Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5Tg98Pg7DyCYGAAUmEW1eveyaJQ.roa
File: 5Tg98Pg7DyCYGAAUmEW1eveyaJQ.roa (raw, json)
Hash identifier: MWpMilIMiS4+G8/i6FXwuICKzHF/EyqRDNIRQr1ZEsY=
Subject key identifier: E5:38:3D:F0:F8:3B:0F:20:98:18:00:14:98:45:B5:7A:F7:B2:68:94
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0195DC202916294C932E96BD779912516537
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5Tg98Pg7DyCYGAAUmEW1eveyaJQ.roa
Signing time: Fri 28 Mar 2025 09:40:49 +0000
ROA not before: Fri 28 Mar 2025 09:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213555
IP address blocks: 45.132.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:20:29:16:29:4c:93:2e:96:bd:77:99:12:51:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 28 09:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5383df0f83b0f20981800149845b57af7b26894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:e1:89:07:ed:6f:e1:84:1a:2c:00:96:d8:
53:7f:a1:b7:56:84:68:a9:ec:a2:b1:4d:7f:c5:25:
d8:b5:fa:93:0f:fb:72:93:b7:39:85:ce:bc:a2:5c:
26:e1:81:84:8d:51:0d:ca:9e:17:c1:cf:e7:09:a3:
5e:85:73:1c:43:6a:9c:df:97:70:66:59:7e:fa:b2:
0c:50:3a:06:06:42:35:3e:b2:0b:23:87:6b:ba:1b:
5e:75:29:75:82:23:51:89:91:26:33:8d:76:be:e1:
d3:42:fe:94:c2:c1:a1:22:d1:21:03:36:07:cb:93:
e9:d0:20:09:a7:8d:81:28:5b:be:34:c3:58:9f:b2:
7e:3a:1f:8b:3d:7d:3c:d3:33:bb:be:f2:81:19:cc:
1d:86:e3:15:cd:3a:72:66:c0:1f:96:de:f9:26:25:
c4:9a:f1:7f:a1:6a:a7:32:4f:8c:aa:3d:e3:8e:70:
c5:95:a8:90:fb:0d:cc:30:2d:17:a1:ce:b3:27:c4:
ba:0d:ac:e8:27:dd:7f:bf:b0:e5:1c:3b:ce:9a:50:
a7:28:6a:e3:0e:03:51:8d:dd:46:22:22:28:53:54:
42:fc:ad:84:9c:d6:3e:74:4c:25:69:2b:7d:b0:f3:
5d:4e:24:dc:aa:bd:e8:f4:4e:dc:f1:04:eb:ec:6d:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:3D:F0:F8:3B:0F:20:98:18:00:14:98:45:B5:7A:F7:B2:68:94
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5Tg98Pg7DyCYGAAUmEW1eveyaJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:e0:a3:25:28:86:d6:e4:b3:ae:18:85:f4:2e:54:6a:84:
ce:22:47:3c:98:94:b3:87:0e:55:17:7c:db:34:01:b8:ca:b0:
43:05:4f:1d:6b:a1:4a:79:8b:2c:19:1b:19:25:a5:8d:40:5d:
28:da:d4:f1:97:3d:bb:5c:a9:c8:53:74:e1:a1:c3:8e:70:e0:
c4:99:2b:6d:8f:6b:cf:2a:3c:0f:d3:7f:ee:65:52:5b:82:65:
0f:b8:dd:fc:45:39:da:ee:04:80:55:bf:d5:4a:60:6f:2a:ac:
b2:b5:6c:49:cf:8d:b9:0e:be:17:2c:02:1a:c8:0c:31:08:99:
14:1b:c9:7f:00:ac:a1:31:c4:76:11:09:cf:74:43:53:11:99:
5d:df:34:3c:a0:89:b4:a6:15:93:21:79:e1:40:0c:63:b4:d0:
d5:96:5c:62:39:76:7c:1b:62:90:b2:e7:ed:c5:5a:34:f9:4b:
5d:75:c2:af:b1:2a:0f:a8:7c:28:96:53:06:d1:8a:a4:a1:b2:
1c:0e:4c:c9:fc:4a:63:c1:e3:46:33:a6:ec:62:d2:d6:97:f2:
1e:97:ff:34:35:ff:9a:d8:1f:cf:94:58:20:16:b5:b2:4c:4f:
85:72:70:8f:0f:7e:58:bb:7e:1a:9e:7a:ea:24:85:c8:74:12:
c4:3f:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:57 2025 by rpki-client