Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/shTn7GqCkQHNe5th-DoeAc9YFfk.roa
File: shTn7GqCkQHNe5th-DoeAc9YFfk.roa (raw, json)
Hash identifier: aySq0BgEVOrK/vhv+t0wKgyn8II5kEUij+WlbV5t6wE=
Subject key identifier: B2:14:E7:EC:6A:82:91:01:CD:7B:9B:61:F8:3A:1E:01:CF:58:15:F9
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019425FC46A689458A94C40CF35F667FC105
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/shTn7GqCkQHNe5th-DoeAc9YFfk.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56902
IP address blocks: 5.100.240.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
45.142.136.0/24 maxlen: 24
45.142.137.0/24 maxlen: 24
45.142.138.0/24 maxlen: 24
45.142.139.0/24 maxlen: 24
185.128.124.0/24 maxlen: 24
185.128.125.0/24 maxlen: 24
185.187.128.0/24 maxlen: 24
185.187.129.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:46:a6:89:45:8a:94:c4:0c:f3:5f:66:7f:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b214e7ec6a829101cd7b9b61f83a1e01cf5815f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:ab:af:e9:62:bc:26:d1:e2:d4:0e:83:a9:
b2:3c:20:78:5b:07:26:d2:62:f9:c5:d6:b0:14:32:
7c:c1:a6:77:f7:cc:b8:d3:30:99:df:9b:71:29:b5:
6c:cb:f1:6d:b8:57:21:fa:cc:c2:ad:cd:0c:dc:6a:
2c:08:81:c1:98:c8:c6:09:29:8f:97:be:dd:d5:b8:
3e:a8:dc:1d:91:9b:b6:5e:5b:ec:56:ec:af:e1:d7:
65:aa:ad:41:cc:40:48:15:fc:2e:93:14:c7:87:46:
82:72:9e:de:be:b2:4a:7b:d4:58:0d:3e:1f:f7:67:
82:0f:db:ac:1c:c7:80:84:ce:49:5a:08:e6:b7:06:
25:79:4e:94:89:a0:ed:14:60:75:f8:85:79:2a:71:
d0:94:0b:f9:ce:d9:9b:98:09:8b:f4:38:40:c3:84:
67:d4:5b:ae:fe:df:57:1a:65:c7:d6:e1:10:3d:79:
f7:eb:9d:d3:30:bf:3a:97:6e:4c:a7:11:32:25:8a:
48:da:f3:1b:6b:d5:0b:ed:2c:28:0b:d2:f5:c5:66:
3e:7d:2e:76:ad:0e:44:94:f9:d1:10:ec:d6:9d:56:
a8:81:00:20:5e:7b:93:ab:d6:84:73:9d:9d:04:4f:
3b:7d:d8:9d:78:1c:e6:54:c2:38:69:8b:a8:40:2c:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:E7:EC:6A:82:91:01:CD:7B:9B:61:F8:3A:1E:01:CF:58:15:F9
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/shTn7GqCkQHNe5th-DoeAc9YFfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.136.0/22
185.128.124.0/23
185.187.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f9:10:ce:69:ac:4f:5c:ff:67:61:53:f5:6a:0e:8c:6f:b4:
70:a0:86:f9:c7:ed:90:a9:50:85:a0:7a:a7:16:3d:aa:c9:02:
62:fa:17:a0:bd:42:ef:9b:24:df:e4:b0:c5:09:09:e8:21:8a:
3c:98:5b:80:bd:5a:63:a2:a1:f1:39:56:8c:32:61:c2:e5:76:
97:6e:22:a5:d4:04:5d:11:0a:2d:3c:6a:e5:69:b2:0e:b9:10:
66:1f:58:9c:d3:f0:49:02:c5:68:1d:cf:08:e9:db:27:ec:57:
a4:bf:8b:16:34:50:63:b6:d4:63:da:1c:71:8c:26:58:bb:8b:
4b:19:57:e2:f9:66:4d:8e:11:00:38:9f:e5:c6:fb:4d:42:30:
85:0f:7a:f9:dd:25:dc:a4:93:3b:ad:93:27:51:d7:a3:7a:e8:
50:32:31:cd:a9:d9:75:1d:04:84:46:44:cf:a9:a7:b5:6b:97:
db:dc:75:3e:65:b9:93:d5:6d:ae:f9:01:4c:b8:25:eb:f1:27:
25:2c:b5:38:1b:5b:45:89:fc:ab:d9:47:49:c3:ba:30:71:77:
91:13:43:47:dd:35:98:07:e8:d2:63:86:25:78:c5:9c:96:9a:
23:5a:3b:8e:f6:a7:bd:03:d5:9f:d7:a8:e1:26:84:be:a2:3d:
5e:a7:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:13:47 2025 by rpki-client