Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5RNQOoYI7rp8d4nASoBcHUOUpY8.roa
File: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (raw, json)
Hash identifier: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=
Subject key identifier: E5:13:50:3A:86:08:EE:BA:7C:77:89:C0:4A:80:5C:1D:43:94:A5:8F
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019424B3D23D9D2BFA7738FF242F774F8B32
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5RNQOoYI7rp8d4nASoBcHUOUpY8.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.17.68.0/24 maxlen: 24
193.30.161.0/24 maxlen: 24
193.200.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d2:3d:9d:2b:fa:77:38:ff:24:2f:77:4f:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e513503a8608eeba7c7789c04a805c1d4394a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:42:07:a4:2e:30:42:e2:12:a4:60:f5:fa:
cb:a6:b3:0b:a7:cc:c4:77:0b:65:a8:df:76:1b:f1:
67:1c:23:7b:bf:eb:b2:ef:e7:c1:3e:83:2a:aa:bc:
20:94:bf:e0:75:4b:fd:f2:95:0a:e2:e0:40:41:9d:
70:40:ad:43:1c:d8:e4:ae:0a:39:9b:a6:ad:8c:75:
d6:ef:09:4a:7a:56:7a:a2:9e:0b:a7:ab:18:2f:ee:
e5:7c:79:47:4f:f9:a7:ea:3d:ef:4d:2d:ad:62:9b:
fe:06:44:36:87:f7:59:52:24:51:1e:1c:34:85:a6:
9c:62:00:06:35:79:4d:f3:e2:6e:4f:2b:17:9e:d3:
fa:b6:dc:8e:c3:4b:a7:3a:cc:74:dd:75:16:08:07:
aa:7f:4a:29:f6:dd:30:9a:63:e7:d9:92:88:94:9c:
df:e0:b9:db:32:15:97:b0:f5:33:82:8c:8d:12:9e:
70:6d:18:8e:bb:61:72:ed:c6:6a:27:b7:50:28:a0:
1b:bd:dd:f7:f6:8a:86:b7:79:52:86:37:f7:28:23:
8f:66:6e:b9:69:04:23:c2:7f:6a:48:7e:d0:69:86:
7d:98:9b:2e:41:f0:f5:d5:1a:28:fa:bc:f2:26:65:
ca:32:92:9c:34:bf:73:19:e0:57:e1:90:ae:c7:7d:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:50:3A:86:08:EE:BA:7C:77:89:C0:4A:80:5C:1D:43:94:A5:8F
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5RNQOoYI7rp8d4nASoBcHUOUpY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.68.0/24
193.30.161.0/24
193.200.30.0/24
Signature Algorithm: sha256WithRSAEncryption
73:66:82:82:5e:5b:cb:1e:2f:a8:b0:96:b1:17:0c:47:be:c1:
cb:91:b8:39:1e:62:55:9d:c8:00:50:c4:1a:26:ea:d4:e7:97:
8a:76:3f:db:79:0a:12:50:6a:dc:3c:67:94:c9:dc:dd:b2:72:
e6:b9:c3:15:7d:49:57:f1:c5:75:71:f7:38:cf:0b:45:aa:a5:
d6:8d:43:2a:55:db:3c:98:3c:62:45:2a:27:6b:e9:d8:33:a1:
f1:20:04:9c:d7:ef:27:17:86:dd:0d:c4:b7:db:48:f0:27:e6:
eb:2e:a7:58:e0:3d:26:e6:38:c7:98:8c:95:35:f4:2b:85:bf:
cc:60:4e:76:ef:5a:49:d5:20:84:f1:0e:a0:e8:92:09:0b:55:
9d:78:be:66:b2:15:15:b5:42:80:6b:5a:ee:62:56:c8:87:e4:
ee:a9:fe:04:7a:d5:22:24:e4:32:99:74:6b:6f:03:73:d6:de:
75:c2:2d:38:14:46:30:6a:fd:d6:c0:05:ff:a3:d1:d6:8e:bf:
06:3c:07:1b:dd:7a:1d:39:0e:97:36:4d:f9:86:dc:22:9c:a5:
3b:2c:8c:99:2f:30:07:2e:f0:da:66:4f:77:67:20:8c:3f:f3:
07:f6:e2:e0:be:78:22:62:03:d5:49:7d:5d:11:71:a0:a0:1e:
73:49:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:13 2025 by rpki-client