3e:bd:
f3:73:ca:fb:de:9a:d7:1c:b3:04:53:76:fc:fe:2d:01:e8:46:
cd:5c:c9:68:c1:cf:55:d4:c0:8f:37:d0:a2:f7:c3:4b:2a:7a:
45:7d:f6:59:73:95:ce:f0:10:b3:02:f6:f0:7a:4e:77:db:7e:
75:39:c6:7d:47:31:d9:c8:3e:82:20:b4:d6:15:8c:fa:59:74:
f5:a2:f2:25:98:90:f4:b9:2f:4f:b9:91:69:49:f7:72:4f:1b:
e7:01:17:a5:eb:ae:75:b4:da:c5:48:71:7c:4e:e6:41:46:59:
8e:8f:c0:23:d1:07:14:e6:88:34:1d:1f:2d:08:4b:af:1d:4f:
7f:06:28:48:96:15:b6:fa:44:c5:c0:ba:4a:df:10:e6:b3:2e:
64:b2:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:31:17 2025 by rpki-client