Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5lZeJQSUE5o45Iz-YJVYbyB35Cg.roa
File: 5lZeJQSUE5o45Iz-YJVYbyB35Cg.roa (raw, json)
Hash identifier: 6sL0VQwA54faHq4T1T4rpqTsEt+0vM1AdfRBxr5tcbc=
Subject key identifier: E6:56:5E:25:04:94:13:9A:38:E4:8C:FE:60:95:58:6F:20:77:E4:28
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019590E6F58E5F638CB95EF56F075250F2CC
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5lZeJQSUE5o45Iz-YJVYbyB35Cg.roa
Signing time: Thu 13 Mar 2025 19:06:49 +0000
ROA not before: Thu 13 Mar 2025 19:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 212.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:e6:f5:8e:5f:63:8c:b9:5e:f5:6f:07:52:50:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 13 19:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6565e250494139a38e48cfe6095586f2077e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:8d:7f:f5:a6:25:f9:db:43:f5:8e:b3:33:
bc:03:4a:60:a8:62:df:91:cd:5c:bc:5d:65:25:4d:
cb:f4:e7:c2:6a:63:39:cd:07:9a:e2:5e:cd:c1:60:
95:ae:1c:92:66:3f:73:d3:20:73:e9:6a:f8:29:c7:
d0:a6:eb:45:c7:90:8a:8c:71:ef:9a:be:89:58:1d:
b4:7d:60:e7:d0:93:f2:e6:28:a8:12:25:43:a8:b3:
d0:a9:12:f2:80:69:a8:ea:3c:7c:24:8d:66:c6:63:
03:54:c1:38:f9:d4:d3:db:92:61:32:51:70:d1:6d:
de:43:3b:8f:8c:74:b0:24:bc:c2:33:5e:47:d5:9f:
f8:58:2e:48:a1:ab:ab:9e:d7:83:4b:ef:df:52:7d:
b8:e1:2c:a4:25:f5:57:54:3b:d5:26:2e:da:05:4f:
45:4d:b0:f6:6d:79:ef:91:0d:e2:8b:12:58:3d:60:
5d:13:f0:f4:37:48:81:c0:fd:3f:5f:0a:24:a0:0a:
60:43:4f:c6:1a:2d:86:c2:17:61:89:f4:f2:72:4f:
73:c4:3c:4c:e5:c1:62:1d:bf:ab:de:4b:44:f4:50:
7c:5d:33:c1:b8:9e:5d:3a:ee:19:ea:d5:03:99:b2:
95:50:4c:38:d8:5d:76:62:23:6a:0d:4a:84:10:c7:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:5E:25:04:94:13:9A:38:E4:8C:FE:60:95:58:6F:20:77:E4:28
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5lZeJQSUE5o45Iz-YJVYbyB35Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dc:6a:62:81:fe:24:70:cb:bc:7f:6c:8b:0f:b0:1b:44:14:
80:b3:9a:8e:50:7c:64:f6:dd:c3:39:92:88:ca:ac:0d:e3:d5:
ca:63:26:32:d0:45:d1:88:7b:96:02:cf:89:7a:96:51:12:a1:
f8:89:6f:c6:78:00:6a:fd:fd:8c:66:69:93:62:d6:18:f4:cd:
37:0e:5c:d3:bd:e4:9d:ec:6e:bb:db:a4:5f:81:38:cc:8c:b2:
fd:fb:99:8a:ad:c0:f6:16:40:62:f3:88:e2:be:96:e6:f0:5c:
c5:9f:a1:0a:a2:4c:ad:05:60:cd:f7:05:5e:a7:3d:36:ed:67:
f3:3a:61:a6:a9:6b:f4:fa:20:d3:99:a5:20:c1:5b:ea:ab:46:
91:60:d9:42:fd:72:bc:19:ba:10:07:7b:7c:5b:51:28:de:d0:
5b:7a:c8:ef:1d:fe:07:99:ed:0a:2c:9c:aa:46:36:b0:0e:d3:
61:b0:6c:85:e7:59:51:d1:84:93:c4:88:4f:79:e2:a3:d9:21:
a5:6b:c4:88:da:0b:f1:2f:86:d3:4b:3b:29:27:38:e5:b0:79:
41:61:74:f1:94:f6:ce:a9:e3:fd:6f:57:25:a7:49:69:2d:9a:
14:26:a4:52:f2:bd:fa:2e:4c:a8:ce:cc:a4:d1:c3:36:f2:05:
ff:38:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:10:12 2025 by rpki-client