Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/E_Z6pTC5X0AHh4r89mkRGifhbg8.roa
File: E_Z6pTC5X0AHh4r89mkRGifhbg8.roa (raw, json)
Hash identifier: vPaU5vXqStk4BcS9NIKCO/NC9GyNhnZmtfECSf7T7YM=
Subject key identifier: 13:F6:7A:A5:30:B9:5F:40:07:87:8A:FC:F6:69:11:1A:27:E1:6E:0F
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 019423D6AB135D94F064178739EEAC739196
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/E_Z6pTC5X0AHh4r89mkRGifhbg8.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56704
IP address blocks: 185.159.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:13:5d:94:f0:64:17:87:39:ee:ac:73:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f67aa530b95f4007878afcf669111a27e16e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:43:6c:84:a1:91:c6:88:78:b6:5a:16:b3:
92:fc:db:48:18:fe:2a:12:dc:7d:7b:d3:ef:34:9a:
52:32:55:86:34:30:3a:c9:86:9f:7a:9f:a1:94:46:
72:d0:63:d0:38:9e:1f:b4:69:4b:b8:df:1d:64:e0:
da:db:f7:31:a1:39:25:bd:5a:52:15:d7:39:ab:01:
f7:29:11:b1:fb:2e:0e:b0:41:42:bb:e2:f8:f2:97:
31:07:ac:01:9b:23:e8:68:e6:51:3c:a8:f6:d2:11:
86:92:e6:14:5c:94:f5:2d:8c:6d:c8:68:a5:ce:79:
29:ef:18:84:65:12:58:91:a3:bd:d8:9d:30:9b:6b:
4d:6a:c2:52:e7:21:e6:8c:3c:9d:37:7e:72:f2:55:
6a:34:ca:49:b3:07:58:0f:44:fc:6a:92:b3:1f:87:
38:34:c2:6f:23:30:39:a2:14:05:bb:48:59:ec:da:
fb:ec:73:81:28:01:1e:4f:88:1d:d1:5c:79:fb:05:
21:b3:67:de:ee:f9:e2:eb:63:42:d4:7a:8f:64:32:
48:72:e6:4e:0a:b7:a3:2e:b1:c3:78:06:41:09:c7:
1b:b2:d3:99:50:55:72:4e:68:b8:a5:9f:c8:02:ff:
7a:f8:46:e5:99:be:1d:93:02:dc:35:4a:b0:f8:98:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:7A:A5:30:B9:5F:40:07:87:8A:FC:F6:69:11:1A:27:E1:6E:0F
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/E_Z6pTC5X0AHh4r89mkRGifhbg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:eb:60:23:7b:ac:a7:e6:60:58:df:cc:20:b1:b0:cd:22:3d:
f8:33:08:67:57:3d:44:6c:2b:5f:af:30:5c:01:94:56:1f:03:
ec:6e:bc:67:72:d6:45:08:52:66:c1:5b:43:19:76:54:0d:68:
1f:60:39:51:7a:13:d1:84:a0:be:7c:9a:52:08:a1:33:1a:52:
44:a5:12:b8:7c:9f:f2:18:a2:5b:a4:43:5f:ad:e8:81:0c:90:
fc:44:4e:23:55:f0:60:ca:20:7b:d0:a0:20:24:04:ac:a6:c7:
f2:fa:e4:91:65:2b:69:62:b4:f4:3b:24:b0:ed:4a:4d:c3:54:
5b:63:f3:16:5f:4e:f4:0d:c1:0d:df:00:a7:c8:33:97:d2:48:
d1:64:2b:9f:26:1c:51:db:3c:93:87:ce:e2:90:21:60:6e:e6:
03:1a:d7:9f:06:20:97:ce:23:db:31:b7:d5:62:61:55:d0:90:
7e:8b:92:18:b2:0f:64:e6:0f:6c:da:34:93:e0:d0:75:8b:e9:
1e:e3:25:f6:2a:36:ec:05:14:34:b5:df:56:b5:5b:d4:16:88:
68:29:d2:4b:bf:1e:c1:62:ad:e3:87:7e:46:1c:4d:0d:6c:24:
35:40:77:55:7f:56:9f:e8:f7:c9:1f:1d:78:f1:a0:97:c9:a2:
6d:5f:df:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:51 2025 by rpki-client