Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5EsITnTwlOmCKsN4JTgw-8kckzI.roa
File: 5EsITnTwlOmCKsN4JTgw-8kckzI.roa (raw, json)
Hash identifier: cKwWK9wyi2DrWrNN5OzAwbOVj/l6VqZNC3BdBlrzllI=
Subject key identifier: E4:4B:08:4E:74:F0:94:E9:82:2A:C3:78:25:38:30:FB:C9:1C:93:32
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0195F1615ECE5025B5206CF1C04F17C003D5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5EsITnTwlOmCKsN4JTgw-8kckzI.roa
Signing time: Tue 01 Apr 2025 12:44:05 +0000
ROA not before: Tue 01 Apr 2025 12:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
213.139.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 12:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:61:5e:ce:50:25:b5:20:6c:f1:c0:4f:17:c0:03:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 1 12:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e44b084e74f094e9822ac378253830fbc91c9332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:eb:27:c0:af:85:67:08:29:70:5d:c4:c8:
b6:f0:c0:97:14:09:c6:86:6e:93:77:e5:98:bb:ad:
e1:24:53:ec:f5:c0:b8:42:80:5c:71:ed:2a:72:e8:
63:db:a2:4f:84:41:bf:7a:da:9d:6d:33:43:07:a4:
06:f1:b0:ca:9c:0f:e4:dc:57:90:ef:eb:84:bf:99:
86:4b:7d:8f:f2:2a:97:87:c7:05:80:ff:e5:4d:5f:
8c:b0:2e:a6:e6:61:0f:3a:ea:5f:3b:00:33:88:b1:
20:54:03:ae:b1:4d:0e:ad:65:2b:22:ce:41:d4:15:
2f:73:3d:06:93:37:09:90:01:27:34:f3:ff:ae:17:
6a:96:20:df:df:b4:f0:fb:f6:c6:8a:b8:15:ef:08:
6b:73:13:49:c8:73:cd:66:0d:27:87:9e:a8:57:85:
83:df:c2:bb:f2:2c:f3:77:99:8f:a6:68:d9:92:03:
48:65:25:a8:e7:c4:c0:1d:52:13:d7:f4:86:ae:3c:
1e:69:3c:85:1d:42:66:51:3d:38:21:64:cc:90:8b:
8f:d0:9a:61:99:1c:f4:c5:bb:3f:5e:18:8d:17:24:
b8:eb:96:22:6e:66:84:14:5e:85:be:9a:d4:f3:44:
c2:5b:bd:fd:1d:38:44:26:f3:e6:1a:ab:cc:a2:01:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4B:08:4E:74:F0:94:E9:82:2A:C3:78:25:38:30:FB:C9:1C:93:32
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5EsITnTwlOmCKsN4JTgw-8kckzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
213.139.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:6b:6c:f5:9e:72:30:09:52:a3:fd:e1:5e:f4:d5:98:e3:58:
bd:7f:57:19:8b:b0:89:df:fc:ad:64:79:0a:c1:3c:dd:aa:84:
f5:79:f8:a7:c8:0e:52:62:15:10:57:67:86:39:6a:50:c9:4c:
33:de:52:68:94:37:df:3a:60:bf:1a:81:f6:fd:5c:af:c1:e5:
b8:ff:0c:9e:9c:26:f4:f4:8e:0f:09:23:e1:92:6c:c5:f2:57:
26:00:f5:61:f2:49:74:60:c6:5d:d5:a6:a8:9b:3d:98:b3:a7:
49:a3:45:49:2f:2e:96:f7:f3:ad:25:b5:81:cd:95:80:02:c1:
51:e5:b1:be:55:80:59:ff:73:ea:25:df:17:18:89:26:27:7d:
bb:04:e0:58:4f:b3:1d:b2:25:0b:e0:c9:c3:79:92:ad:63:59:
8b:d2:b0:9b:a8:65:9a:f3:eb:79:7f:3c:b0:8c:c0:5a:21:b2:
d1:8d:34:aa:0b:15:9f:17:9a:5d:12:bf:a9:a0:e9:4e:22:1c:
e7:49:03:7a:3c:e6:43:43:c7:fa:1f:19:ce:fa:d2:3a:32:98:
23:c5:c3:4b:51:4e:45:c5:4e:0b:1e:2e:39:1a:a1:99:9d:b7:
26:55:1e:8e:1c:d1:4b:d3:67:94:b2:20:2b:cf:50:a5:5a:ca:
6a:46:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:49:03 2025 by rpki-client