Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa
File: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (raw, json)
Hash identifier: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=
Subject key identifier: E4:72:4D:D9:36:2A:F3:3F:1E:26:32:F9:F3:F7:34:BB:92:10:E5:0F
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01942444A649667ABA45B19D8855EE1A4C00
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39419
IP address blocks: 185.237.24.0/22 maxlen: 24
2a0c:180::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a6:49:66:7a:ba:45:b1:9d:88:55:ee:1a:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4724dd9362af33f1e2632f9f3f734bb9210e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:a2:66:84:4a:d8:ac:ed:3f:1d:d9:70:cd:
f6:00:c5:21:4e:54:8a:48:42:73:22:bf:2b:ee:ae:
9d:c1:ba:91:94:d2:60:e8:dc:bd:01:ed:04:84:b6:
16:86:f1:de:e2:e4:17:c6:19:fe:a3:b6:8f:c1:28:
cd:ef:57:ca:e6:25:50:2a:5e:17:d4:af:45:9e:5d:
5b:ba:6d:f9:ce:8d:77:4b:6e:d9:05:7a:2a:8e:f2:
9f:17:af:a5:28:4e:90:54:7f:2c:44:1b:88:ba:07:
1b:ed:13:f1:17:94:47:3d:72:bc:de:95:01:f2:e7:
04:4e:bc:1b:fa:59:c6:59:40:c4:fd:95:7e:95:09:
e4:4b:c5:60:54:e6:b5:09:3b:8f:80:10:53:de:b5:
4e:b9:44:9b:c9:ff:28:a5:86:30:28:ae:80:79:dc:
2e:18:64:71:09:e7:14:34:a8:d8:bd:cd:27:52:e0:
60:84:86:b7:9f:93:db:16:6c:6b:fb:18:2a:3b:27:
41:aa:84:2b:de:f8:39:cf:12:22:8c:a0:ae:51:13:
f5:3e:12:bd:3a:0b:cc:84:ec:0c:b7:4a:5d:00:00:
77:10:45:44:18:84:9a:59:d2:07:02:81:9b:32:91:
6d:42:e1:db:08:c9:db:35:2b:22:d6:eb:cd:72:b9:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:4D:D9:36:2A:F3:3F:1E:26:32:F9:F3:F7:34:BB:92:10:E5:0F
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.24.0/22
IPv6:
2a0c:180::/29
Signature Algorithm: sha256WithRSAEncryption
61:37:90:1b:ee:c6:9a:a1:d8:4d:80:58:91:e4:93:5d:fc:e6:
79:e4:b4:bf:d4:e8:c7:ef:ac:1e:8a:f7:d9:ca:89:bf:3d:e6:
4f:ae:9e:7b:d5:3c:e5:94:05:76:6f:79:ec:2a:fd:9b:6d:0d:
46:83:5b:49:b5:14:a1:eb:97:bc:22:ec:7d:a6:09:91:3a:91:
ad:3a:97:b3:e8:47:c4:f5:12:7c:d7:f1:13:0c:8f:ea:5c:03:
e4:ca:31:63:cb:e1:dc:e1:68:19:f5:f1:b8:16:42:78:48:b2:
4d:b8:d9:4d:68:a7:5e:8f:24:67:93:4c:22:b0:16:f0:dc:f7:
be:59:ca:99:e6:5d:6a:98:05:e3:10:42:4d:05:a2:c5:99:59:
41:1f:d1:d8:84:a4:b5:f4:61:01:96:b9:58:d3:f3:a9:00:83:
3b:55:75:e7:25:54:c1:71:a5:df:c4:a5:94:6f:a1:af:69:c6:
58:b4:98:37:16:76:b0:16:fb:d6:c3:00:3e:ad:44:4c:63:15:
be:f4:31:12:4c:5e:ae:7e:c0:fc:16:0f:a8:5f:71:ad:39:2f:
76:43:fd:3c:07:ac:a8:e6:7d:7c:7d:97:fe:2c:bb:b5:e3:91:
a1:00:02:0a:3e:76:f8:52:32:33:20:7d:50:d0:76:3d:f9:53:
f8:67:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:14 2025 by rpki-client