Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hMxFbe2_woNux6m3JkElwux-E5g.roa
File: hMxFbe2_woNux6m3JkElwux-E5g.roa (raw, json)
Hash identifier: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=
Subject key identifier: 84:CC:45:6D:ED:BF:C2:83:6E:C7:A9:B7:26:41:25:C2:EC:7E:13:98
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019423D7B90AE4A058A6E1DD4723E7CC929B
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hMxFbe2_woNux6m3JkElwux-E5g.roa
Signing time: Wed 01 Jan 2025 21:48:47 +0000
ROA not before: Wed 01 Jan 2025 21:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8330
IP address blocks: 5.57.88.0/21 maxlen: 21
193.203.5.0/24 maxlen: 24
2001:7f8:17::/48 maxlen: 48
2a00:eb20::/32 maxlen: 32
2a00:eb20:abcd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b9:0a:e4:a0:58:a6:e1:dd:47:23:e7:cc:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jan 1 21:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84cc456dedbfc2836ec7a9b7264125c2ec7e1398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:1f:d4:50:a5:39:c6:40:cf:6f:49:6e:fe:
4d:8b:2a:54:0b:ef:3b:8f:cb:78:9f:1f:21:11:53:
f4:44:c0:ab:31:fc:6b:8b:8a:53:f4:b0:8d:71:57:
fb:73:3c:ef:7b:17:97:2a:9e:db:dd:0f:23:49:d2:
48:11:86:88:2c:57:93:30:07:f4:01:55:34:25:73:
8a:4f:40:a6:2d:b6:e8:33:52:96:bc:4a:25:28:29:
87:66:40:be:6e:76:53:59:4c:41:be:c9:b8:5c:a4:
fd:10:24:08:4a:1c:bf:8f:3f:cf:3b:47:e5:84:25:
85:fd:ae:13:e4:99:66:26:ac:09:57:a6:cf:63:07:
3c:6b:3a:91:84:97:ab:a8:a2:84:a9:8f:5d:dc:65:
fd:42:e0:27:14:bd:a8:be:b0:2b:7b:a2:a0:71:dc:
34:9d:b6:60:24:5b:47:35:8b:a8:70:d2:60:e4:a7:
5a:53:b7:4d:3c:46:dc:07:34:74:5b:ab:96:17:dd:
a8:06:26:ee:64:0b:3d:7d:3e:02:1c:46:f5:38:40:
16:ed:86:98:91:14:0c:d6:d1:8e:08:1b:f9:9b:12:
47:a1:80:2d:b9:69:68:74:43:a9:51:41:02:b8:fb:
87:2a:b8:c5:6f:78:58:2b:1a:fd:1e:ca:26:a6:4b:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:45:6D:ED:BF:C2:83:6E:C7:A9:B7:26:41:25:C2:EC:7E:13:98
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hMxFbe2_woNux6m3JkElwux-E5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.88.0/21
193.203.5.0/24
IPv6:
2001:7f8:17::/48
2a00:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
71:9e:06:c6:22:af:bb:d1:a6:3f:31:9c:b4:ac:0b:43:53:3c:
13:f2:1a:00:6f:dc:4d:21:04:f3:f0:da:d3:b5:1f:74:34:57:
c6:15:08:80:d2:6b:b2:07:c3:72:eb:6c:9d:64:2a:f6:c7:9d:
a2:c9:e0:82:89:c0:4e:2d:31:e9:56:9f:4f:fa:5f:36:25:25:
5f:0a:da:79:6d:13:db:2b:fa:f1:e1:05:96:99:fa:e5:f2:8d:
d5:de:71:56:6e:19:eb:62:75:b0:97:99:32:20:b6:1f:18:35:
91:3d:74:75:f1:e1:8b:3b:43:06:6d:e6:fb:df:ca:5d:ca:59:
01:35:e6:5f:6a:73:08:8a:36:c9:ea:10:85:cc:75:d3:02:06:
f3:8e:df:3c:57:6a:e7:12:65:df:56:0e:23:f4:1b:f5:0d:d3:
c6:26:db:e8:32:1c:76:62:7e:91:9b:83:e6:bf:c5:d7:3a:70:
52:07:d3:8d:90:63:d4:e8:32:b6:28:5e:25:37:ca:2d:24:50:
89:95:41:e8:f5:40:d1:47:ff:9f:91:fb:16:57:36:44:ec:84:
4c:26:1f:12:05:cf:11:7d:e6:b7:a8:61:c0:c3:c3:35:0f:e1:
ec:d1:6f:d9:2e:19:c1:3f:55:c1:ec:c3:a6:72:70:11:c0:d9:
d2:42:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:05:48 2025 by rpki-client