Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa
File: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (raw, json)
Hash identifier: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=
Subject key identifier: 13:1A:F8:38:A4:8D:86:79:BE:17:39:C7:07:C8:E0:A4:D6:C9:67:14
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D4353C2A98053580E43A56BB81E45
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.252.234.0/24 maxlen: 24
141.98.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:43:53:c2:a9:80:53:58:0e:43:a5:6b:b8:1e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131af838a48d8679be1739c707c8e0a4d6c96714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:27:bb:32:ba:11:da:18:47:eb:3f:ff:9f:
2f:a1:f4:8d:82:dc:7a:85:5b:75:ab:23:af:c4:2f:
d8:98:12:e8:15:55:f8:8b:ca:e9:e7:c3:01:cf:7a:
a3:43:53:5f:49:a0:bf:8d:6f:b2:28:55:b4:e4:dc:
18:3f:36:a1:f1:37:cb:9a:12:d9:3e:dc:45:e2:36:
73:f0:ae:ab:e2:49:36:a0:e7:35:66:d7:e9:67:9d:
0a:a0:fb:2d:fd:10:0f:22:67:83:81:73:a6:e4:5d:
41:49:5e:bc:27:95:16:2e:9a:e4:1e:08:bd:c8:ea:
e3:4b:09:1e:aa:c3:2d:ba:5d:aa:e1:a4:f4:7f:d4:
03:4d:34:c7:02:4b:c6:80:6f:3e:5d:c8:3e:83:50:
ad:39:62:85:2c:36:54:e5:1a:88:29:68:c0:b0:27:
17:f0:3c:69:0d:fd:6f:09:6f:ca:b2:02:97:9b:b9:
cc:9e:35:90:b0:ba:50:e4:2c:2c:33:01:1a:9f:67:
a8:d9:c8:8c:f1:0b:26:1f:45:c3:fb:28:bf:70:a2:
98:37:14:0d:bb:ef:3d:4f:62:b7:3b:d7:b0:b9:d2:
fb:4a:ce:59:f9:e8:3e:f4:ee:5e:8c:2b:f9:0a:60:
9b:48:d1:b6:0a:48:0f:cc:8c:b8:57:79:b2:fa:00:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:F8:38:A4:8D:86:79:BE:17:39:C7:07:C8:E0:A4:D6:C9:67:14
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.234.0/24
141.98.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:13:7b:8c:20:78:53:1d:0f:17:e8:15:c2:1e:df:17:90:3c:
ea:5a:5d:c8:46:9b:12:93:4c:57:f9:57:6d:33:5c:82:6c:67:
95:8f:fe:73:ce:1e:fc:8b:4b:54:a6:7b:5a:8c:71:dd:30:87:
ac:0d:f4:77:80:99:fe:25:4b:3d:c9:18:db:92:12:8f:7b:68:
5f:3b:bd:6f:bd:67:4d:ff:c0:20:8f:6a:c2:bd:df:2a:a3:53:
9a:1b:b2:e4:3f:fd:11:83:e7:71:21:e0:0e:75:b7:11:8c:ef:
5c:9b:cd:39:0e:38:ae:bf:75:15:54:07:aa:29:4d:66:e1:e5:
4c:3f:05:56:ed:0c:37:c7:cb:fe:00:37:1b:98:45:64:c1:1a:
ca:ab:76:df:8b:45:15:b8:fb:8c:32:f4:18:a7:21:e8:76:8c:
5c:39:0e:75:aa:8a:c4:9b:de:25:17:8c:ad:aa:1d:d0:22:e1:
f6:b0:63:7f:80:7f:a4:cd:e6:38:15:95:ed:06:3e:45:58:e7:
74:a0:f9:2f:7d:1c:38:76:f6:ec:48:ef:fc:ae:68:2d:55:05:
17:50:3c:36:d4:94:67:91:63:ab:4a:4e:64:f6:9c:5d:e7:c9:
a5:0a:9b:40:77:db:64:3c:21:23:70:1c:9a:57:9b:bd:2a:2c:
06:2c:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:48 2025 by rpki-client