Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5XQDvCRFfpki5_C8-OeBVN6v1H0.roa
File: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (raw, json)
Hash identifier: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=
Subject key identifier: E5:74:03:BC:24:45:7E:99:22:E7:F0:BC:F8:E7:81:54:DE:AF:D4:7D
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 019420680606F05145F5757AF3648A24BFF7
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5XQDvCRFfpki5_C8-OeBVN6v1H0.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 141.113.16.0/24 maxlen: 24
141.113.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:06:f0:51:45:f5:75:7a:f3:64:8a:24:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e57403bc24457e9922e7f0bcf8e78154deafd47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:90:95:fb:af:a9:7a:1d:48:96:9c:74:3f:
bb:80:b2:5d:01:42:ec:0f:97:70:a2:fa:57:14:01:
fb:97:66:93:a0:3a:1f:83:8e:95:00:ac:f4:0b:c8:
3f:9f:5c:29:e4:f2:cb:b4:2d:a6:f5:c7:b6:21:32:
78:d7:9b:dd:91:4e:1c:39:2e:8a:4b:a8:c9:4c:9e:
1e:20:9a:ed:77:da:38:07:70:aa:ed:11:fc:7b:e0:
ad:33:15:fa:79:53:69:fe:89:07:e6:50:2b:dc:07:
9b:0d:3f:13:7a:03:45:93:ad:54:c0:12:1d:4a:ee:
ff:d6:20:5a:23:d0:32:17:d7:8c:be:d1:11:f9:db:
a7:28:15:1e:57:a4:97:b0:d8:ef:4f:5c:1a:6b:57:
59:21:99:7e:11:79:f2:c0:63:8b:30:d0:09:43:e0:
e6:c0:06:a7:9f:c2:2a:77:35:ef:6a:2a:e8:7c:fb:
0e:2c:57:3c:77:ca:93:b7:8d:1c:23:27:06:9f:2a:
15:fd:c3:01:51:d9:cb:66:11:30:3e:8a:38:db:c1:
fd:56:98:df:24:df:f2:cc:97:bb:0b:03:ee:d5:3e:
d0:b5:a5:0d:6e:0b:ad:f0:ab:f5:84:e6:ab:c4:d4:
70:0f:19:43:46:a7:e9:ca:82:7e:88:9a:69:08:56:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:03:BC:24:45:7E:99:22:E7:F0:BC:F8:E7:81:54:DE:AF:D4:7D
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/5XQDvCRFfpki5_C8-OeBVN6v1H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.16.0/23
Signature Algorithm: sha256WithRSAEncryption
72:27:c9:e0:83:d1:60:df:59:48:df:0a:ae:0a:33:3f:ed:72:
5e:00:18:02:44:e1:69:eb:b3:e9:31:a6:95:4f:82:f1:dc:65:
9e:f5:46:fc:4a:fb:af:4e:7f:ec:1e:2d:5d:9e:97:54:67:2c:
26:d7:b1:e4:32:e7:a1:07:a5:14:55:d1:6f:8c:b7:80:69:bd:
4b:81:54:e7:8c:b0:0d:9a:f8:5c:be:a4:4f:f8:49:df:c2:98:
ad:55:d3:1f:43:df:f1:ae:55:c7:29:72:a1:02:c4:c2:73:75:
d5:2b:0a:e6:95:99:67:27:eb:ec:8a:e8:01:9e:de:20:c5:0a:
90:16:b6:27:70:0a:20:e8:6a:d0:f0:7b:a6:19:99:9e:5e:53:
18:10:f3:fe:fc:fd:a7:c4:f0:a8:0f:32:71:7d:e1:21:1a:3c:
80:7e:c2:f4:03:ac:f8:44:51:a0:47:22:5c:f1:f5:8e:14:48:
a2:42:33:fc:a1:0e:ef:03:e3:db:fb:4f:d7:88:fa:97:4d:70:
cd:3d:65:05:6c:07:fb:cb:9e:8d:ed:a6:19:f3:66:00:d0:d5:
81:da:7e:5a:46:66:10:3b:c0:47:b0:8d:ce:67:9c:10:4d:ba:
57:10:1b:11:fe:c0:ee:ff:37:37:cb:c8:1a:44:5d:d9:07:f3:
bc:a6:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:30 2025 by rpki-client