Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5luPFN5i1lVouRmEBcyTwypwbk4.roa
File: 5luPFN5i1lVouRmEBcyTwypwbk4.roa (raw, json)
Hash identifier: NHJ5Mbfg05vw8ufC9Y1UIjix6uHWmtoYQh4zJ5PimRw=
Subject key identifier: E6:5B:8F:14:DE:62:D6:55:68:B9:19:84:05:CC:93:C3:2A:70:6E:4E
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C65E4E3ED4CFB957AD0D1FE5D3B70
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5luPFN5i1lVouRmEBcyTwypwbk4.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50543
IP address blocks: 2a02:2698:7000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:65:e4:e3:ed:4c:fb:95:7a:d0:d1:fe:5d:3b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65b8f14de62d65568b9198405cc93c32a706e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:55:73:bf:86:20:3a:cf:ab:77:5a:b5:d0:
53:82:f2:c2:61:5c:d1:a3:c9:ac:6b:4c:66:b9:fa:
0a:e5:38:d9:73:91:01:28:d6:67:13:df:b4:f5:4c:
b8:5d:8e:e8:9f:4b:1e:82:79:7a:18:46:c1:ab:cb:
5b:5d:1a:2e:47:82:0c:6b:b1:36:2c:18:3e:52:e9:
87:fb:52:76:8c:c2:d1:c9:fc:e7:33:3b:89:4a:ef:
de:c3:c0:17:d7:8b:d0:cf:c0:21:31:90:39:f5:c8:
21:62:ae:43:6a:fd:15:42:62:09:43:e6:9e:59:05:
b0:8d:1a:7c:8f:4b:7d:8e:49:36:9e:f0:14:0b:ef:
fa:91:c3:81:65:0b:37:2f:4e:e7:65:b5:40:8a:ef:
82:5a:a2:a2:f9:6f:df:e5:ad:4a:8a:e5:cd:e5:05:
65:f7:f2:b4:41:f9:ac:fd:0a:23:ac:2f:37:63:54:
f4:18:76:08:85:84:13:20:5c:97:b5:95:5b:4f:4a:
4f:9a:68:9c:8c:7d:46:13:b9:23:91:b0:fb:d1:35:
2f:84:33:90:51:46:9c:38:59:58:1a:7f:64:62:81:
bd:8a:84:aa:c8:18:26:34:b0:0d:33:e2:49:27:4e:
0f:4b:3f:00:eb:39:b0:d3:ab:65:30:6e:29:a5:74:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:8F:14:DE:62:D6:55:68:B9:19:84:05:CC:93:C3:2A:70:6E:4E
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5luPFN5i1lVouRmEBcyTwypwbk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7000::/38
Signature Algorithm: sha256WithRSAEncryption
9d:5f:cc:1c:04:15:12:e2:7c:3e:21:c6:29:9d:65:f1:a9:6d:
9a:80:a8:f9:07:06:20:22:db:cf:43:64:e8:ef:07:97:26:b3:
3d:5a:59:66:55:d8:2a:07:ba:9f:02:83:d0:e6:e3:31:df:bb:
01:b5:4a:64:9f:9f:f5:15:22:5b:03:c7:ce:29:de:6c:12:f8:
53:de:dc:8c:1f:57:91:aa:f8:5f:f4:cb:4c:b9:54:59:99:28:
5f:ff:ea:a8:90:a2:70:f5:1e:a2:72:be:04:af:35:c9:8d:c9:
7e:ac:9b:0f:4c:8e:a6:ae:c6:63:80:dd:f1:07:bf:2c:22:de:
73:01:eb:90:7b:b9:bd:51:c8:bc:4a:53:66:2c:ad:69:a8:49:
2a:86:cc:45:e9:e0:2c:a5:de:ce:1d:a0:98:a2:34:fc:ce:86:
95:2a:77:57:4b:75:c2:62:b9:5b:e5:bb:cd:1a:b3:9f:7e:a9:
78:4b:ec:02:a2:2a:f8:7c:9a:07:d8:5d:17:0c:55:da:85:01:
5e:4a:61:e1:00:a2:24:0f:6e:eb:b5:fc:97:06:cb:3b:e7:9d:
56:c5:3e:db:ef:45:16:53:e5:d3:89:2e:5a:e2:7c:83:28:80:
1d:9e:4b:e8:fb:8d:4c:83:81:89:45:9d:a5:04:18:70:aa:21:
0f:aa:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:23 2025 by rpki-client