Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa
File: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (raw, json)
Hash identifier: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=
Subject key identifier: 7E:A2:91:82:9C:0B:37:12:C6:BB:6E:30:15:4D:99:28:FB:88:1B:71
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01944FD169E575159B7BA4301E798E55BB98
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa
Signing time: Fri 10 Jan 2025 10:45:11 +0000
ROA not before: Fri 10 Jan 2025 10:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51358
IP address blocks: 5.181.81.0/24 maxlen: 24
5.181.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:d1:69:e5:75:15:9b:7b:a4:30:1e:79:8e:55:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jan 10 10:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea291829c0b3712c6bb6e30154d9928fb881b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:ca:5a:aa:d8:78:58:2a:a0:ab:28:f9:25:
85:a6:72:25:ab:83:2a:c3:b6:31:f6:84:68:01:3e:
4f:49:2a:af:1a:87:85:1f:6a:34:4c:11:c0:65:8f:
a9:f5:6b:a9:e9:a2:ed:87:b1:88:92:5a:fd:a9:b5:
7a:df:44:bd:a4:7e:b4:0f:d0:4f:15:9f:85:35:86:
32:3b:94:b9:46:a8:7b:3e:26:c9:d2:66:8c:f8:cf:
25:28:5e:af:1c:67:32:49:0b:29:31:de:d3:39:bb:
09:e6:fb:5a:d2:3a:47:49:0d:b0:41:f8:35:3d:54:
ff:96:3b:92:0c:b3:54:6b:5e:35:a7:e9:56:14:85:
31:65:ba:de:1b:b9:97:dd:71:95:a8:48:15:6b:96:
b4:fb:f9:2a:60:20:5f:2a:da:d7:ce:87:70:b0:67:
ed:48:ee:47:46:ef:d1:f2:13:85:75:a1:8e:14:33:
b8:7f:bf:e5:d9:2a:54:0c:84:e5:44:5f:e4:b2:5b:
ae:5c:29:66:bf:ce:4e:8c:1e:83:1c:df:8d:cb:ec:
46:3c:fe:6e:f9:2f:c5:fb:21:46:f0:93:e9:ab:4c:
9b:44:fe:4a:c2:7b:b9:e4:5c:a5:42:49:26:a5:bf:
f1:41:8f:e8:d5:99:4b:76:f8:1e:b5:f6:f6:78:30:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:91:82:9C:0B:37:12:C6:BB:6E:30:15:4D:99:28:FB:88:1B:71
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.81.0-5.181.83.255
Signature Algorithm: sha256WithRSAEncryption
3d:f9:65:c8:57:52:f6:ee:3d:cd:af:5a:0f:80:b8:24:2f:49:
44:b2:46:3e:ab:c1:e0:d5:3a:05:3a:80:a1:91:10:5e:9a:bd:
4a:f9:db:d6:b3:c8:00:36:91:d7:91:d0:db:12:78:38:63:26:
7d:06:e7:73:47:9d:be:9a:49:57:82:94:58:82:4d:f6:e0:b2:
d8:82:99:6b:ac:29:25:af:e4:c0:5d:3c:52:ec:9b:dc:6f:1a:
00:ff:7a:81:11:20:3b:96:d6:25:1c:04:f7:3a:a3:b0:cf:60:
5a:d6:7f:0e:1b:bd:e6:1b:73:70:a6:b9:4a:aa:43:03:e6:4a:
4f:17:36:a3:7f:35:7c:66:e7:78:49:5c:45:50:56:89:fa:5c:
7b:ad:23:99:2e:5a:58:68:fc:28:5c:d7:7c:a0:cb:b5:12:eb:
e2:c7:13:1e:bc:27:13:09:b5:e1:55:40:65:cb:9e:24:0c:b2:
69:37:ba:db:98:d1:a6:50:92:b8:44:0a:d8:e7:6f:0a:b5:34:
54:26:6e:4f:7c:fb:24:82:86:3b:f8:fc:f5:1d:cc:dc:5c:9a:
24:e8:e0:ca:9d:52:a3:0c:a4:d3:c9:ca:12:ee:ca:92:a1:8e:
6f:2e:75:14:49:86:dd:03:68:59:84:16:a8:28:4b:ef:97:e3:
88:cf:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:02 2025 by rpki-client