Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/sUzkXd5LwWwY0BXr324HOrp9knE.roa
File: sUzkXd5LwWwY0BXr324HOrp9knE.roa (raw, json)
Hash identifier: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=
Subject key identifier: B1:4C:E4:5D:DE:4B:C1:6C:18:D0:15:EB:DF:6E:07:3A:BA:7D:92:71
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01942068010D690FCC526C9BD3F28C81ABA1
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/sUzkXd5LwWwY0BXr324HOrp9knE.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25605
IP address blocks: 155.190.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:01:0d:69:0f:cc:52:6c:9b:d3:f2:8c:81:ab:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b14ce45dde4bc16c18d015ebdf6e073aba7d9271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:34:4c:f8:77:c0:81:16:09:90:33:14:5a:
12:4a:bc:c8:51:6a:03:7d:9d:c9:41:62:ee:c4:31:
bd:69:97:40:16:e2:e1:b9:50:29:f1:52:2c:06:c3:
99:52:93:bb:d0:5e:f6:be:9f:b8:d7:ba:60:ac:67:
ef:9e:46:41:8b:3c:97:0e:62:be:eb:60:8a:2b:0c:
f9:8c:b4:a9:c3:6d:02:00:9d:e0:10:09:b0:4c:42:
21:4b:3f:bf:b5:6b:23:54:f7:ba:b2:6a:18:5d:80:
68:c1:48:b8:e7:ce:6d:73:72:b9:b2:c1:61:08:a5:
d4:5a:bd:68:8f:2a:8a:f5:94:53:62:70:31:f6:96:
44:d7:d8:4f:3d:01:c1:16:4d:6a:0b:e9:21:3c:0a:
44:e6:60:ff:3f:c9:21:28:f5:1b:52:2b:df:b8:47:
60:a9:e3:10:bd:a6:8d:3e:9b:91:2f:de:ae:45:ba:
ab:49:d0:18:21:b8:9e:c5:aa:b4:10:40:7b:cd:89:
a8:71:3d:73:3d:1a:fd:74:d1:5c:78:02:66:93:8b:
75:39:aa:60:36:ac:14:34:f5:8d:dc:94:e6:f9:1d:
50:83:16:15:05:5e:37:dd:83:09:cd:ce:fc:ad:2f:
b8:07:aa:5e:c4:df:04:36:1b:61:a5:d4:e1:92:d0:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:E4:5D:DE:4B:C1:6C:18:D0:15:EB:DF:6E:07:3A:BA:7D:92:71
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/sUzkXd5LwWwY0BXr324HOrp9knE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.190.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:30:58:8a:67:64:1c:79:af:1b:82:21:18:65:be:0b:c9:a3:
02:b2:c2:69:f0:4f:54:ca:6f:ee:a7:e5:6d:08:31:9e:fd:5b:
0a:0c:5f:2b:3a:5b:b0:ab:98:ab:2a:bb:05:fa:e8:f7:bd:5e:
2e:7d:0e:13:14:bf:27:cd:09:29:f8:2f:e0:c7:df:1e:4d:5b:
22:79:2a:f0:24:37:2c:3b:79:a6:6f:75:19:ee:f5:6e:14:cb:
ab:65:f8:b4:e3:3e:a2:5a:d8:1e:cb:75:43:88:48:77:52:85:
7b:ba:3f:20:5d:eb:7f:29:ab:6e:a4:81:9a:74:ad:af:bc:18:
1b:e1:ca:13:ec:2b:95:12:ce:26:a0:11:16:39:48:7b:83:ea:
c7:e9:55:4c:d1:ca:34:1d:4a:66:ae:e0:f8:3d:18:f9:f8:1e:
be:c3:45:3c:22:24:19:1e:69:67:10:2f:13:31:b0:6a:79:eb:
a1:c9:47:f0:a8:43:07:5f:75:9e:39:e2:a7:09:51:9f:b4:da:
02:1d:75:13:e0:b9:4c:51:d6:3d:9b:93:44:a3:1b:91:9f:b2:
c8:56:7c:4a:40:2a:af:fd:bb:33:da:6d:cd:a8:ca:b5:f1:33:
bc:5e:d5:02:d9:a2:18:07:c3:4f:cb:94:85:2a:a8:05:0a:cb:
9b:6f:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:53 2025 by rpki-client