Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LH9SnZ7Wyi5mG8Gwt1rXNYtB76U.roa
File: LH9SnZ7Wyi5mG8Gwt1rXNYtB76U.roa (raw, json)
Hash identifier: NjvXZBAvszL2VgEMtceIcfk85Eppg7GNVe7kExT0Euc=
Subject key identifier: 2C:7F:52:9D:9E:D6:CA:2E:66:1B:C1:B0:B7:5A:D7:35:8B:41:EF:A5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59DADCDD2A7C736A71B7CC30DC97A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LH9SnZ7Wyi5mG8Gwt1rXNYtB76U.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39421
IP address blocks: 5.101.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9d:ad:cd:d2:a7:c7:36:a7:1b:7c:c3:0d:c9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c7f529d9ed6ca2e661bc1b0b75ad7358b41efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:4a:48:8a:ab:a9:f7:9a:c1:c3:8a:dc:08:
d0:fc:e8:13:5d:2e:71:2b:be:f3:ef:d2:b0:a7:03:
8a:64:cd:94:04:3f:ce:b2:f9:d7:ea:8b:41:8d:4f:
cb:61:7d:d9:44:42:a7:d7:15:5b:a3:15:00:29:70:
19:7e:00:59:8e:38:cf:e0:5f:8b:c3:69:ce:bb:48:
b2:25:5b:5a:03:e0:57:1f:d5:32:50:98:7d:5e:10:
93:fb:00:b3:a8:ad:3a:75:6a:0a:2a:99:3b:52:63:
ee:66:61:52:13:fd:ce:bc:cf:c6:34:d5:56:07:ed:
26:92:c3:40:53:32:c0:e9:6b:89:af:1a:07:07:df:
f1:fb:a4:93:9d:4f:67:f8:49:8e:e0:b8:dd:3a:e8:
28:d1:c7:bf:69:41:c8:e8:63:66:07:85:40:28:ea:
c7:3b:21:1a:ff:d8:8d:18:e9:61:ce:ab:5d:ef:65:
32:90:02:e7:0c:27:ce:dc:f1:7b:e7:58:48:70:3a:
c6:0b:b7:40:d2:1e:87:fe:1a:6d:cd:3f:a9:33:af:
0e:6b:05:93:a0:6a:44:80:26:e3:de:3b:f3:2f:3c:
c1:c5:6f:2d:0d:0b:67:c9:90:6c:f8:0a:d4:50:3c:
10:3f:ab:e5:16:db:29:cd:50:d2:e3:97:b4:f4:d9:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:52:9D:9E:D6:CA:2E:66:1B:C1:B0:B7:5A:D7:35:8B:41:EF:A5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LH9SnZ7Wyi5mG8Gwt1rXNYtB76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.34.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:ff:77:e4:2f:6e:07:30:73:a2:21:6c:35:22:c0:16:d7:
e6:6c:9c:dd:de:94:b8:d4:cc:f2:1e:21:0d:45:9b:4c:82:6e:
59:ae:44:2d:0d:7d:79:aa:63:3c:3f:bd:a4:b1:ab:7c:f6:73:
e9:20:06:7f:cc:e6:86:ea:8b:bd:29:de:49:d3:43:cd:67:6a:
05:2c:c6:2e:49:1c:0c:ad:c9:97:91:e3:4b:ca:6a:99:1b:08:
ef:d7:3c:ab:f2:cd:e3:69:c7:d7:2f:5f:7e:5a:1d:93:9f:de:
a3:cd:03:9d:16:f9:f3:ba:b9:c0:a6:64:1e:ef:6b:0c:8e:e2:
02:17:9c:73:17:36:00:c0:a9:21:8a:b0:1d:23:b2:c2:54:c0:
cf:39:1d:0d:8a:74:f3:70:2c:e7:61:ff:08:a8:49:96:24:47:
0b:5a:8e:20:d4:26:6f:d1:29:4b:8f:97:b4:e1:e1:3b:79:92:
41:a5:57:93:21:be:0c:5f:06:39:6b:1e:82:10:77:d0:89:e9:
16:7e:61:cf:ab:db:45:bd:d5:90:df:81:48:27:9d:5c:73:d4:
5b:59:d1:eb:60:ba:a3:e8:35:c1:2b:e0:39:cc:63:4e:59:fe:
bb:bf:f3:08:f0:11:ea:21:eb:7d:4d:91:6b:c1:fb:7a:2e:b5:
d6:af:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:26 2025 by rpki-client