Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5CuRyJRPcTZToeyu_kAx7CRg8dU.roa
File: 5CuRyJRPcTZToeyu_kAx7CRg8dU.roa (raw, json)
Hash identifier: /z17aEb+l9qpNaPulQNOSdRgHKdhwz7CwPKtO53HrO4=
Subject key identifier: E4:2B:91:C8:94:4F:71:36:53:A1:EC:AE:FE:40:31:EC:24:60:F1:D5
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDEFF007301FB1AEBF4FD05069E53
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5CuRyJRPcTZToeyu_kAx7CRg8dU.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209417
IP address blocks: 45.9.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:de:ff:00:73:01:fb:1a:eb:f4:fd:05:06:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e42b91c8944f713653a1ecaefe4031ec2460f1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:e1:7c:57:1a:41:3f:bd:69:60:47:c2:50:
d7:78:18:1a:eb:a2:9f:be:9b:e9:18:d9:9d:c8:8c:
d7:04:86:6e:44:11:f8:8d:a1:da:4c:a9:78:25:47:
60:3a:54:58:ad:20:3d:f3:20:a0:79:6c:6e:5e:d4:
22:7d:38:d1:69:3a:76:33:79:9d:f9:0c:7e:5d:36:
f6:8a:b0:c1:98:17:93:39:7d:95:93:e5:f9:89:ad:
bb:23:46:b7:07:59:05:55:b3:ae:6d:4d:59:f9:3e:
80:39:c9:5e:8d:5a:a8:ff:c1:86:e9:33:be:7a:51:
6e:0a:42:91:77:9f:43:7a:f0:fd:56:66:5f:d9:d0:
d1:4e:e6:34:f3:89:8d:ce:c9:7f:2d:b7:5e:ac:ca:
74:e3:93:0f:ea:ed:53:8f:8a:eb:e4:5e:1b:eb:9d:
8b:83:49:30:e7:93:ad:50:e4:cd:a0:f8:ac:88:98:
44:97:4b:8f:57:93:90:45:ee:d3:7d:38:f4:c6:52:
a6:5d:50:f0:b7:d3:cd:b7:f6:f7:1d:60:84:fd:d9:
2b:3b:65:a4:6f:17:1e:24:95:a1:19:f1:0b:a4:7c:
fe:e4:7c:41:d9:f8:df:dc:8c:56:7f:90:90:a6:8c:
8b:1a:c2:01:c2:4a:e9:d7:70:d3:c2:e3:fb:4b:96:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:91:C8:94:4F:71:36:53:A1:EC:AE:FE:40:31:EC:24:60:F1:D5
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5CuRyJRPcTZToeyu_kAx7CRg8dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2d:cf:52:da:e1:e1:41:af:33:4f:f2:dd:1f:3d:ea:c1:e5:
d2:df:be:49:bc:51:d7:50:c2:41:00:85:75:43:da:ce:34:d1:
2d:a3:3c:db:d1:6b:b9:5e:3b:3b:f5:f4:be:d2:ce:2b:03:34:
3a:2f:47:c7:6b:21:6a:eb:85:a3:2e:69:7f:de:5a:66:19:6f:
e8:9a:ed:fc:91:1f:6f:fa:d6:c8:aa:86:f9:f0:c5:57:84:72:
1d:53:42:41:8c:2d:2d:f2:80:43:2d:dc:be:66:05:1d:f8:3a:
0d:27:56:9f:76:d4:3f:8d:c6:3f:de:6c:31:3f:ce:49:5b:c5:
64:1d:67:3c:24:a8:fb:2d:5c:b2:80:a9:90:9d:ab:dd:81:89:
f8:21:e9:43:16:f0:3d:5d:4b:ba:3d:ac:e1:04:3c:f9:e2:81:
23:6b:6a:cb:11:d4:19:21:40:24:72:b6:5f:2c:1e:5f:fa:41:
c2:ac:19:df:ad:42:50:16:b9:ae:6a:6d:e9:60:18:93:0f:ae:
1c:72:b3:af:73:0d:ec:d2:cd:a8:ad:38:da:ac:11:72:08:78:
fb:a3:49:f7:96:39:10:a2:a9:07:c6:c8:8b:64:a2:25:15:1a:
15:a7:29:ce:6f:e1:0d:70:2f:18:b2:05:07:3b:3e:36:3b:37:
bd:29:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:18 2025 by rpki-client