Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa
File: 5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa (raw, json)
Hash identifier: Fe5zRDY7jD+WRSzJ0H39dtDk1v9N5Zf6dRgDXos+lRE=
Subject key identifier: E5:74:2C:9F:73:FF:1B:72:6C:1A:7C:71:0C:DC:25:08:09:E9:2A:80
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01961F9BE3D97842DAC9942206441DF7D6EF
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa
Signing time: Thu 10 Apr 2025 12:10:32 +0000
ROA not before: Thu 10 Apr 2025 12:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.42.176.0/23 maxlen: 24
37.16.75.0/24 maxlen: 24
91.202.4.0/23 maxlen: 24
91.239.76.0/24 maxlen: 24
213.111.144.0/23 maxlen: 24
2a11:6100::/32 maxlen: 32
2a11:6101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:9b:e3:d9:78:42:da:c9:94:22:06:44:1d:f7:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Apr 10 12:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5742c9f73ff1b726c1a7c710cdc250809e92a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:24:c8:18:33:b5:33:5b:25:dd:b3:6e:01:
40:11:c9:31:84:45:01:21:8c:76:9a:7e:e9:c1:45:
1a:8b:3b:c9:d5:64:ca:56:aa:0e:b7:1a:77:c7:85:
62:5b:76:ab:d3:9f:10:6a:c1:99:a6:66:56:d4:7b:
f2:ac:6c:6c:50:fa:06:32:7e:78:11:30:73:ba:e7:
c5:06:c9:ed:54:23:47:10:42:89:c5:e9:24:0d:da:
c3:ba:13:36:42:ae:77:68:5b:2f:0c:27:75:ed:89:
d7:a5:e4:99:7e:27:9f:57:d7:d7:ef:0e:27:51:83:
7f:42:c5:d7:54:63:c9:fd:ed:78:92:0c:49:7e:8e:
34:02:93:7f:c9:02:42:02:fb:d8:e8:ec:11:6d:b0:
75:78:76:c6:a8:da:4d:90:f4:a7:7a:5d:68:48:c4:
9f:63:a6:af:ec:09:dd:44:be:2b:b8:23:c5:cf:34:
ec:75:63:8d:a6:10:98:2d:9e:dc:a7:3c:f6:2d:57:
3c:a5:c2:83:a4:6f:5b:d5:69:22:07:97:c4:fa:02:
bd:8e:53:a2:78:5e:2e:49:ba:7d:c6:f4:5b:18:bf:
77:d8:ff:9c:18:2e:ed:b4:79:d9:2a:d2:ec:e8:50:
a6:8c:b7:38:f2:6f:bf:f0:33:73:5f:8e:dc:c4:fb:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:2C:9F:73:FF:1B:72:6C:1A:7C:71:0C:DC:25:08:09:E9:2A:80
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.176.0/23
37.16.75.0/24
91.202.4.0/23
91.239.76.0/24
213.111.144.0/23
IPv6:
2a11:6100::/31
Signature Algorithm: sha256WithRSAEncryption
83:ea:e6:76:03:da:46:ba:b6:0b:4a:fd:5a:75:d4:a9:6c:95:
98:d5:71:b8:b4:ac:fe:6b:a8:40:d0:75:af:7d:50:4e:2b:5b:
fb:b4:27:5a:6f:52:86:5c:d2:c8:07:cb:f5:f7:69:d2:13:25:
e7:a0:48:dc:08:dc:1b:97:df:b3:b0:f9:c8:76:5f:f3:6f:91:
f0:6c:29:39:26:63:c5:a7:e4:ce:35:48:63:f5:65:17:a5:b7:
bc:ed:77:b7:88:82:53:7f:71:30:83:0b:00:2b:30:a3:63:3f:
fd:4c:fb:fb:d7:f9:b0:e0:45:d1:47:f0:05:be:45:e0:38:b6:
e6:53:3a:57:f1:3e:05:a9:98:2a:b0:e8:a2:48:b4:86:12:90:
dc:6f:6a:f3:48:b0:a7:d5:15:b8:9b:e6:94:18:94:f5:eb:6d:
8d:ee:be:b6:42:a4:12:db:89:f4:89:f0:51:4d:d3:f8:41:46:
d0:12:7f:22:36:60:15:c2:6c:7e:42:9f:53:e3:34:87:6b:37:
d3:dd:04:7d:63:b5:d8:ec:db:43:20:3f:63:9a:4b:1c:57:72:
09:fd:ed:32:9a:67:70:48:91:87:2b:a5:a9:f9:89:c6:07:9b:
22:11:52:ad:4d:4c:67:9e:9c:21:51:88:9b:26:21:c5:05:c0:
0b:f8:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:53:01 2025 by rpki-client