Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5XAvJyuSthBRucr-mXVm5vpEiTU.roa
File: 5XAvJyuSthBRucr-mXVm5vpEiTU.roa (raw, json)
Hash identifier: M/DUwW+ZJiJv9NfCOxgbCZ/88URM3elutWKWzCxtjJA=
Subject key identifier: E5:70:2F:27:2B:92:B6:10:51:B9:CA:FE:99:75:66:E6:FA:44:89:35
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F328B578FCE41BFAEA0041386A48
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5XAvJyuSthBRucr-mXVm5vpEiTU.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137443
IP address blocks: 46.3.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f3:28:b5:78:fc:e4:1b:fa:ea:00:41:38:6a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5702f272b92b61051b9cafe997566e6fa448935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:37:c3:29:d3:72:89:79:6b:91:fc:cd:1a:
1e:79:44:7a:7e:14:78:d9:ba:fb:60:45:54:82:ce:
12:ed:04:59:d5:73:6b:38:e0:65:37:40:86:b3:3a:
0b:93:91:43:2d:e8:d4:85:5d:b8:07:14:80:a0:6f:
b0:f3:1e:de:1c:f6:6a:11:14:51:11:99:8b:98:1b:
01:4e:b8:c9:d6:77:21:b0:20:8c:9d:70:bf:b6:04:
93:15:6d:46:ca:9d:20:4b:ff:9d:35:a5:bf:0b:9a:
3c:86:c4:8f:77:35:2b:ca:89:ce:37:d5:8f:c1:27:
97:87:ee:7a:a6:d2:4b:14:61:a7:74:76:d9:cf:47:
01:3b:37:1e:83:56:d5:d8:29:13:49:cc:db:81:fa:
66:d6:db:ce:c0:86:73:16:85:a2:e2:44:a8:4b:20:
8d:a3:42:02:c2:1e:cc:50:be:dd:78:92:07:7d:e1:
1b:e8:ae:17:68:ca:94:45:53:9e:fd:e9:06:fa:a3:
6e:78:66:d2:cf:c8:84:29:4f:e8:e6:40:74:36:fa:
ef:58:17:c5:b6:8f:c5:1d:26:6d:e3:4e:1d:41:7c:
c4:87:33:2f:7f:07:3c:98:dd:e8:e6:a4:cb:e9:f3:
96:8a:5e:5f:b2:bb:34:f3:0f:e7:79:4a:67:30:00:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:2F:27:2B:92:B6:10:51:B9:CA:FE:99:75:66:E6:FA:44:89:35
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5XAvJyuSthBRucr-mXVm5vpEiTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7d:af:f2:1a:a9:9f:d3:20:18:43:f5:d6:13:6f:50:7b:b8:
24:28:1e:6c:d9:03:ae:8f:8c:75:e9:ad:93:c2:dd:1f:70:25:
88:cf:c4:c7:3d:85:fa:4a:60:01:ed:3e:8f:a4:31:bb:03:19:
1c:3c:91:b9:64:53:ae:2a:15:81:23:16:48:3c:af:9c:37:60:
7f:f9:bf:fc:a9:52:a7:7b:9c:60:93:f8:51:4c:0c:bd:9a:c1:
b9:b1:05:4e:bb:94:19:ec:f5:bc:6c:4e:fa:96:bf:c3:fe:a4:
1d:e7:88:81:f7:f2:19:a5:ae:0f:91:12:ca:92:f3:f1:2c:b2:
1f:ca:49:68:31:45:99:43:0b:13:c8:2f:e8:4c:8c:6c:e3:48:
a4:ff:cd:5d:2d:35:12:4c:b9:d4:13:e2:07:1f:08:03:e8:9e:
08:9b:b1:03:11:2a:93:43:b7:bb:90:ee:ce:9e:1f:4f:64:35:
ed:40:98:71:7f:64:8b:57:7e:2f:03:9e:8b:91:08:42:d6:aa:
d0:76:ae:fe:03:a9:ba:31:81:0d:75:4e:c4:f2:40:d6:c3:52:
48:33:1c:b9:1f:b4:db:0f:25:2b:9c:66:09:55:4f:68:df:b1:
79:44:e1:18:ee:a7:53:2c:09:87:ca:c4:b9:3b:a2:f1:13:12:
78:71:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:13 2025 by rpki-client