Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/SR98Jj8EQHDrVYvwzhla3MeMYTk.roa
File: SR98Jj8EQHDrVYvwzhla3MeMYTk.roa (raw, json)
Hash identifier: OchcfHhfWVHZDoXP+CRDtsbPbB4Of5Vyn+NziMEdnEQ=
Subject key identifier: 49:1F:7C:26:3F:04:40:70:EB:55:8B:F0:CE:19:5A:DC:C7:8C:61:39
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441BE352770AE9B43A6173435B168C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/SR98Jj8EQHDrVYvwzhla3MeMYTk.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215623
IP address blocks: 5.42.213.0/24 maxlen: 24
185.248.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:e3:52:77:0a:e9:b4:3a:61:73:43:5b:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=491f7c263f044070eb558bf0ce195adcc78c6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:61:3a:c4:ea:be:f0:75:b3:1a:63:09:5a:
67:5e:c2:41:a5:b4:89:07:92:fe:66:28:3c:70:b1:
89:7f:d6:95:98:13:3b:37:e9:5a:e9:aa:bd:f4:86:
40:61:22:4b:f0:57:89:b9:8f:98:0c:ed:09:f9:dd:
c2:48:a7:15:e4:1f:b3:10:93:e8:7f:e6:cb:66:1f:
2b:c5:64:d3:7a:69:41:0e:71:b5:38:b5:0b:ae:ae:
03:8a:8e:9b:8f:0a:d8:1d:20:c7:7a:61:f0:95:18:
21:74:21:02:a2:96:54:aa:b2:e2:14:d6:b1:b6:95:
f8:c6:67:65:25:e8:68:38:31:c4:1d:c4:62:3c:5f:
14:0d:d5:db:e4:4f:f6:5e:75:d8:57:c2:d7:00:60:
a0:fb:5f:0b:4b:78:91:2a:5c:5d:7f:d4:ac:ad:73:
b3:df:da:cb:bd:c6:33:d1:f1:d4:35:a7:d0:73:22:
5c:95:a9:96:1c:ef:b8:f1:06:bd:d1:ef:5d:3a:de:
0a:8a:a4:78:e3:f9:9c:f5:1f:39:d1:36:cf:fc:05:
dd:a4:78:59:c8:d0:e3:80:24:75:77:5e:ef:ba:9d:
ab:2a:10:c3:2c:c4:9f:2d:e5:e4:05:31:e1:29:86:
7f:f7:ef:78:13:02:b5:e4:f9:ff:c4:a4:4a:3b:c7:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:7C:26:3F:04:40:70:EB:55:8B:F0:CE:19:5A:DC:C7:8C:61:39
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/SR98Jj8EQHDrVYvwzhla3MeMYTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.213.0/24
185.248.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ed:e3:ca:3b:13:f0:2e:93:a6:18:97:5d:da:07:bb:d3:52:
1b:b8:5d:19:38:03:75:2c:d6:b5:d5:cf:2f:ee:c3:bf:b4:22:
0e:5e:07:21:14:74:4f:23:46:a5:9f:0e:e1:ea:d2:16:f8:a9:
d9:59:59:29:36:b4:94:33:e0:94:de:5f:3b:7b:d5:e4:63:dc:
2f:fc:f1:91:14:86:db:e2:6f:2f:54:a1:fa:e7:30:8d:93:0d:
21:8f:cc:f4:d7:7c:7d:9c:5f:64:b3:5c:17:51:92:83:23:8a:
9c:5d:5c:47:33:e6:87:ce:4b:e9:b4:22:43:8b:49:ec:d7:e5:
f0:c9:94:e4:e1:61:74:f6:e1:4b:9e:54:d6:47:e4:84:06:fd:
0f:2d:34:5f:72:e5:6c:4a:e1:62:62:1d:6a:5c:94:44:94:5d:
82:21:95:29:dc:79:f9:51:e9:1e:0c:57:1a:e7:1f:de:aa:16:
48:98:8b:10:8f:ec:ed:a2:32:9f:cc:18:0b:75:1d:65:96:7f:
2f:06:3e:73:49:25:00:ca:df:38:1d:46:64:dd:b4:d3:a5:db:
31:8f:b2:b9:d4:8a:d6:82:f7:2a:6b:8c:23:83:2c:fc:3f:60:
a9:20:a4:4a:e5:ae:80:23:4d:09:bf:4a:71:b9:26:18:48:e7:
14:f3:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:27 2025 by rpki-client