Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/tfoDF7zyFas9gs6WFrVbnqLVtKs.roa
File: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (raw, json)
Hash identifier: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=
Subject key identifier: B5:FA:03:17:BC:F2:15:AB:3D:82:CE:96:16:B5:5B:9E:A2:D5:B4:AB
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019469BD1312F09C111AA58D59B9D459835F
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/tfoDF7zyFas9gs6WFrVbnqLVtKs.roa
Signing time: Wed 15 Jan 2025 11:33:06 +0000
ROA not before: Wed 15 Jan 2025 11:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39493
IP address blocks: 5.42.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:bd:13:12:f0:9c:11:1a:a5:8d:59:b9:d4:59:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 15 11:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5fa0317bcf215ab3d82ce9616b55b9ea2d5b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:09:23:d6:fe:c5:70:90:9b:47:22:23:58:
96:b5:14:a0:a1:67:15:58:16:2e:83:79:46:68:67:
cd:81:3f:53:b2:3d:3d:57:6a:f4:86:c2:ef:45:bc:
88:c7:0b:df:9b:3e:c7:4e:7a:77:92:01:7c:f0:64:
e5:6a:01:99:94:68:2f:50:50:8f:e6:3c:4f:9d:21:
19:f4:37:62:22:6b:c7:ac:76:c6:b0:88:7e:89:b0:
13:26:ac:6d:40:d5:47:1c:33:98:3f:67:9e:9c:3e:
6b:a1:03:d9:28:89:17:30:34:ca:6c:9d:4f:9d:9e:
ee:cb:c2:1c:bc:01:0a:f6:f5:97:89:93:5e:5f:93:
83:0f:eb:34:e8:9f:1e:36:5c:03:a4:a5:34:05:c1:
0d:3f:7a:94:41:3c:19:f2:c6:3f:f5:6e:cd:c7:d9:
1f:af:20:3a:1a:b9:2d:76:12:da:94:fb:4d:f2:96:
97:f6:ab:91:0a:5c:02:42:44:82:83:96:6b:29:32:
70:06:93:42:4f:e1:a8:56:c2:36:ba:43:fa:aa:2a:
25:84:2d:8c:e0:07:ad:8e:26:21:3c:19:ee:5c:34:
ce:25:e9:4e:9d:b7:d0:06:71:c6:9b:86:97:ef:14:
15:74:42:20:7d:af:af:25:1f:56:2b:38:ab:fa:83:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:03:17:BC:F2:15:AB:3D:82:CE:96:16:B5:5B:9E:A2:D5:B4:AB
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/tfoDF7zyFas9gs6WFrVbnqLVtKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:70:e3:bb:3e:0e:0c:a8:12:c8:ea:71:ba:da:05:74:3a:09:
7b:58:25:27:16:f7:d4:bc:bd:be:5f:6d:c8:4e:ba:d6:13:96:
bd:e2:fc:34:a9:4a:97:38:f2:54:76:28:f6:25:77:2c:55:3d:
c7:e4:1c:7b:3c:5e:75:a5:f6:f7:a9:e8:e3:be:fc:48:a8:84:
24:e7:3d:95:93:03:6d:42:e5:76:05:4c:fe:0a:1e:cc:07:63:
5f:07:ca:06:ad:6a:51:97:cd:5c:16:dc:f3:a7:2d:df:9a:cf:
64:67:b7:7b:07:19:93:19:c1:48:d8:f9:ad:0f:28:52:0c:76:
c1:46:b0:a6:0f:35:bd:d4:1a:c6:a4:ed:61:3b:65:9e:e2:19:
21:76:fb:1b:aa:32:35:46:6f:9d:99:e9:1f:c8:03:40:9c:68:
ce:bd:3e:b9:4b:75:bb:2c:e3:6e:44:60:75:d1:11:ff:3a:54:
01:3b:f0:a8:da:2c:28:a6:8d:86:b0:b2:8d:66:9c:f1:ae:42:
5f:90:c1:f6:6f:74:1a:18:89:83:01:8d:ef:79:73:c4:88:a6:
f8:41:c2:6b:d1:89:d4:c1:63:7e:51:6c:7a:29:2a:36:a2:77:
9d:a9:d8:48:96:77:a4:d7:66:31:5d:da:7c:a2:d7:97:2a:d2:
7e:7e:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:23 2025 by rpki-client