Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/aMxsTucl9VgkelJcFxmjN0EGtJk.roa
File: aMxsTucl9VgkelJcFxmjN0EGtJk.roa (raw, json)
Hash identifier: n33/iGcQp4P5VDOzq7NYuQn+t7c02zgYYh2ozCCcIYs=
Subject key identifier: 68:CC:6C:4E:E7:25:F5:58:24:7A:52:5C:17:19:A3:37:41:06:B4:99
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0195A608CF6E487453634097ED45133986EB
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/aMxsTucl9VgkelJcFxmjN0EGtJk.roa
Signing time: Mon 17 Mar 2025 21:35:50 +0000
ROA not before: Mon 17 Mar 2025 21:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.178.108.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.218.0/23 maxlen: 24
45.12.219.0/24 maxlen: 24
185.5.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:08:cf:6e:48:74:53:63:40:97:ed:45:13:39:86:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 17 21:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68cc6c4ee725f558247a525c1719a3374106b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:1e:65:d2:24:bc:91:57:58:41:02:35:4c:
13:bd:a4:9f:6e:99:f0:f8:d9:86:e4:60:c0:2a:bf:
ed:26:a8:00:5f:4b:2e:94:2f:8d:40:05:a0:23:1c:
2b:79:e6:3b:b7:ed:4b:a5:8e:f7:cc:5c:42:6e:c9:
d0:21:d8:63:33:1b:9e:af:3d:6b:86:ea:18:62:38:
30:a7:70:69:6a:40:c1:5c:b0:73:cc:9e:7c:5b:82:
b0:a5:ab:4c:de:e4:d2:70:2b:17:9e:d5:6e:68:36:
29:50:d4:c0:25:9b:9a:ad:3e:93:8f:cf:df:76:c0:
27:1c:8f:54:9a:90:9f:2a:38:ab:14:d7:f8:50:68:
3b:3d:be:65:1d:13:0e:8a:f0:1b:51:25:c5:82:3c:
92:8f:0b:35:d3:05:18:f6:44:2f:73:5c:69:23:66:
a7:13:62:1e:e4:85:18:9a:31:86:ba:16:a8:a7:8a:
9f:e2:04:d4:74:ee:32:2a:70:83:aa:7c:57:96:d9:
43:9c:29:15:62:bc:11:54:81:83:1e:cf:e6:e3:33:
fc:3a:cd:55:7f:07:0c:fe:50:f5:b4:5e:08:42:36:
c1:b7:a0:f5:a0:00:9f:21:7f:d5:d7:6d:1c:57:54:
7a:36:32:ba:bb:c2:82:b4:a9:5c:d1:94:b5:bc:29:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:6C:4E:E7:25:F5:58:24:7A:52:5C:17:19:A3:37:41:06:B4:99
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/aMxsTucl9VgkelJcFxmjN0EGtJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
45.12.217.0-45.12.219.255
185.5.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ac:0c:cf:8d:9b:45:aa:55:9a:8f:59:58:bd:75:6e:5b:9d:
f7:0c:0c:1a:b3:00:dd:1a:7e:c1:47:22:bc:2e:be:aa:be:ec:
36:df:f2:fd:b2:c8:62:bb:50:97:1b:41:ae:54:6c:97:ec:04:
48:07:46:75:d5:3e:db:dc:7d:03:9a:d7:48:d2:a2:7b:15:5a:
e2:3f:df:86:c2:4d:b9:17:34:c9:1e:75:e3:4d:c1:02:db:02:
1a:81:93:bf:5d:25:03:78:fc:19:d3:48:ff:ce:e4:62:9d:67:
43:a2:ee:8a:3c:fa:01:05:0e:e5:05:af:7e:9d:0d:ad:3f:26:
54:75:69:3d:26:1c:58:98:22:12:f9:00:b1:ba:f1:96:8d:72:
44:de:dc:81:79:16:21:ed:23:e6:97:cc:8d:30:e9:60:56:e7:
4d:a6:8a:cb:0e:61:88:d7:86:da:80:87:49:a8:a9:63:63:04:
23:01:d8:c5:06:2f:07:07:fd:50:a0:a5:ea:34:33:b4:dc:b8:
39:c8:a7:66:7c:a7:a9:2b:26:64:d5:2b:5b:06:e4:91:45:3d:
b8:bb:f1:af:9b:79:82:db:73:e5:7c:8c:df:0b:1d:91:af:64:
eb:fa:41:a8:03:eb:bd:fb:ad:76:ce:f2:ca:cf:81:f3:3d:7c:
05:73:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:34:47 2025 by rpki-client