Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5W1H_E66w8rreTv-sH39ih7Q9Kc.roa
File: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (raw, json)
Hash identifier: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=
Subject key identifier: E5:6D:47:FC:4E:BA:C3:CA:EB:79:3B:FE:B0:7D:FD:8A:1E:D0:F4:A7
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0195C8853DCCE75005BA0E21B0A563C2A953
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5W1H_E66w8rreTv-sH39ih7Q9Kc.roa
Signing time: Mon 24 Mar 2025 14:18:49 +0000
ROA not before: Mon 24 Mar 2025 14:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:85:3d:cc:e7:50:05:ba:0e:21:b0:a5:63:c2:a9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Mar 24 14:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56d47fc4ebac3caeb793bfeb07dfd8a1ed0f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:dc:bd:c9:07:94:a8:f0:c1:5c:70:2e:1c:
81:f3:fe:be:93:a6:0f:81:fc:89:00:37:73:2b:47:
41:f5:39:01:7e:64:0f:bc:26:13:f0:cc:e0:05:6d:
a5:46:79:e8:83:b7:3a:a0:42:1f:8e:4e:ef:c0:51:
97:9b:8f:e9:46:19:70:15:ef:b1:3c:e0:1b:83:af:
a0:8e:e8:c0:89:bf:e1:4b:4a:b2:97:c9:6e:3a:10:
55:78:5c:b8:3b:fc:b9:bc:75:89:19:46:79:0b:d7:
90:52:c2:bf:73:cb:80:70:d1:cb:26:69:e8:bb:2d:
e9:66:d8:79:c3:a0:fd:1f:eb:73:9a:7e:0e:32:a8:
47:af:25:fe:4b:9e:21:13:94:86:ad:64:2a:29:3d:
bb:4a:07:87:fe:d7:20:40:0e:af:52:ce:47:a7:9a:
52:89:d9:df:0d:fe:68:be:c7:73:79:8e:08:bb:25:
77:b2:0f:1a:ce:01:a7:07:14:0f:ec:8e:2c:17:84:
6b:98:ee:3e:86:46:d2:19:f3:23:b0:be:bb:95:20:
ed:fb:5c:4c:23:4c:db:c6:83:b5:f6:3a:65:5d:16:
a2:2c:eb:9a:f5:d1:58:cc:96:8c:a5:2b:d6:e1:2a:
7f:b0:ce:0e:e4:a7:c5:ec:a4:5c:e2:f4:82:22:1e:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:47:FC:4E:BA:C3:CA:EB:79:3B:FE:B0:7D:FD:8A:1E:D0:F4:A7
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5W1H_E66w8rreTv-sH39ih7Q9Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ea:30:46:f9:af:5f:b3:db:a7:b6:d4:0b:d4:c0:15:72:64:
be:28:6c:bf:e7:3a:10:51:89:f2:10:00:e1:d8:ae:b0:b3:db:
d2:01:97:ea:70:dd:9e:92:a3:84:de:bc:02:d5:85:81:53:de:
6a:b4:6a:65:00:72:1d:60:b8:6f:ec:29:f3:7d:17:4d:d8:fa:
89:62:b2:51:4f:39:cd:5b:12:97:98:db:da:15:60:8c:a8:2f:
ba:3c:e9:14:73:f8:14:cc:ce:d3:ed:cc:19:99:6c:b9:af:31:
64:5b:1e:a9:01:aa:0f:3c:4e:25:0b:92:d3:65:13:d2:a1:47:
e3:54:4a:39:ae:43:87:c1:72:15:58:3c:cb:65:0f:39:e8:0f:
21:23:3b:db:6c:d0:00:b2:7e:c9:6f:11:eb:20:02:0a:ad:6a:
f5:89:ce:b7:a8:22:49:2e:56:22:30:b5:48:03:ee:b3:33:c2:
b5:57:a0:df:b7:a7:86:ce:4b:a0:3c:66:95:0e:ed:ac:cd:c2:
28:92:87:4d:74:ed:22:b5:40:48:b7:8e:27:14:f7:5b:6f:a7:
9d:53:54:0c:89:20:3e:67:9a:d1:56:43:97:dd:55:e4:4e:09:
ab:c6:92:0d:d4:4a:64:b2:96:b2:93:a4:b7:04:78:82:e8:19:
8c:60:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:55:22 2025 by rpki-client