Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa
File: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (raw, json)
Hash identifier: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=
Subject key identifier: 8F:91:6D:E5:6C:BC:27:12:05:FC:6A:0F:5F:3D:B6:97:F2:97:22:35
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 01942068201A602F174DF0F0E063147143E6
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50578
IP address blocks: 91.238.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:20:1a:60:2f:17:4d:f0:f0:e0:63:14:71:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f916de56cbc271205fc6a0f5f3db697f2972235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:5f:b4:1f:f7:66:8f:68:89:e8:72:88:77:
80:52:87:3d:6a:83:af:0a:18:6f:52:6b:74:d8:40:
9c:2b:27:0a:78:ea:a8:89:bf:6e:a0:21:04:92:7a:
c5:95:63:62:39:37:89:09:25:e0:d2:8f:a9:38:67:
2e:80:f3:96:f7:59:7d:f9:ca:53:6f:78:c0:0f:87:
e3:46:6a:a2:e1:14:95:a5:c1:71:b4:88:17:14:7d:
bb:1b:48:f9:ef:76:01:24:ab:b1:0b:a8:88:22:21:
85:17:84:eb:bd:65:c7:59:24:7d:a0:30:39:95:b9:
fb:42:75:35:67:4e:a9:85:fc:a9:89:64:d1:b0:17:
41:6e:d5:4f:b9:e8:0f:35:b8:2b:b3:6e:57:b7:68:
9c:d5:f7:26:d3:43:fb:0f:86:4d:a4:79:12:57:aa:
f7:b2:5e:ee:96:4a:e5:01:46:b7:8b:f1:19:6d:5d:
77:f5:3d:90:e3:b1:de:82:37:87:6b:74:48:c4:cc:
ba:0d:29:5b:d7:6f:0b:53:21:3d:3e:d2:18:f4:e1:
4e:40:08:b1:be:c8:7d:6b:40:f7:70:2d:28:9d:f8:
68:19:d2:68:98:e8:cc:44:85:cb:ea:1a:ac:c8:ce:
e7:6e:bf:78:e9:54:07:4d:37:bd:20:ab:a0:f8:f0:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:91:6D:E5:6C:BC:27:12:05:FC:6A:0F:5F:3D:B6:97:F2:97:22:35
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.50.0/24
Signature Algorithm: sha256WithRSAEncryption
73:16:84:46:24:b0:71:d5:28:4f:42:c0:9a:d3:d6:1b:84:02:
c1:d7:ab:28:79:22:3b:f5:e7:db:3b:dd:e7:49:47:15:c6:a6:
b9:b2:9c:5f:11:b5:aa:54:28:d2:a9:8b:fd:16:99:6c:ae:d4:
f8:e2:ce:0b:14:17:97:2b:80:21:0c:67:5c:4f:4a:bd:2e:07:
0b:3b:6c:fc:4f:90:78:c1:05:ab:51:2e:11:e2:91:01:c6:13:
62:d3:ac:fb:29:67:7a:84:78:4a:f2:2c:8c:da:3b:76:6f:e9:
99:35:fc:72:7d:9e:c2:6b:11:22:90:10:fc:98:ee:ec:eb:9b:
46:e1:86:bd:af:e4:15:39:8d:5a:5d:f1:70:7a:c3:c9:ee:09:
95:f9:31:2c:99:11:b8:93:4f:2d:35:e6:00:32:51:e8:98:0e:
9a:26:20:1b:04:76:9c:59:be:d5:2d:99:73:9a:5f:bf:de:82:
ca:18:31:9e:54:e6:a6:1f:1c:97:c1:b9:96:e4:b8:9d:27:f5:
08:d1:e5:d5:36:51:ad:02:4a:28:06:41:1c:bf:6d:fc:7b:94:
8f:b6:00:ad:ef:30:e6:c1:97:ee:07:f9:03:2e:b0:36:96:77:
d2:27:72:a4:70:19:4b:8f:1e:a8:f4:25:bb:34:c4:e7:1b:b8:
28:fa:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:23 2025 by rpki-client