Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa
File: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (raw, json)
Hash identifier: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=
Subject key identifier: E6:C3:31:82:62:1C:CC:04:38:7E:7F:09:27:4F:E3:DC:3A:CC:8D:2D
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0194221FDD97E14CA6933291DA01F84216F7
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203255
IP address blocks: 185.137.48.0/22 maxlen: 24
2a0f:cb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:dd:97:e1:4c:a6:93:32:91:da:01:f8:42:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6c33182621ccc04387e7f09274fe3dc3acc8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:2e:8d:a4:22:01:64:15:76:48:33:3e:62:
41:a8:fe:e3:9e:db:0b:c3:70:5c:60:bd:6d:69:a7:
b6:b9:c3:21:e9:99:86:4a:dd:5d:e9:4f:93:6e:0c:
71:96:20:bf:67:d7:b2:cc:01:71:fc:e0:91:1b:31:
84:83:ea:74:54:59:4d:6c:54:ff:35:14:17:cd:1f:
4f:3d:93:01:b8:70:23:eb:f5:b1:1c:05:6f:85:c6:
6c:40:fc:95:a9:b9:ec:5f:37:5e:41:43:bf:f8:17:
bf:e4:ed:f7:bf:40:c6:1b:4c:6e:16:1b:be:e2:dc:
4f:9c:8b:16:7f:6b:91:ae:43:2e:1b:ed:17:0a:df:
c0:90:ca:82:5f:7a:27:c8:60:24:b9:22:9d:63:8b:
29:8a:fd:5d:ed:bf:02:8e:40:b6:ad:f1:5e:f9:0d:
57:00:02:67:71:9e:f7:df:f1:1e:6e:0a:0d:ff:32:
01:5f:f2:e3:4b:61:3d:01:dd:d8:1e:5e:f6:64:d2:
15:cf:59:10:5a:54:ed:fe:5f:85:8b:4f:a4:fe:0d:
ab:7e:86:cc:64:68:b0:dc:42:80:7f:de:c2:20:94:
71:2f:3d:4e:35:1e:9d:1e:23:87:35:41:e5:cb:5b:
02:18:8d:ae:a2:33:aa:46:91:a9:26:fe:0c:54:a5:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:31:82:62:1C:CC:04:38:7E:7F:09:27:4F:E3:DC:3A:CC:8D:2D
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.48.0/22
IPv6:
2a0f:cb40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:53:d7:75:46:11:2d:a6:dc:a8:2f:ca:d1:3a:da:b5:e5:21:
3f:13:1f:cd:2a:d4:ed:1c:f8:44:c5:77:72:0e:ed:d8:aa:58:
5d:66:5b:54:9d:bd:5b:83:ea:bc:b6:08:a0:b1:29:24:56:2c:
f9:a7:de:8e:4c:a2:fe:de:df:33:f6:07:8e:f7:4a:b2:cc:9f:
06:5e:63:f2:8f:47:f2:67:05:ad:36:0b:b3:64:37:58:05:f4:
03:70:7b:91:f4:92:cc:36:82:1e:58:9a:ec:f6:43:14:c2:2b:
05:6a:df:06:67:e9:ea:26:30:8b:27:e4:07:4b:f2:93:ed:05:
9d:ba:82:61:f8:a7:f7:a9:ad:ac:98:d0:42:29:d0:24:cb:fb:
97:5a:34:e4:57:73:01:b0:a6:a6:06:f2:e0:66:f5:b6:ac:8e:
0c:c2:73:fe:a4:33:a5:74:4c:79:a5:07:90:12:7e:b0:90:64:
af:ad:cf:84:cf:5f:b0:2c:ef:9f:45:ce:99:9a:d0:c3:5e:45:
3b:02:e2:6a:4e:85:97:dd:94:d9:d3:5d:30:ec:b3:1a:c6:55:
7a:94:33:90:fd:d9:09:4d:e6:bc:02:b8:e7:7c:d6:17:66:21:
94:35:a6:bb:8e:cd:c4:90:08:79:1a:7b:af:89:e7:f5:6f:20:
ba:65:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:38 2025 by rpki-client