Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/5yZgLWjoqGWoHcvTB_31BRphqMg.roa
File: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (raw, json)
Hash identifier: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=
Subject key identifier: E7:26:60:2D:68:E8:A8:65:A8:1D:CB:D3:07:FD:F5:05:1A:61:A8:C8
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019427B5827F58D68672518814059C19AF27
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/5yZgLWjoqGWoHcvTB_31BRphqMg.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13214
IP address blocks: 31.22.88.0/21 maxlen: 21
185.109.84.0/23 maxlen: 23
185.109.86.0/24 maxlen: 24
2a03:1300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:82:7f:58:d6:86:72:51:88:14:05:9c:19:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e726602d68e8a865a81dcbd307fdf5051a61a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:31:ff:b1:af:47:38:2e:a4:62:0a:8a:1b:
01:0e:bb:5d:08:5f:52:8a:30:67:71:4f:5a:c3:ea:
b7:a6:6c:d6:b8:0d:8a:f6:6a:64:8d:72:cb:28:ce:
82:bf:64:c5:20:80:3f:11:ac:cf:6b:b3:d0:ff:c1:
3e:6d:08:23:2f:0d:9f:44:f8:31:31:50:c6:d0:9d:
dc:2f:58:35:75:fe:49:1b:3d:98:44:20:bd:18:7a:
fc:0c:fd:84:aa:2d:7f:bf:03:fc:31:d8:bc:73:18:
10:df:ff:13:a1:17:fb:35:c7:7e:7e:09:df:af:03:
1e:87:7a:cf:89:de:0d:5d:06:25:05:50:e7:f8:40:
de:1d:de:7f:6e:3e:3e:b5:d3:0c:63:24:f4:c0:c9:
14:92:81:3b:83:52:ff:f4:dd:e6:ce:8f:59:41:d5:
98:20:eb:13:43:ea:5b:0d:14:19:0d:7c:1d:a0:65:
2b:b5:c3:2d:6d:f8:c4:7d:3d:a9:ea:c1:ee:8a:3a:
23:84:f4:fa:ae:00:53:da:d2:15:5a:0a:27:2e:0c:
0e:1a:7e:91:c8:f8:37:ef:9f:87:66:22:01:5c:83:
17:4f:f3:1d:ae:46:c4:ca:5a:7f:ae:b7:e3:bd:de:
13:50:a9:7b:65:9b:56:fe:aa:72:96:07:63:29:6a:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:60:2D:68:E8:A8:65:A8:1D:CB:D3:07:FD:F5:05:1A:61:A8:C8
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/5yZgLWjoqGWoHcvTB_31BRphqMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.88.0/21
185.109.84.0-185.109.86.255
IPv6:
2a03:1300::/32
Signature Algorithm: sha256WithRSAEncryption
78:db:fa:cf:21:a8:ca:ea:10:68:0a:42:90:73:93:e8:60:13:
35:82:64:4d:09:37:ce:bc:e2:b4:0f:df:0c:7a:64:fa:2d:0d:
21:da:ed:35:f4:2c:9c:6e:7b:1d:be:87:07:a4:90:cb:5e:04:
cf:d8:76:4f:10:3b:25:d0:26:df:cd:d4:83:ad:d0:38:4d:0e:
bd:b8:01:a9:e7:62:a8:9e:36:08:80:ed:0f:b1:e7:d4:67:82:
60:e9:43:20:7a:34:1e:08:23:9b:89:f5:1e:cd:f9:1c:5e:cb:
65:01:01:a3:d4:40:02:91:a0:ef:f1:1a:7e:aa:67:82:3b:cd:
69:73:f7:3c:f0:79:c3:f4:eb:f3:2b:1a:82:47:a2:34:44:1c:
07:59:8f:3a:bd:71:cf:4c:93:6c:88:b9:27:a4:2e:04:0b:e3:
3e:1c:95:bf:b3:ef:70:5e:93:56:f6:40:14:6e:44:0a:8f:b1:
e3:d1:18:df:02:26:66:5b:91:43:79:c4:7c:22:9e:7a:0f:c5:
1f:6b:e8:0f:a7:ac:b0:53:fb:0c:5e:67:14:26:d8:3a:1d:76:
ab:52:ee:cb:34:f7:e6:77:be:91:4b:0b:99:33:33:1b:ee:fd:
0c:43:e3:e9:d6:ef:6d:4c:e9:3c:d5:d9:64:d4:5a:84:b0:a3:
a0:2d:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:25 2025 by rpki-client