Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5QubX3BsIOZmCr0lJWaWo_8taiI.roa
File: 5QubX3BsIOZmCr0lJWaWo_8taiI.roa (raw, json)
Hash identifier: Jf6CPMuS9TJ6fnoWKDQrgx5dNf/KjdcmveH/bpaz+Q8=
Subject key identifier: E5:0B:9B:5F:70:6C:20:E6:66:0A:BD:25:25:66:96:A3:FF:2D:6A:22
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0195B47041477B8F1A645740CEFD76929AAE
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5QubX3BsIOZmCr0lJWaWo_8taiI.roa
Signing time: Thu 20 Mar 2025 16:43:30 +0000
ROA not before: Thu 20 Mar 2025 16:43:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 188.209.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:70:41:47:7b:8f:1a:64:57:40:ce:fd:76:92:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 20 16:43:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e50b9b5f706c20e6660abd25256696a3ff2d6a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:7a:5a:e6:4a:d4:26:04:99:94:5e:2b:be:
fc:2c:9e:10:87:64:af:ef:15:11:12:56:c7:4a:ac:
18:a1:ed:ae:e6:bb:b6:72:2e:f4:50:13:70:b8:99:
10:50:64:b8:59:7d:8f:65:40:39:90:10:b3:ff:8f:
18:22:34:d7:50:35:04:be:8e:a8:84:16:98:d0:6b:
15:c3:13:db:e5:a9:c6:17:a2:59:76:40:3d:c1:75:
b5:01:48:dd:f1:55:16:9f:2a:8e:92:2d:98:94:48:
e6:4e:f4:40:66:8a:1c:79:92:64:0d:ae:30:c3:62:
08:dd:03:ff:7a:6c:d2:f2:bc:06:f9:b5:2a:72:1f:
32:72:62:d3:a8:02:ae:ad:74:99:29:d5:f5:95:b8:
ea:eb:3a:85:6f:2f:a6:db:5f:8c:45:ca:d2:83:d0:
20:1b:b3:51:5c:2a:03:40:a8:da:2e:ae:20:21:bc:
07:56:76:12:dc:d4:ff:d3:1a:de:a1:8a:fe:bc:ce:
7e:81:7b:4b:0e:31:b0:f5:20:43:45:51:45:11:5e:
5a:98:35:31:5c:d3:ea:1a:99:29:66:53:15:4f:c6:
12:d9:ee:f9:cd:7a:28:77:a9:07:0b:e0:a1:bb:ae:
ce:e3:5e:90:0d:25:4f:3f:9d:db:1a:fa:dc:0a:5f:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:9B:5F:70:6C:20:E6:66:0A:BD:25:25:66:96:A3:FF:2D:6A:22
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5QubX3BsIOZmCr0lJWaWo_8taiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6e:dc:d8:7d:46:bb:06:54:57:c7:db:f6:b3:77:0d:65:36:
c6:6c:b4:d5:01:4c:f6:3d:40:a7:f5:ff:ae:c4:9e:d2:58:e3:
65:28:7d:65:ec:ec:35:05:5e:fb:e6:d2:00:74:b0:f4:1c:66:
33:a3:0d:03:1f:e3:13:1c:cc:63:31:23:12:1d:64:21:80:98:
b7:b0:40:66:5c:c4:06:13:f8:cb:8e:31:05:43:83:a7:a1:82:
af:3b:47:4a:96:08:9a:56:23:49:02:13:00:3e:a9:ef:1e:97:
91:7f:d2:41:ac:78:38:d8:33:b7:69:9c:c1:37:0f:a4:f2:7f:
7a:0f:79:2a:3b:39:f8:bd:73:9d:9a:b2:a1:c9:db:6d:7e:df:
93:69:32:1f:70:00:28:43:de:ab:d0:38:55:c0:e5:da:fb:fb:
6a:62:92:03:7d:15:28:ab:7b:67:64:ca:5e:3a:a7:f7:e5:5f:
85:b1:c2:3e:9f:ea:3b:31:65:30:e8:af:57:57:78:d4:c2:ca:
9f:37:74:56:d7:f3:ae:02:db:93:89:72:3f:98:39:cb:35:eb:
5d:4e:ba:d6:d1:05:93:e3:9d:b0:85:6c:d7:78:e9:5b:f8:71:
ab:06:fa:08:24:e0:aa:98:fe:d4:4c:92:e7:1e:ae:06:13:6a:
d0:06:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:57:10 2025 by rpki-client