Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5jSUnFhs2XEyycUC5F1Dog5tF5I.roa
File: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (raw, json)
Hash identifier: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=
Subject key identifier: E6:34:94:9C:58:6C:D9:71:32:C9:C5:02:E4:5D:43:A2:0E:6D:17:92
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195EB96E57FCA76C5768B83446BF7AAD6AF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5jSUnFhs2XEyycUC5F1Dog5tF5I.roa
Signing time: Mon 31 Mar 2025 09:44:49 +0000
ROA not before: Mon 31 Mar 2025 09:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25693
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:96:e5:7f:ca:76:c5:76:8b:83:44:6b:f7:aa:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 31 09:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e634949c586cd97132c9c502e45d43a20e6d1792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:5a:cc:92:10:39:12:9c:aa:18:0e:82:db:
d2:8e:76:12:b0:b4:52:a4:33:2c:e9:7e:a1:bf:aa:
cc:e3:c9:02:1d:6c:06:45:ea:56:2e:38:d3:a3:a3:
97:4d:5f:66:d8:0a:80:aa:ac:2c:0c:69:3b:36:ab:
d8:15:b9:10:88:3e:9b:8e:20:81:38:fe:a8:74:33:
40:54:71:6a:63:dd:f5:49:32:b4:a4:0f:54:0d:03:
e1:f3:2c:0c:dc:6f:a0:31:63:02:32:6a:0d:62:90:
04:cf:e5:a2:74:47:6e:7e:89:cf:b8:51:35:f9:ef:
ec:fc:cd:4b:ed:5d:f5:9c:4c:9f:c4:4c:a6:a6:07:
b1:1b:74:96:80:53:5e:d8:03:4d:b7:be:d2:20:2f:
d2:0e:dd:e1:01:2c:d8:e9:cc:c7:37:4e:eb:22:82:
00:51:b0:ad:ce:77:d0:b5:10:e8:5b:4e:f7:0a:f9:
8d:22:d0:bb:22:cc:db:a4:59:2d:8a:59:8b:6c:33:
fe:28:b8:78:a9:b6:44:29:aa:23:13:12:3a:cc:d8:
0d:b4:e1:41:b1:40:30:ac:a0:f7:e8:87:e4:61:fc:
45:c6:ff:37:ed:f8:83:8c:42:6e:71:0d:2f:96:b5:
a7:f0:1d:a0:31:b1:7e:c0:77:67:e0:1e:28:7d:ac:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:94:9C:58:6C:D9:71:32:C9:C5:02:E4:5D:43:A2:0E:6D:17:92
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5jSUnFhs2XEyycUC5F1Dog5tF5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c9:0b:70:43:3c:77:e0:ba:9c:10:31:99:c6:a3:20:cb:bd:
ab:fa:b6:c8:04:7c:c0:26:83:a1:e1:0c:91:36:74:25:b0:24:
fe:fa:93:ab:a1:17:8f:6c:e5:66:68:18:4b:b2:a8:1c:48:fe:
c5:95:84:9a:55:4c:77:27:2a:af:dd:92:92:00:4f:4f:3a:d2:
2e:06:2e:a2:d3:f5:d1:b1:b2:fd:71:c4:6b:9a:0f:f1:57:53:
05:7f:70:10:a8:da:5d:b2:3d:37:a2:84:08:9f:bd:8f:54:32:
01:85:97:0b:ab:7c:01:03:32:1a:e7:8e:43:4d:a7:ed:54:ac:
2a:79:01:fa:47:a6:71:52:dd:7c:2e:6b:df:10:6b:60:51:51:
14:07:b8:72:03:08:10:b2:f5:77:ce:7e:91:e7:2e:0d:0d:cf:
60:d2:ea:65:3b:13:28:50:ee:8a:a0:88:cc:b8:84:b8:17:b2:
55:55:e3:ad:35:2b:16:d5:00:b9:ff:fa:ae:55:eb:7e:78:26:
e3:c9:6d:ad:df:7b:60:8e:b7:f6:b3:a1:22:8f:07:1d:38:2f:
3e:89:e6:0a:92:85:1a:0c:74:94:e5:58:ca:f5:aa:09:7c:cd:
e2:c6:29:2f:37:64:04:3f:ae:c7:f8:36:9e:d1:57:2a:93:4a:
a1:12:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:59 2025 by rpki-client