Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5npwb5Xo_nvaLik-cvPzQ7lRHFY.roa
File: 5npwb5Xo_nvaLik-cvPzQ7lRHFY.roa (raw, json)
Hash identifier: 65MXlq/EUwhxhLiZu/OKHzfiMo3RbF2Mhj4tMPMamos=
Subject key identifier: E6:7A:70:6F:95:E8:FE:7B:DA:2E:29:3E:72:F3:F3:43:B9:51:1C:56
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274886B089CE5500442D1F986B076FDE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5npwb5Xo_nvaLik-cvPzQ7lRHFY.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46475
IP address blocks: 194.62.249.0/24 maxlen: 24
194.62.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:86:b0:89:ce:55:00:44:2d:1f:98:6b:07:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67a706f95e8fe7bda2e293e72f3f343b9511c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:d3:33:4b:e3:59:a9:d2:fa:29:76:79:c8:
6f:48:d5:2b:32:cc:47:79:24:a2:36:7c:2b:b0:03:
2a:69:71:58:08:8a:55:2c:59:0b:d1:eb:b0:23:f4:
b6:b5:34:ab:d6:40:84:ee:82:cd:e8:e4:7a:c8:51:
62:58:1e:f3:f0:47:d6:f2:7d:3e:af:c8:2b:a9:58:
d1:d4:9a:b0:fd:54:1a:fc:9d:b5:38:70:1c:d7:ad:
aa:e9:46:36:24:5b:e1:e5:be:27:c5:09:2b:f8:a3:
67:e3:3c:de:50:1d:d0:a4:9b:73:7e:65:ad:f0:cb:
b1:45:a0:b4:3b:65:0f:49:62:1c:ab:ff:8b:dd:14:
66:85:ba:2c:1f:af:55:14:57:6c:66:87:cc:e0:0e:
2c:3f:e2:db:db:ad:7e:2d:41:50:f7:1e:9f:a9:b0:
39:65:d0:bc:6c:46:70:80:eb:3a:32:c9:7a:89:ce:
a7:60:c2:b4:7d:1f:b7:8a:12:43:32:f5:d8:9c:b6:
ce:a5:61:8b:46:3c:d6:2f:a0:7b:d5:91:3b:dd:36:
39:88:b7:43:ff:b6:69:dd:3f:ed:08:12:28:3d:36:
fb:3a:e4:81:1d:6c:c0:23:b8:4a:9b:7c:9e:48:bb:
bd:17:0c:62:67:68:2f:c6:68:59:30:78:90:05:f1:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:70:6F:95:E8:FE:7B:DA:2E:29:3E:72:F3:F3:43:B9:51:1C:56
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5npwb5Xo_nvaLik-cvPzQ7lRHFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.249.0-194.62.251.255
Signature Algorithm: sha256WithRSAEncryption
13:c4:2a:97:47:41:b5:bb:a5:a8:26:45:be:48:2b:7f:cb:e1:
86:64:5f:c2:08:48:02:91:8b:13:69:34:4a:7d:ad:6b:70:01:
97:2c:d1:5d:a4:4a:13:ed:db:04:5c:24:58:18:30:31:3c:1b:
3a:9c:04:a1:8f:13:6e:f0:6c:db:6e:f7:3e:53:ec:a9:ee:3e:
18:fd:8a:e0:e8:6a:d0:06:91:d6:fd:07:ba:f3:ae:7b:9b:d0:
00:f4:fe:7f:1a:8e:53:ea:bd:96:bf:ec:38:4d:9a:5d:d4:51:
8f:e4:20:c0:bb:28:0b:bf:24:37:c9:79:39:fc:a8:ab:9c:dd:
b0:a0:99:17:ae:66:55:ff:fe:70:16:40:92:5c:76:a9:0c:ac:
83:dd:c2:e0:7f:86:89:70:ec:d5:b1:e6:ca:12:a5:44:3c:79:
5e:86:47:48:3a:e7:17:1b:40:2c:ab:c9:72:eb:46:c7:04:7c:
aa:e1:6d:55:47:7e:0f:ea:e6:6d:ef:79:b3:11:f6:af:cc:26:
8f:93:19:c8:92:ac:4f:ad:e0:92:dd:4a:4f:4a:60:55:c0:29:
c2:75:98:67:08:37:23:86:8f:a4:63:25:85:6b:b4:f0:d0:9d:
02:ed:5c:fc:84:b9:b4:71:40:91:47:c3:8d:3d:63:4e:b6:c7:
66:c7:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:15 2025 by rpki-client