Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/X2K16vfCCw5yGYZ35G284aX5j-w.roa
File: X2K16vfCCw5yGYZ35G284aX5j-w.roa (raw, json)
Hash identifier: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=
Subject key identifier: 5F:62:B5:EA:F7:C2:0B:0E:72:19:86:77:E4:6D:BC:E1:A5:F9:8F:EC
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 0194228DDE52268ED3968F33830E28F9FAFE
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/X2K16vfCCw5yGYZ35G284aX5j-w.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44697
IP address blocks: 91.199.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:de:52:26:8e:d3:96:8f:33:83:0e:28:f9:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f62b5eaf7c20b0e72198677e46dbce1a5f98fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:ee:d3:ec:1c:5c:1a:1c:e3:c3:16:21:c3:
4c:c5:4d:71:04:f4:f2:52:f4:6e:18:1e:b4:91:52:
36:62:1e:0a:a0:06:8e:5a:71:d4:c8:bb:85:9a:66:
57:24:04:d2:57:ac:0a:e2:3d:f2:00:c8:55:ec:bb:
c1:b2:b0:e6:fd:5d:07:29:dd:a1:41:96:8b:e3:14:
8f:5d:02:ed:a0:6d:15:e3:df:1a:b4:01:6a:2e:12:
3b:e2:b6:cf:71:33:45:b1:e0:82:fb:81:67:76:b5:
31:c8:e0:b1:67:48:64:84:38:63:97:3c:8f:98:68:
04:64:03:08:07:ec:d5:82:e5:d5:e4:10:01:77:fd:
0a:f7:81:a5:6b:00:7e:e2:34:ba:45:33:d3:1f:80:
38:e5:56:21:4a:cd:02:41:a9:0a:4e:af:d7:17:83:
7d:21:9d:8a:91:e9:dd:56:ab:80:72:1b:e0:b9:6a:
f4:75:35:df:75:d1:24:d5:2d:d4:70:bc:24:1e:48:
b4:bc:c4:5d:e2:05:30:cc:e9:bb:11:bf:99:b0:ec:
85:8d:c0:1e:cc:6b:4b:b2:b4:5e:62:25:1f:57:f7:
75:59:f8:6a:29:69:6b:3c:a0:e0:be:30:67:32:8b:
aa:89:cd:76:66:a9:1d:19:e3:9d:d3:6b:3e:49:9d:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:B5:EA:F7:C2:0B:0E:72:19:86:77:E4:6D:BC:E1:A5:F9:8F:EC
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/X2K16vfCCw5yGYZ35G284aX5j-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.183.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c6:8e:67:6a:eb:7c:46:c7:0d:8e:fb:bf:87:c7:0a:49:d4:
08:3f:ec:dc:e6:e4:75:7d:89:44:08:5c:47:04:6c:98:59:47:
c4:a9:5a:51:6b:8c:a2:d5:22:b5:96:12:e9:7d:9e:18:64:c6:
97:3f:a2:29:a9:95:c5:48:2d:18:88:51:80:b9:27:a3:c0:11:
21:8e:ee:c3:bd:fa:cc:e1:b7:35:bd:62:61:d1:3b:9d:ad:28:
b5:c1:2b:6f:55:68:4f:4b:0c:06:eb:2e:2c:5c:02:3f:3b:51:
a0:0c:13:b6:89:82:73:93:60:8a:c5:3d:fd:a0:71:bf:a5:14:
2c:b9:08:d2:00:52:7d:6f:26:35:99:2d:36:c8:2d:56:ae:25:
20:f5:40:1c:df:b7:b0:b3:1a:ec:c4:23:01:c9:2d:d8:61:29:
fe:e5:57:dd:86:8e:ba:85:ff:c7:d0:44:8f:7d:e3:9b:40:44:
19:66:7b:f4:7c:fb:e2:c6:1e:9f:ff:ae:84:14:b7:6f:77:df:
53:7a:2a:3b:a6:4b:20:8e:09:80:48:41:4f:d1:83:ee:5d:84:
46:64:b2:30:10:6d:73:6d:5b:e7:54:4c:1a:cc:ad:59:8d:70:
39:c1:4b:5d:d9:db:7e:1a:cc:a3:89:37:a1:7d:2c:b0:d2:e2:
a9:4c:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:48 2025 by rpki-client