Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5JpRmD4fhu6nm7xycFLE__glHYQ.roa
File: 5JpRmD4fhu6nm7xycFLE__glHYQ.roa (raw, json)
Hash identifier: nuVgVRm/OarP3uOtoUuYsCuZwdYc6cASha0zqtgHu30=
Subject key identifier: E4:9A:51:98:3E:1F:86:EE:A7:9B:BC:72:70:52:C4:FF:F8:25:1D:84
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3C854C680346A216AD395967838A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5JpRmD4fhu6nm7xycFLE__glHYQ.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205095
IP address blocks: 85.120.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:85:4c:68:03:46:a2:16:ad:39:59:67:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49a51983e1f86eea79bbc727052c4fff8251d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:bc:79:3a:aa:d9:24:c0:75:73:d7:67:0a:
cc:9d:d7:c3:80:51:d5:14:00:8a:cc:2e:1f:5b:f3:
4d:ae:5c:8e:a6:d9:73:0e:dd:af:61:a9:aa:da:ea:
f6:4c:10:e7:f2:8e:1a:83:e7:b1:45:69:18:7b:82:
6a:b2:c9:04:05:1f:36:22:05:ab:ca:a5:5a:ab:f9:
97:cd:3f:fe:99:70:14:c8:c2:73:6f:6a:fb:67:08:
2b:dd:0e:2e:c5:ae:82:e2:07:7c:eb:47:38:c7:74:
0d:b6:bd:d8:cb:21:d3:4f:de:34:1b:60:4f:9e:a2:
d3:2c:cf:2e:16:51:f1:3a:ce:34:e5:1b:90:fd:1b:
f1:57:39:e2:e1:d6:9b:d6:03:48:f5:ec:55:0c:bc:
b9:40:3a:ed:0b:44:01:e7:ae:e2:39:65:83:41:b9:
8d:e7:0a:70:d2:9c:85:22:ce:1b:f2:63:58:d6:6f:
66:e6:c9:3e:4f:77:05:81:0f:53:a9:90:e3:d8:b9:
2c:6d:46:b1:84:93:84:d8:3d:1b:3f:dc:0c:90:fa:
cb:2c:09:42:f4:52:5c:bb:af:74:25:7e:de:05:85:
be:29:aa:fc:d5:3c:b9:d8:a1:4c:a1:e9:5f:dd:f8:
8b:2f:c2:6e:fd:50:eb:22:3f:f2:d7:d4:2c:8c:bf:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:51:98:3E:1F:86:EE:A7:9B:BC:72:70:52:C4:FF:F8:25:1D:84
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5JpRmD4fhu6nm7xycFLE__glHYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:e1:d0:ca:c2:d6:af:7a:57:ee:06:7d:00:3b:40:b9:09:
aa:d4:d8:ff:53:f7:d1:8f:0e:67:8f:bc:f3:ae:e4:b6:83:ba:
44:07:81:9c:4d:2e:36:40:72:5e:63:82:52:85:9a:c4:3b:ec:
c9:38:65:0c:ee:92:35:df:ce:37:82:c3:65:12:b0:85:b4:86:
82:1a:30:19:cb:4a:08:85:f8:cc:a5:41:dc:f3:df:00:05:5b:
7b:f7:30:b5:29:09:aa:3d:ba:77:38:51:94:e4:40:ea:15:c6:
eb:1a:46:de:44:d0:c3:0d:2a:c2:a3:cf:17:34:aa:37:37:a5:
bb:c6:23:10:d4:5f:ff:d5:9f:bb:20:ab:9a:7c:05:1d:04:5b:
1a:df:5c:a7:78:cf:48:cb:a4:0d:1f:c5:0d:61:de:c7:c9:ab:
93:b6:8e:ee:27:f7:0a:22:18:d4:92:7b:fe:e9:c0:e1:4c:b4:
21:91:a4:2f:b9:5f:16:5d:03:37:95:2a:ef:7f:a0:96:f7:5e:
d3:e0:ab:8c:f2:bf:62:5c:45:db:7b:0c:07:0a:0d:8a:fb:a1:
c0:93:cc:60:49:bd:bc:07:72:26:4c:53:d9:ed:5e:e5:96:8d:
48:fa:a0:ad:4a:4c:1a:24:36:d5:9f:0d:79:48:ff:36:2a:9a:
53:80:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:20 2025 by rpki-client