Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5UkkEsoZ3w1YDscrSK5B387jdos.roa
File: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (raw, json)
Hash identifier: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=
Subject key identifier: E5:49:24:12:CA:19:DF:0D:58:0E:C7:2B:48:AE:41:DF:CE:E3:76:8B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F81A52769A9957E61301C8DE94098
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5UkkEsoZ3w1YDscrSK5B387jdos.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 212.111.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:a5:27:69:a9:95:7e:61:30:1c:8d:e9:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5492412ca19df0d580ec72b48ae41dfcee3768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:97:ba:a8:e0:80:17:75:e4:e6:44:83:06:
46:f4:40:a5:dd:16:bd:f9:98:fa:56:c1:5a:35:bc:
5c:66:16:13:66:09:74:92:37:10:6a:ce:a6:b4:4e:
43:4a:1a:f2:3b:2b:34:f5:a3:ee:6e:50:a5:74:a7:
68:af:5d:b5:43:1f:f4:32:0f:70:09:7c:23:71:31:
c1:9a:64:9b:88:96:b2:86:35:0f:7a:63:e2:f9:23:
1a:35:40:c7:ac:c2:94:d6:4c:dc:7a:99:60:4a:b5:
83:c5:6e:04:aa:66:7a:8f:e9:d2:3c:5a:2d:d2:3e:
e6:9b:f5:d5:1a:72:f3:5d:59:5c:ca:e6:14:f2:f5:
32:f5:79:f2:9c:a2:f5:0f:6f:f0:66:a4:5e:7c:42:
f4:9c:66:b1:ff:e0:dc:f7:e4:78:ea:22:4b:09:57:
12:bf:be:32:35:42:18:a1:ae:2b:b7:ba:f4:61:a5:
10:cb:23:52:87:cb:d2:5e:17:43:17:b5:a8:1f:35:
f9:61:c0:c2:fc:62:19:2c:09:4b:a6:71:0b:c1:c9:
f9:a7:c9:6f:a4:4a:05:85:4a:ff:0a:0e:97:14:06:
4d:10:f3:f5:38:00:69:5b:c6:30:b4:1d:d4:cf:4b:
a4:05:53:87:75:72:c6:fc:82:05:d8:42:7c:a0:64:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:24:12:CA:19:DF:0D:58:0E:C7:2B:48:AE:41:DF:CE:E3:76:8B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5UkkEsoZ3w1YDscrSK5B387jdos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:60:bd:fe:47:c9:c4:b3:30:f6:25:9d:dc:5d:4c:8f:0a:68:
ba:fd:87:e8:50:dd:52:54:90:2d:d7:0a:03:4f:dc:db:70:b6:
b0:3b:32:2a:94:7d:68:44:bb:1a:ae:eb:6e:d1:4c:d2:e9:72:
76:1a:88:86:8d:fc:63:80:73:92:e0:90:be:c0:56:e3:24:7e:
12:dd:68:be:1d:7c:f5:78:d8:04:66:14:88:7b:2c:af:3d:a5:
66:ed:c6:74:8f:f6:89:ff:43:bb:3c:ba:99:07:7e:4e:d8:e5:
78:26:45:76:bf:ad:35:80:ed:74:54:d0:ec:02:a2:84:d1:cc:
f4:13:67:78:e7:c4:ff:a5:83:58:bc:55:ee:21:8d:bd:61:f5:
7a:4e:6b:fc:76:e2:ec:ff:2e:57:51:06:64:06:e9:4c:d9:a5:
3e:f6:df:96:be:f9:60:43:3e:c3:49:bc:ea:dd:5e:1e:71:bc:
9e:27:77:af:90:27:62:33:db:01:ab:eb:25:d8:8f:f9:76:3e:
ad:12:cd:76:15:af:e6:97:a2:d4:f9:67:2a:21:d5:4c:aa:cb:
5e:32:48:bd:24:85:e7:48:af:0a:c0:3e:c9:5e:84:15:a0:54:
f2:7e:13:80:85:a4:45:01:80:5f:99:17:34:cc:0b:e8:ab:2b:
45:ce:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:26 2025 by rpki-client