Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa
File: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (raw, json)
Hash identifier: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=
Subject key identifier: D9:E4:A7:E7:2D:BB:95:D1:26:0B:41:9D:FF:9E:01:77:CF:C8:F4:96
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3E8F068BD27D035CC9306637FD46
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141968
IP address blocks: 103.76.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:8f:06:8b:d2:7d:03:5c:c9:30:66:37:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e4a7e72dbb95d1260b419dff9e0177cfc8f496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:02:c2:38:9b:8c:98:2c:a1:34:b3:81:4a:
b0:14:d2:f7:1a:44:23:88:bb:fa:25:fa:4b:a1:78:
66:bc:d8:c6:16:5c:bd:c4:5c:79:c8:2f:e2:37:10:
d3:f7:70:f6:58:a5:b1:97:45:1a:a6:46:62:fb:35:
a6:25:5d:3f:06:11:07:5f:9c:da:18:da:5c:20:bf:
bd:09:da:57:57:f8:a4:55:b2:06:f8:bb:2e:27:b9:
c7:58:95:23:0b:a7:e2:19:17:ef:8c:ff:c3:61:29:
88:42:20:12:80:84:46:84:70:85:b9:ca:a5:f3:8f:
18:36:33:a7:16:b5:2f:11:a0:3a:af:b7:57:2f:5d:
e2:3f:0b:04:9c:7b:a5:41:77:31:51:bf:6a:54:a2:
2d:bc:38:2d:d5:65:26:15:47:41:a9:c3:4f:46:6b:
02:8c:e4:9e:79:ed:fb:27:bb:99:40:e8:20:f1:70:
eb:3a:62:5a:d1:c8:a1:46:e9:03:3f:a1:ce:c7:d8:
94:fb:4d:35:1d:2b:3a:09:45:4d:c2:4f:3c:74:29:
c9:a2:d7:5e:cf:b8:16:a6:92:ca:44:e5:64:f5:27:
fa:22:06:25:c4:50:f4:40:4d:a5:6b:09:0f:ef:a4:
71:87:a2:8d:55:ca:b1:34:01:d1:ec:a7:3b:e7:32:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E4:A7:E7:2D:BB:95:D1:26:0B:41:9D:FF:9E:01:77:CF:C8:F4:96
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:12:1d:63:d0:bf:1b:04:f7:20:cb:24:f1:b8:14:b5:9c:03:
ff:c8:58:86:24:f0:3f:f7:37:22:a0:ae:cb:3b:6f:15:b9:dd:
0a:43:05:e1:19:28:92:c4:1e:45:b7:bf:cf:a3:e1:de:25:ab:
65:5b:da:e9:b6:e8:09:a6:8e:1e:2e:9b:66:7b:12:f8:4e:9a:
c7:5b:12:81:af:52:89:07:96:b6:52:14:cf:f5:4c:91:85:b7:
a9:45:86:77:ed:84:4e:fc:bf:48:92:40:5d:38:17:25:d1:b6:
a0:b6:da:3e:f6:32:47:0e:ae:6c:af:d0:2c:fe:21:b0:f1:40:
07:db:17:2a:83:ed:fe:09:04:c6:ef:aa:01:c0:f3:a1:3d:28:
98:f4:c7:7a:35:3b:fe:77:49:2b:7d:4f:8b:26:ce:e1:79:0a:
74:c0:39:3e:f6:84:51:24:fe:3a:15:d6:66:f8:9e:b5:dc:b9:
07:6b:08:21:2e:71:31:b9:22:f7:3d:f0:55:f8:85:e6:2b:a6:
f1:6e:db:36:8d:68:e9:7b:1e:1d:3c:0a:d4:3d:3f:a0:58:22:
30:64:24:d1:87:13:d0:8b:8a:e9:cf:fd:7c:fa:43:2b:90:f3:
78:51:36:da:a8:33:d6:58:d9:1c:c0:b5:2c:ed:22:4e:c4:0e:
34:2a:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:31 2025 by rpki-client