Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/c5fFCVniuaVrBsD_Nwk2TtVnN5k.roa
File: c5fFCVniuaVrBsD_Nwk2TtVnN5k.roa (raw, json)
Hash identifier: 2F0iEn5y0U+JKFhXRxhBpFLCV7UnXlJujBJpj6FST8s=
Subject key identifier: 73:97:C5:09:59:E2:B9:A5:6B:06:C0:FF:37:09:36:4E:D5:67:37:99
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E8054D64A079DDC81C425A7381A0
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/c5fFCVniuaVrBsD_Nwk2TtVnN5k.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9833
IP address blocks: 46.232.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:05:4d:64:a0:79:dd:c8:1c:42:5a:73:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7397c50959e2b9a56b06c0ff3709364ed5673799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:e6:31:1a:30:53:f8:b4:08:7f:79:3b:ee:
e0:29:02:b1:ae:1f:c3:41:2d:6f:7f:f8:30:d0:ca:
d0:a8:71:b5:5f:8f:4e:4c:f3:66:f6:31:cd:60:29:
61:1f:35:a6:57:12:db:59:95:5c:87:07:5c:d1:0e:
4e:e7:bd:cb:a4:06:b3:98:ec:b2:2f:84:59:19:73:
cb:55:a8:73:52:8d:28:87:f7:f9:ee:64:d6:b5:40:
07:3f:64:3f:5b:c4:c6:37:47:30:dd:62:58:7e:ad:
ae:53:9b:ee:f4:79:cf:1e:04:71:bf:12:2a:f4:98:
99:aa:f1:0e:b3:20:4d:df:07:af:06:96:41:ef:02:
5f:44:9b:1d:13:42:2f:e5:0d:ba:cb:54:09:d7:2f:
ac:da:28:f9:77:d9:62:dd:b7:33:eb:b5:58:c5:76:
2b:a0:06:5c:41:81:86:c4:7f:89:8e:c3:79:53:82:
78:28:e0:0e:d4:73:19:80:18:db:42:12:42:4f:e7:
41:b0:43:46:82:c4:92:23:d5:35:ef:1d:0d:74:34:
d8:90:6f:75:a0:bf:62:f1:b5:37:3d:a8:5c:bd:e4:
cc:44:7c:17:bb:bf:88:9e:34:2b:29:51:9b:76:9e:
2e:5f:b2:9d:09:ac:93:b8:e8:7c:4f:0c:b2:00:c9:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:C5:09:59:E2:B9:A5:6B:06:C0:FF:37:09:36:4E:D5:67:37:99
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/c5fFCVniuaVrBsD_Nwk2TtVnN5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ff:ab:f7:f4:3b:e6:13:40:4d:5a:3b:6a:90:4b:96:9c:12:
8e:44:38:0e:9e:4e:a3:d7:d9:e3:3e:90:8a:7d:fb:90:46:c8:
2e:4b:b3:26:1c:66:7f:99:bc:6d:a4:79:8f:dc:3c:3b:5c:88:
10:a3:88:84:d9:df:29:3e:41:31:7a:bc:dc:9a:a3:7a:68:62:
38:c2:95:94:13:6d:83:87:ba:d2:f6:d4:d1:ae:84:e3:e0:59:
3c:f6:79:5b:44:7b:62:cc:85:7c:79:11:1c:94:3e:fb:6a:04:
e8:a1:a6:f2:f7:da:51:ec:88:61:1f:8b:29:57:ee:f1:f8:42:
f2:c5:9b:82:26:1d:92:82:8f:8c:8a:dd:52:dc:1a:01:35:9d:
6b:59:d6:61:51:92:a3:72:ce:f8:9d:36:f7:9c:0b:e8:4e:36:
4e:12:f9:ef:4d:89:ca:d5:44:ca:bf:62:df:c4:7d:68:3e:9d:
22:1b:90:95:2b:21:83:58:e1:69:41:22:98:8f:4c:4a:12:d3:
bb:7e:00:95:9d:2f:1a:89:7d:1e:03:da:94:74:b2:9c:ce:df:
47:54:b0:14:88:1a:6b:4c:77:b5:69:91:40:47:a6:19:f1:69:
4f:67:8b:4b:10:9b:aa:94:1b:24:8f:c3:a4:4c:cf:cb:5b:91:
04:78:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:44 2025 by rpki-client