Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa
File: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (raw, json)
Hash identifier: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=
Subject key identifier: 78:01:B3:D6:37:53:37:91:06:CD:4B:37:80:A4:0E:B8:3C:0D:52:53
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019427B651469799043216242031C4824F29
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201121
IP address blocks: 5.158.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:51:46:97:99:04:32:16:24:20:31:c4:82:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7801b3d63753379106cd4b3780a40eb83c0d5253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:3f:b7:b3:bc:53:38:a8:b0:3a:70:5e:8f:
52:75:39:7f:05:51:8e:b6:40:38:34:3a:ae:97:ca:
cc:78:3e:e7:55:ac:00:fb:de:a8:90:53:85:4a:d4:
4f:5d:a9:3f:b6:0d:a1:1d:94:30:98:97:20:46:7a:
58:45:3d:2f:55:fb:05:3f:a6:52:a5:b0:e5:66:72:
52:00:39:5e:0e:e8:65:88:0f:24:cd:85:f0:cb:1f:
32:12:a2:d8:95:ed:57:fd:6d:96:e7:bb:f6:a9:0a:
8d:c9:c8:bc:fe:86:e0:f0:15:a0:6e:aa:fd:8c:3d:
80:20:a6:9f:05:dd:0e:c4:79:e1:3c:9a:b1:60:06:
13:13:69:28:41:85:3e:22:ac:ec:b2:9b:61:54:3d:
cc:ac:5c:68:4f:8b:c6:d6:09:6c:59:1b:9f:cb:56:
e1:cf:8c:1b:6b:da:08:9b:32:8e:72:4f:0c:c2:7e:
4b:82:68:3f:7c:0f:5f:0f:8b:ee:40:65:8f:6d:85:
7f:79:b4:c0:da:26:db:e4:d8:26:d6:6a:41:d8:4b:
c9:e0:bd:6a:94:48:d6:1e:3c:3b:89:7f:78:0e:b1:
34:3a:78:f9:5b:1f:03:7a:50:2d:b3:7b:85:6d:d9:
f3:72:1a:04:10:d8:71:bf:f4:f0:f1:f4:c2:8b:c2:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:B3:D6:37:53:37:91:06:CD:4B:37:80:A4:0E:B8:3C:0D:52:53
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.87.0/24
Signature Algorithm: sha256WithRSAEncryption
43:44:ab:42:10:14:d3:20:64:34:af:ad:63:fc:a7:68:d8:51:
a1:b0:d3:1d:32:a4:db:da:d7:ce:d1:e7:ad:9c:40:6d:a3:0a:
53:1b:dd:f7:d5:01:2b:11:68:25:c0:e1:5f:3b:fd:5e:83:8b:
1d:cb:79:78:f1:8b:10:af:79:fa:96:d2:ad:d3:b4:01:9f:b4:
af:ac:d5:f2:c0:8a:1b:fd:ee:84:20:6d:07:95:57:e8:39:fd:
5c:30:b5:99:d1:c0:51:e1:97:f6:08:c0:08:7c:ca:c0:27:66:
12:4d:02:03:71:f2:a3:35:65:46:c1:df:e3:79:17:05:c0:7e:
62:4a:bb:df:04:77:d5:8e:8d:04:ff:18:3d:4b:e9:46:50:46:
ef:72:36:f8:3b:c1:24:4a:26:79:13:bb:08:e7:bc:17:39:7c:
6a:cf:fb:64:00:7f:4b:d0:de:ef:d9:81:1d:59:9b:31:a2:c3:
02:5f:90:01:dd:65:49:a6:51:37:0c:c9:87:34:49:c3:3f:67:
61:00:a3:60:3b:f1:39:92:98:de:10:81:ed:fe:ef:1a:f8:a2:
eb:e5:c0:bd:e9:1a:92:40:11:24:33:54:d9:dc:27:02:c9:04:
27:62:92:cd:48:b3:3a:52:e7:6b:94:5d:c8:5f:4b:4e:c7:34:
88:fb:46:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:06 2025 by rpki-client