Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa
File: 5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa (raw, json)
Hash identifier: eWpgjaoVJC0L+xFRvzTJa/HrtM2zzM7SykfE1sq9g2I=
Subject key identifier: E5:94:47:38:0F:03:0E:0F:D7:84:9F:09:8C:2B:E1:4C:E1:A2:0B:5C
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 01942C167D237C89E94DE1EE0330B36A8AD4
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa
Signing time: Fri 03 Jan 2025 12:14:18 +0000
ROA not before: Fri 03 Jan 2025 12:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 194.32.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:16:7d:23:7c:89:e9:4d:e1:ee:03:30:b3:6a:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jan 3 12:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e59447380f030e0fd7849f098c2be14ce1a20b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:e6:a4:ac:00:66:42:a9:0a:05:46:e9:c5:
5d:05:9b:2e:60:e1:1d:64:c3:36:70:23:dc:73:93:
02:75:b4:88:27:0b:82:62:94:97:2d:3d:4d:df:00:
4f:04:92:8e:e3:4f:f8:93:6d:f2:74:7b:59:e6:de:
14:9b:d0:e0:be:a5:04:5d:a7:23:d7:9b:bf:60:4d:
e9:d6:9d:5a:b4:05:2f:09:7c:f0:10:ce:83:25:dd:
88:52:d3:45:18:11:9b:d3:51:41:8c:1d:ac:c0:ed:
c1:79:72:b7:13:68:7f:48:66:e2:f4:08:35:f6:9a:
b1:9d:c7:4b:ef:46:53:50:22:6c:a6:f3:cd:70:55:
3d:41:ef:53:ed:f5:33:59:b6:05:c4:5a:a9:b5:cd:
19:1f:b2:3f:0c:c3:ea:e0:a6:30:8c:ea:b5:43:41:
33:1f:d5:c4:5c:9d:00:4c:b8:4d:23:67:95:84:96:
0a:70:ae:65:19:1f:4b:43:9f:78:ed:d5:55:9d:60:
2a:9d:df:14:bc:7d:49:33:b3:52:82:6e:92:80:ae:
2d:7a:12:86:fc:8e:aa:69:b3:04:5d:08:25:04:24:
52:c4:b4:3a:34:55:c7:0f:f8:23:58:07:9c:a9:41:
cc:92:8c:b2:79:2f:41:60:d2:4d:30:b0:3e:69:f5:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:47:38:0F:03:0E:0F:D7:84:9F:09:8C:2B:E1:4C:E1:A2:0B:5C
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.215.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cd:1a:91:ae:5d:1c:ac:3d:0b:76:98:4a:d8:56:28:19:cc:
f6:4e:a7:5f:10:c4:3c:cb:c4:c2:c2:b1:42:42:81:29:09:02:
9c:41:5c:01:ff:8a:a1:ce:24:bf:87:34:3e:1b:6e:f7:92:44:
06:11:f0:68:80:c9:02:5b:ff:82:79:fe:ef:5a:f1:7e:a6:37:
e4:22:3d:24:7e:70:52:c6:ab:71:c7:33:66:93:24:5d:e9:22:
78:b0:60:8a:04:ba:4a:f5:bb:ec:ce:ae:81:88:24:56:85:2d:
2c:45:7f:07:2b:c5:88:e5:81:9a:81:06:68:58:52:e1:4a:2c:
8e:06:51:a6:af:39:f5:0e:b9:ba:b5:5a:b8:d7:fe:aa:fa:a3:
df:38:9f:56:55:07:55:1c:6b:df:84:ef:77:8e:37:2e:1a:63:
2b:7c:da:b2:3b:1a:f4:4f:91:00:31:35:74:15:27:f8:a0:49:
3d:73:ce:34:82:5e:20:99:68:ea:20:84:01:20:e6:21:c0:60:
1a:a3:e9:71:37:32:47:ab:71:9e:28:7a:46:41:23:ad:3b:00:
19:e1:44:28:18:d4:0b:ae:e1:7a:9a:c2:7b:15:97:ed:b5:1b:
76:e0:8b:ee:80:ad:ec:d6:59:df:58:9e:d3:d7:9b:bb:a2:6e:
c5:2d:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:28 2025 by rpki-client