Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/j0kswT18M65pGw9oZ5vF0p46VKQ.roa
File: j0kswT18M65pGw9oZ5vF0p46VKQ.roa (raw, json)
Hash identifier: 32N3pVed44e+OfqPtN7yUzxwpydaC6y88MI0aFPEPT8=
Subject key identifier: 8F:49:2C:C1:3D:7C:33:AE:69:1B:0F:68:67:9B:C5:D2:9E:3A:54:A4
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C566BE79524FA6EAA827B4B20A9C1
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/j0kswT18M65pGw9oZ5vF0p46VKQ.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9049
IP address blocks: 5.3.85.0/24 maxlen: 24
188.234.152.0/21 maxlen: 24
2a02:2698:a100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:6b:e7:95:24:fa:6e:aa:82:7b:4b:20:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f492cc13d7c33ae691b0f68679bc5d29e3a54a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:86:54:98:5b:ca:d9:63:9a:16:5f:85:8f:
14:db:3d:b3:b1:74:23:4f:fd:c9:72:74:22:d4:58:
52:ec:f8:85:55:31:86:51:02:4e:fd:73:16:ef:5d:
ca:40:e1:de:9a:27:c3:68:26:87:78:63:d4:69:c5:
42:84:e8:51:f1:5e:9c:18:af:1d:4b:bb:1f:9c:d9:
91:20:e6:ec:83:ba:9b:8d:01:c5:64:0c:44:57:b2:
d4:73:bc:2b:7c:68:b9:01:b8:99:47:ed:ce:f8:1d:
16:cb:67:42:92:74:fb:4a:b3:4a:db:57:16:9d:ab:
26:6c:5c:ac:52:09:ae:43:66:42:0a:bf:b0:99:76:
a8:89:a3:d2:ac:1a:d0:92:3a:14:05:9d:19:50:fb:
34:4b:01:ee:74:fd:7e:bf:05:9f:66:a2:3a:01:08:
a0:20:fd:50:88:66:07:50:72:33:cb:e3:bb:64:0e:
27:c5:62:2b:95:9a:9e:12:46:68:0a:14:4e:c6:f2:
b7:3c:c1:51:78:2a:5b:be:ec:86:90:87:74:45:4c:
88:dc:74:d5:a1:39:f6:1e:09:5c:18:93:5e:4d:ec:
33:1f:8e:bd:3e:0b:30:1e:d5:d3:d4:0c:a4:63:3f:
14:70:a5:93:f8:bf:55:ec:17:31:06:55:c1:fa:cd:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:2C:C1:3D:7C:33:AE:69:1B:0F:68:67:9B:C5:D2:9E:3A:54:A4
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/j0kswT18M65pGw9oZ5vF0p46VKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.3.85.0/24
188.234.152.0/21
IPv6:
2a02:2698:a100::/40
Signature Algorithm: sha256WithRSAEncryption
16:49:b8:66:cf:d9:22:0f:07:da:03:ee:7c:25:a7:a4:29:d6:
dc:6a:4e:a3:fd:76:c7:a1:97:cb:af:e5:44:63:4f:be:a7:2e:
8d:3d:6a:cc:d4:69:cd:3e:06:9a:49:0d:d0:94:71:72:3f:1c:
93:37:37:e9:17:99:fa:6c:1f:5d:d7:65:2a:61:cb:ba:7d:21:
e8:eb:86:ab:a8:b4:b1:fb:33:40:20:f3:13:80:32:62:22:8c:
d2:12:82:bb:98:6f:71:8f:a2:9d:b4:1f:12:1e:ff:07:ff:ec:
42:dd:6c:0b:56:b7:27:47:0e:96:a9:69:82:c4:c1:78:a0:a7:
a1:73:39:14:36:ea:bb:54:09:b8:c4:93:c9:44:64:3f:f9:49:
ff:34:7f:9a:88:d4:a4:c5:41:e6:dd:96:16:38:cc:3f:bc:f2:
f5:84:62:02:1e:45:64:e7:8c:a2:7f:68:e4:c6:b4:25:f7:10:
31:c9:b3:09:de:53:1d:f9:84:87:c3:88:7b:98:2c:6d:5d:67:
03:93:93:08:67:24:97:39:45:fa:c4:57:6b:3b:55:c1:b4:10:
89:cd:04:0c:af:31:30:d8:8c:f3:08:d0:f5:c6:96:d3:fa:75:
a1:c2:49:d5:21:2d:20:19:20:b0:63:82:94:15:fa:29:bc:24:
2f:7b:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:01:10 2025 by rpki-client