Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E_5JhM-xpqv89i8OslGQvDkCWqw.roa
File: E_5JhM-xpqv89i8OslGQvDkCWqw.roa (raw, json)
Hash identifier: HFIiQD19t++eqD0i+eSTfWrtLIMDnOjLs8bKyGFVyww=
Subject key identifier: 13:FE:49:84:CF:B1:A6:AB:FC:F6:2F:0E:B2:51:90:BC:39:02:5A:AC
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC084DDC04A1BD163AF36BE5CBA6B4
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E_5JhM-xpqv89i8OslGQvDkCWqw.roa
Signing time: Fri 31 Jan 2025 00:04:06 +0000
ROA not before: Fri 31 Jan 2025 00:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.186.194.0/23 maxlen: 23
94.241.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:08:4d:dc:04:a1:bd:16:3a:f3:6b:e5:cb:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fe4984cfb1a6abfcf62f0eb25190bc39025aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:1c:8f:82:63:ec:85:38:80:05:45:58:27:
6d:34:bb:76:11:26:bb:a0:a6:52:59:69:39:ed:46:
4c:36:f5:7b:98:22:17:10:8c:2c:b4:5b:c3:39:a1:
19:3e:90:f1:ab:55:fb:bd:e9:20:ad:eb:3f:ef:25:
a7:21:d7:cf:0e:6f:ad:77:95:88:97:8e:e5:b3:5d:
7b:dc:97:fb:71:37:9b:9d:cc:14:39:4c:55:e0:e4:
b8:a9:74:01:59:00:13:61:b5:db:67:65:53:e2:f3:
61:ce:2d:f9:b0:12:c8:67:38:42:3e:04:ca:c8:53:
4e:ef:9d:cb:56:0f:5a:db:05:18:7a:de:76:d6:9a:
ea:1b:3f:c5:a7:19:62:c3:1c:8a:e5:5c:00:d2:6f:
5a:ba:0b:ef:68:69:5d:60:59:47:73:48:00:40:11:
75:b2:7a:1f:96:f4:13:27:57:e3:48:2c:c0:89:cf:
49:90:88:a5:ab:c5:d3:d4:f2:5b:c8:29:b4:20:94:
ff:1d:59:4a:c5:57:50:8b:40:a1:c6:da:e8:1a:13:
6d:d0:aa:4b:91:36:6d:f4:7a:f6:fe:aa:34:1c:42:
6c:01:03:ca:c6:ca:f4:1b:ce:fc:e6:fd:86:f4:8f:
4b:48:c3:e9:65:2a:84:0b:ac:e2:86:e2:09:c7:31:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:49:84:CF:B1:A6:AB:FC:F6:2F:0E:B2:51:90:BC:39:02:5A:AC
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/E_5JhM-xpqv89i8OslGQvDkCWqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
48:23:c6:a8:73:23:05:85:54:74:b7:2f:1e:ec:4e:f8:d0:17:
7d:5c:c4:de:2a:02:02:b8:71:70:d2:7b:fe:06:9b:aa:6e:1b:
9d:c7:d3:ee:20:e2:ca:35:0d:7c:08:02:66:50:06:09:dc:a6:
50:f0:11:e1:13:68:f6:cd:14:5c:33:d3:85:f0:de:56:f3:8d:
1f:23:15:bf:4b:a3:33:41:61:5a:c9:2b:ae:12:ca:15:d1:e7:
7d:c9:c2:81:12:ea:39:d5:02:81:92:bf:8c:44:4b:ba:69:b3:
0d:14:66:1b:77:73:a2:9d:db:da:a8:9f:3d:6a:3b:b5:bd:d9:
00:6d:4c:bb:c5:52:dd:c6:ff:d3:7f:49:e2:28:b7:6b:dc:26:
fa:4e:7e:45:de:47:a9:ff:f5:5d:34:74:53:f4:6d:10:42:7b:
be:8d:df:d9:b9:5d:44:5e:89:b4:4c:56:c4:d3:6a:2f:e8:f4:
5f:db:a6:40:99:ba:3e:6c:08:97:29:c3:33:c2:14:2a:0c:77:
f6:bd:d2:9b:f4:48:04:97:78:cd:97:e6:8f:86:9c:8b:44:86:
6d:56:c6:55:d9:ce:2b:c1:f5:1e:ba:fc:45:fb:bd:88:11:7a:
2c:86:ea:97:60:10:4a:94:a3:de:de:48:9d:52:0a:c5:b6:cb:
8b:19:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:08:25 2025 by rpki-client