Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/D5MLLXN4CceB_y0IsVIPz32Ea_c.roa
File: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (raw, json)
Hash identifier: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=
Subject key identifier: 0F:93:0B:2D:73:78:09:C7:81:FF:2D:08:B1:52:0F:CF:7D:84:6B:F7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 019421B1EC1ABF543AF883D75041354E4E11
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/D5MLLXN4CceB_y0IsVIPz32Ea_c.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211394
IP address blocks: 193.56.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:1a:bf:54:3a:f8:83:d7:50:41:35:4e:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f930b2d737809c781ff2d08b1520fcf7d846bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:a5:5e:93:78:da:54:eb:9c:13:81:55:ed:
91:6c:72:f5:95:62:30:99:73:01:b5:d5:c2:e2:86:
43:52:e4:b5:45:4f:ca:b9:7f:41:5c:92:e6:0c:41:
77:ca:07:17:ed:58:0c:a3:7d:73:9a:96:7b:93:ba:
c1:80:93:1b:dd:57:25:e0:7b:10:77:20:fe:6c:90:
30:eb:c2:eb:7f:77:9a:08:b3:2e:77:13:45:a6:0b:
5e:9d:c4:be:2f:06:0c:54:d3:9b:db:c5:15:25:01:
b5:eb:4d:a2:12:18:4f:8d:ca:81:36:d2:71:0a:52:
5c:61:6b:d1:22:a7:7e:2a:8d:66:c4:cf:f4:35:af:
b9:7d:0f:d4:11:ce:fb:58:e9:23:00:b1:85:ce:71:
0c:27:07:24:e3:26:ee:27:8b:d7:6e:63:92:16:0b:
46:87:0d:51:d9:a2:84:2a:9d:a5:c1:48:e1:b8:33:
88:09:56:7b:44:a4:8d:ff:e6:79:9d:46:05:55:0a:
64:6d:29:7c:78:b7:e6:a9:4a:98:e3:72:ce:8d:ae:
61:43:11:bc:4a:ef:eb:bc:91:62:c3:8f:b2:a1:28:
69:37:da:05:bf:29:99:30:6c:07:9b:ce:1d:70:ef:
5a:9d:60:77:e9:3b:03:53:68:db:c5:a1:c0:f5:0c:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:0B:2D:73:78:09:C7:81:FF:2D:08:B1:52:0F:CF:7D:84:6B:F7
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/D5MLLXN4CceB_y0IsVIPz32Ea_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:fd:af:41:47:99:0b:19:28:e4:30:1a:b4:ec:2b:cc:fc:
c3:80:a8:d4:37:fb:dd:8e:23:06:6b:13:d5:fa:bf:05:27:1f:
61:ac:40:f6:f9:b9:e4:22:f0:f8:c7:98:be:1e:1d:b4:a9:3b:
f5:cf:d6:27:da:6e:fe:b0:0c:0a:a2:f0:9e:fe:ff:10:59:85:
12:86:dc:de:df:2c:9e:f3:84:0d:da:87:e8:8b:b9:e9:bf:73:
45:29:cd:15:09:f4:66:24:a3:de:a5:91:ac:b1:3a:02:7a:26:
9e:3b:e0:b9:2b:d4:14:34:ce:d3:0b:b2:e4:1a:99:4d:c8:2e:
3e:f7:12:d2:96:26:c5:4a:e3:9a:18:a0:f1:98:84:d4:0e:c0:
00:fd:fb:ee:a2:36:e8:e6:49:fb:c9:f0:24:12:e6:a4:c8:41:
6b:d2:cf:48:95:33:ef:65:b1:7f:6e:24:2e:2b:3b:1f:11:11:
0d:b8:c7:58:a3:4c:3a:85:92:f2:a3:25:1f:51:54:a2:bc:52:
72:fb:60:42:07:f7:ee:d1:b9:47:19:db:c1:0c:99:0d:c8:15:
be:60:7b:ef:7a:6a:ee:ac:8b:9f:24:61:e1:33:53:1c:07:e0:
41:7c:95:e8:a6:70:6b:91:7a:d8:02:1c:b6:24:ee:1f:38:49:
03:e7:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:47 2025 by rpki-client