Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa
File: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (raw, json)
Hash identifier: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=
Subject key identifier: 3B:94:29:E0:91:25:55:ED:2E:9B:54:67:BB:3F:BD:C5:0C:95:0A:97
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0194228E396329784DDECADB412BB55EC53E
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60475
IP address blocks: 5.178.120.0/21 maxlen: 21
185.235.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:39:63:29:78:4d:de:ca:db:41:2b:b5:5e:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9429e0912555ed2e9b5467bb3fbdc50c950a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:93:22:47:4c:d3:93:db:cf:14:a5:98:b1:
05:aa:05:a9:fa:c4:62:e6:e1:05:8b:9a:27:16:12:
75:79:7e:6b:af:cd:2e:87:aa:9e:95:e2:78:76:c0:
7b:c2:6e:fa:1a:e7:7d:9c:d9:72:f9:d7:cc:f1:7c:
38:87:02:37:a8:f4:2c:50:a0:c4:11:c4:97:dd:bb:
85:b1:7b:11:7d:4c:41:e5:e9:70:be:3e:c3:fb:2c:
1c:79:a4:ea:49:23:8e:7d:55:99:ba:1d:3c:2e:c7:
2d:6a:b0:d0:63:55:5d:0f:58:0a:bc:77:90:11:7b:
47:47:4c:09:1e:2c:7f:42:71:c3:3b:88:46:5b:2e:
fc:f8:d1:fd:11:4f:d8:29:8f:4a:9d:d4:3c:f6:51:
f8:4b:51:15:d7:17:90:97:5d:32:0b:21:88:16:70:
6d:d2:08:88:65:c8:cb:f0:19:57:2d:50:63:cc:99:
35:5a:6e:e0:3c:fd:f2:e5:9c:a5:36:6d:46:dd:73:
39:02:08:71:a2:af:a8:5a:36:ac:9f:47:94:e7:67:
3a:75:e3:f2:f5:35:a0:58:40:d9:78:ca:17:de:71:
08:28:be:d5:5c:37:8e:ff:98:e1:6a:70:a6:b2:12:
8a:aa:bd:63:db:25:3a:d0:9b:8c:5f:91:68:f4:41:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:29:E0:91:25:55:ED:2E:9B:54:67:BB:3F:BD:C5:0C:95:0A:97
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.120.0/21
185.235.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:34:9a:ad:cd:70:8d:f1:81:4e:93:df:62:11:d5:a7:94:b8:
ca:e1:29:8f:39:aa:af:b6:a4:de:d5:bd:cc:48:ce:9e:de:28:
40:8e:ea:40:68:e1:86:b8:08:96:fe:57:8a:8c:07:4e:7d:8c:
62:17:f6:ce:85:44:94:78:2e:c1:0e:2f:45:27:be:ed:5a:0e:
cf:98:93:ad:66:7a:58:2f:37:2e:ee:eb:20:b6:74:4e:b5:d9:
99:12:b0:ba:a0:67:e9:bb:e0:9a:1c:c5:10:1b:44:fd:67:fc:
30:68:9d:31:06:c9:b1:b4:76:d4:7a:9a:1f:6a:bf:4e:1a:ad:
b0:1a:3e:7a:ca:e5:8c:32:ef:76:92:55:f7:39:aa:af:fa:f8:
4b:27:bb:18:47:dd:05:b0:92:62:e5:8e:29:7b:cb:b3:8d:f4:
da:18:ed:94:8c:87:68:84:ec:34:cb:87:d1:11:11:2c:47:c3:
3e:60:23:4d:12:63:2b:2c:c4:b3:26:a0:7d:1b:b2:7e:5e:19:
4d:73:15:6b:eb:89:81:70:81:12:07:7e:9b:cb:aa:4c:b9:6a:
d3:7f:5e:9c:7f:bc:22:a6:8d:04:0e:bf:0b:70:a0:fe:26:7e:
a7:3d:de:42:50:e0:48:1c:18:41:82:84:f7:51:c2:b1:25:67:
01:56:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:36:39 2025 by rpki-client