Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/5BopT6zWN2-PdGYdxH2aUB0jmhg.roa
File: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (raw, json)
Hash identifier: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=
Subject key identifier: E4:1A:29:4F:AC:D6:37:6F:8F:74:66:1D:C4:7D:9A:50:1D:23:9A:18
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22D93D11EBAFD115859EBA4DDE3A6
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/5BopT6zWN2-PdGYdxH2aUB0jmhg.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49188
IP address blocks: 95.169.197.0/24 maxlen: 24
95.169.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:93:d1:1e:ba:fd:11:58:59:eb:a4:dd:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41a294facd6376f8f74661dc47d9a501d239a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:62:e7:59:fe:c7:a1:4e:bd:d4:bc:8e:33:
9a:6b:ca:3c:44:68:d8:9b:0b:49:26:00:6f:8d:5f:
f9:dc:da:fb:27:d8:56:4b:81:ad:ce:63:4d:9e:4b:
f0:23:2d:c3:8f:dc:ef:9f:69:a1:df:3f:bf:42:aa:
1b:e2:60:ad:e6:88:5c:c8:f6:29:cc:94:06:d8:6b:
ae:38:8f:13:27:94:23:53:78:09:38:df:d6:c7:95:
6e:77:60:ad:66:63:2d:9c:7c:c3:18:a8:d9:94:a3:
54:bc:2f:b2:fe:4b:eb:3d:ef:f5:d4:48:ab:11:64:
38:ea:7b:59:75:28:ca:28:3c:53:61:67:ef:79:d7:
f4:f3:30:e8:e2:31:53:06:e5:65:d9:7d:fe:86:f6:
00:89:4e:b4:e6:ed:c2:fc:77:cb:c4:f2:89:56:88:
8a:91:87:2f:95:94:da:38:b9:75:e9:b5:59:1c:d8:
0b:54:35:64:c7:c4:fe:56:9b:b2:5b:ee:c8:54:7f:
3e:aa:9f:ae:67:a4:57:55:84:d2:f9:4e:37:f5:8a:
a2:7e:a4:0e:d8:99:27:b4:e2:fb:13:14:0b:19:17:
d0:ea:ee:7b:4d:56:5d:db:c8:f6:bf:27:23:3e:10:
c8:0e:ee:c0:c5:5d:0c:ea:58:02:34:bd:91:e4:f7:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:29:4F:AC:D6:37:6F:8F:74:66:1D:C4:7D:9A:50:1D:23:9A:18
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/5BopT6zWN2-PdGYdxH2aUB0jmhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.197.0-95.169.198.255
Signature Algorithm: sha256WithRSAEncryption
89:ad:9e:8e:74:98:0c:3d:a0:78:0d:1e:b0:7b:da:fb:b8:50:
7a:18:c4:78:8b:ea:b5:69:9a:13:a3:29:ed:8a:96:b1:ed:65:
55:52:3f:63:08:5c:06:79:4c:78:17:45:e1:1a:d4:e8:c9:c2:
ea:4f:d7:d8:19:88:cb:14:90:31:65:fa:3f:96:e5:f6:eb:bb:
e1:61:6f:53:4a:8a:81:60:ec:e0:18:a0:63:04:8e:61:63:25:
15:48:23:da:8a:02:40:cc:3c:dc:72:ab:0d:be:81:ae:eb:b6:
f1:3b:80:9a:d8:3b:e7:5a:08:52:37:05:da:28:50:a2:c1:f5:
e1:b2:aa:e1:ae:49:5e:97:19:32:95:18:d0:24:be:60:a1:54:
3d:be:21:8a:73:61:d0:89:b2:66:be:16:7a:5f:ac:31:f6:52:
0a:2d:a4:97:f1:9f:48:45:9a:cc:fd:0e:59:a1:18:5f:2d:fb:
db:44:fc:9c:d7:c1:1c:ef:12:a3:08:a1:e4:e5:36:bc:0a:9f:
17:f1:68:3f:3a:b5:55:da:18:f3:74:6b:26:65:d1:fe:4e:84:
12:fa:ce:88:30:bb:e4:6a:7e:9c:63:65:73:ba:14:46:a3:cb:
cb:02:cf:81:45:07:1e:67:a6:f0:6b:d9:5c:10:4b:49:71:54:
7a:0e:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:51 2025 by rpki-client