Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5JogtRYPjcizJN2ykZA1kBSj0pw.roa
File: 5JogtRYPjcizJN2ykZA1kBSj0pw.roa (raw, json)
Hash identifier: KG8QimSOjWc76tZzGIZZOsU+sWsXI3AxJjoLZlDsA2Q=
Subject key identifier: E4:9A:20:B5:16:0F:8D:C8:B3:24:DD:B2:91:90:35:90:14:A3:D2:9C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01948DFCDE62034805BA6CB839F9F3DB73C9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5JogtRYPjcizJN2ykZA1kBSj0pw.roa
Signing time: Wed 22 Jan 2025 12:29:06 +0000
ROA not before: Wed 22 Jan 2025 12:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216300
IP address blocks: 45.12.68.0/24 maxlen: 24
93.88.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:fc:de:62:03:48:05:ba:6c:b8:39:f9:f3:db:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 22 12:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49a20b5160f8dc8b324ddb29190359014a3d29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:67:ea:df:92:85:38:66:83:ac:aa:7c:da:
93:05:84:ab:4c:77:35:6c:ad:0d:6a:b2:d6:01:85:
a6:58:6e:67:63:dc:81:92:33:ef:f9:6e:c0:b9:a4:
7a:22:5a:64:12:39:b2:4e:ae:d4:a6:5c:8a:85:ba:
a6:8a:28:35:f1:74:14:15:78:4a:6b:9a:14:3d:41:
91:d3:53:bd:71:d4:f4:43:1d:0b:de:9f:fe:a5:f0:
91:56:4e:91:92:50:9c:92:a4:16:9d:bb:6b:b7:fa:
39:6f:14:4f:cb:79:b1:aa:ea:0c:81:84:b7:9d:c0:
de:71:5d:6e:78:71:45:c3:92:6d:9d:e5:ae:3e:e9:
c5:1c:48:ff:4b:ab:72:15:7b:4c:68:09:2a:49:a3:
45:cb:ae:0f:65:ca:6f:d0:a5:6f:99:89:14:86:51:
60:dc:75:ad:bd:89:7d:20:35:e5:25:b2:39:98:22:
72:5a:37:a9:d6:3e:eb:bd:96:bd:39:e0:e7:8a:b5:
69:e2:77:ae:db:5d:fa:18:85:e0:f6:dc:98:aa:0e:
dc:e9:0b:84:7e:72:8a:b1:a9:55:43:0b:45:21:58:
ae:96:63:86:91:0f:d0:2e:d3:e0:c0:cc:cc:10:26:
4e:c4:75:6a:25:36:2b:b0:1a:af:05:a6:2e:7b:ac:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:20:B5:16:0F:8D:C8:B3:24:DD:B2:91:90:35:90:14:A3:D2:9C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5JogtRYPjcizJN2ykZA1kBSj0pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/24
93.88.200.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3f:8d:41:e7:eb:e7:f9:29:bc:17:a3:3d:ca:c0:9b:72:a3:
39:0a:ff:4a:c4:b0:e5:7f:4e:80:60:62:5d:2a:74:41:a1:ba:
5d:99:a9:e2:ff:92:58:a2:06:8e:1b:fd:8f:88:12:ab:48:23:
58:29:16:dc:ae:2c:9a:98:37:d6:a4:8f:59:67:0a:5f:2f:0e:
ad:f0:56:e9:f9:e6:95:07:b8:03:2e:dc:70:32:76:9a:4a:26:
32:35:4f:7a:d8:24:92:ad:42:2b:2c:67:58:6a:bc:f2:ce:09:
8b:3d:c5:57:be:64:c9:17:21:44:3e:a1:6c:17:c3:05:0c:14:
38:d5:cf:10:e3:bd:18:c8:bb:56:eb:7e:25:9f:c7:eb:1b:86:
f3:b3:3d:26:ed:b8:14:8c:8e:04:57:68:ea:c7:a6:3b:a5:36:
3c:6a:22:75:8c:82:74:67:cb:94:bd:bc:8a:3c:53:7c:7a:dd:
af:48:d2:66:67:26:5c:09:5a:e4:21:35:7e:fe:92:da:b7:21:
6d:4f:29:12:e3:96:fc:5d:1b:79:23:61:f9:a9:47:ff:08:ec:
a6:e8:b1:38:f1:1c:3c:03:76:42:bc:df:44:fe:dc:42:f8:70:
8f:70:94:2d:80:cd:e6:f4:67:bf:a8:e5:d7:e5:f4:66:c9:fc:
82:0c:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:39 2025 by rpki-client