Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5bB3yoqJtJ8O9S62QfWorgiioFY.roa
File: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (raw, json)
Hash identifier: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=
Subject key identifier: E5:B0:77:CA:8A:89:B4:9F:0E:F5:2E:B6:41:F5:A8:AE:08:A2:A0:56
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019427B473E2EA1A8EFF3AFC9DA907F98FC6
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5bB3yoqJtJ8O9S62QfWorgiioFY.roa
Signing time: Thu 02 Jan 2025 15:48:45 +0000
ROA not before: Thu 02 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.151.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:73:e2:ea:1a:8e:ff:3a:fc:9d:a9:07:f9:8f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jan 2 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5b077ca8a89b49f0ef52eb641f5a8ae08a2a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:f0:49:8a:c7:47:bb:f5:bd:40:e0:f4:27:
40:e8:f6:d5:d8:71:9b:d2:72:b8:f3:d1:1d:bd:18:
5a:b5:50:d1:fe:14:c6:03:eb:54:37:03:97:b3:ee:
29:82:5f:c6:5d:f3:bd:6e:ff:96:27:48:51:65:2e:
77:f3:c0:e0:74:8b:b5:08:06:c8:38:4b:0d:4f:01:
b0:c1:a0:58:f7:f7:33:d5:40:80:1b:d2:dc:17:76:
81:e9:8b:9d:0f:8f:6e:bd:18:4f:12:bf:fb:ef:30:
aa:23:9a:a5:f2:c0:d0:dd:9e:81:91:2b:85:7f:6a:
4c:c6:8e:48:aa:c9:89:a5:d0:b1:7d:f7:f6:52:7a:
34:91:d3:bd:4b:af:61:be:b7:7b:7f:a8:08:38:11:
3a:c1:ff:e7:7b:e2:03:fe:ff:59:ca:55:a7:43:7e:
3e:bb:aa:01:7c:7d:e1:fe:c7:4e:1b:4f:c7:19:02:
41:9c:5c:17:8b:d4:1c:7f:c2:df:9e:be:ca:c6:af:
c2:71:05:c6:0a:46:b1:29:3e:b7:ce:14:45:21:b7:
05:72:22:24:a7:17:49:eb:72:f5:e7:09:52:4a:16:
d1:c3:57:ec:5e:21:68:18:f8:58:6d:80:0b:14:1d:
3d:28:d7:96:93:74:99:e4:05:78:79:59:63:72:9e:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:77:CA:8A:89:B4:9F:0E:F5:2E:B6:41:F5:A8:AE:08:A2:A0:56
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5bB3yoqJtJ8O9S62QfWorgiioFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.92.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b4:0e:27:03:e3:ad:92:17:77:dc:20:be:af:cd:bf:d6:bf:
98:1b:3b:82:68:0a:1f:91:d6:58:6b:bc:47:11:62:15:25:f6:
50:e6:eb:df:f6:90:83:c5:3e:9f:e5:1e:df:2c:ea:ee:92:63:
4c:aa:8f:e1:78:03:e8:13:0b:65:b2:44:7e:1b:c6:fc:c2:26:
23:3e:f7:e4:7a:76:a0:96:62:3f:3f:c9:2d:c8:43:48:a6:dc:
82:75:ee:04:80:c0:5e:b7:72:b3:31:5e:b0:e9:5f:6d:ef:e4:
27:e1:41:bb:d1:e8:e9:b7:83:2f:26:63:3e:e3:cd:da:20:73:
6a:0c:54:25:13:ff:d1:51:d3:89:ac:a0:a1:58:32:96:e9:15:
ac:b3:f8:e8:75:b1:f1:99:db:7f:ca:15:e8:2d:bf:60:dc:7d:
56:83:30:c8:53:74:43:19:78:b5:6f:05:e9:20:14:71:cf:ed:
23:7a:b4:4f:02:3d:a3:50:92:b9:cf:72:33:bc:5b:7a:c6:f3:
70:12:11:ae:14:32:b9:4f:26:44:9a:ac:9e:4b:f6:f3:86:c8:
46:9f:d8:7e:ce:cf:18:cd:30:f0:8a:5c:2a:35:d3:4c:0e:19:
d4:81:d7:7c:40:a6:29:94:31:a3:a0:17:e5:4a:82:03:27:9d:
dd:a3:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:31 2025 by rpki-client