Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa
File: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (raw, json)
Hash identifier: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=
Subject key identifier: 69:39:73:6F:72:BE:98:D8:52:5A:46:C4:2A:FD:BD:5D:CD:C8:4D:3D
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019420683CD75316E632B03BE33CA9E8A365
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59422
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.106.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
5.149.108.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
5.149.111.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:d7:53:16:e6:32:b0:3b:e3:3c:a9:e8:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6939736f72be98d8525a46c42afdbd5dcdc84d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:eb:dd:b5:a8:a2:8d:9d:4e:3b:cf:bc:52:
a6:a5:08:b1:b9:3c:bf:58:77:95:ee:9f:c2:44:77:
28:ab:a9:4f:df:65:c4:cf:61:3a:79:be:23:75:23:
07:5a:07:05:f5:a8:4b:fa:a3:24:be:03:19:87:b0:
7a:91:b9:86:d9:bd:eb:38:8b:3d:38:68:78:c2:c7:
e2:8a:ea:27:46:93:3b:b5:ad:86:77:52:5e:38:03:
04:70:f8:d1:6b:b0:89:d8:38:75:00:82:a2:f5:df:
b7:62:21:5d:86:ae:9c:7d:fd:46:84:22:f8:3d:bb:
fc:28:9f:ee:a5:4e:0f:d7:0a:d9:b9:c9:f4:d6:02:
8d:df:2c:79:20:75:a9:3d:a4:0c:9c:ad:68:e2:44:
36:b5:61:3e:4b:bd:bb:c6:b7:c9:8b:c6:6e:af:b6:
38:bf:c1:1f:28:48:f2:3b:57:b7:66:09:62:49:61:
9f:98:d0:44:23:0c:e3:2b:84:0c:2c:42:7f:7b:e4:
f6:d8:c6:67:e7:d3:5f:bc:b9:bc:15:88:09:ea:f1:
a5:43:b5:bd:fb:2d:48:26:21:13:51:84:b2:80:40:
12:9b:46:34:13:12:c1:cd:ec:e1:8d:f1:85:d3:9b:
d3:73:45:80:3c:56:87:ab:52:10:24:d7:f6:4c:28:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:73:6F:72:BE:98:D8:52:5A:46:C4:2A:FD:BD:5D:CD:C8:4D:3D
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0/24
5.149.106.0-5.149.108.255
5.149.110.0/23
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
a8:e1:22:1c:11:3c:b9:37:1d:5d:16:ce:6c:a8:ab:31:8c:5e:
25:78:09:f3:4b:6a:31:be:6b:bf:3b:48:10:d0:d9:41:64:d2:
80:30:ae:68:79:a2:07:bf:10:d8:89:c3:51:b5:ef:8c:67:28:
96:cd:b4:da:33:cf:3b:cb:10:aa:0d:e1:a4:89:3f:4a:a8:dd:
bb:24:52:b9:a7:d1:08:09:0e:bf:3e:e8:0d:cd:35:a9:a9:18:
4b:08:6f:10:06:87:c3:5a:70:c3:ba:46:87:7d:4f:95:9b:2a:
9c:e7:fe:4a:72:8a:df:f3:c4:7a:2c:a9:6f:7e:44:de:55:30:
7d:e5:a1:e9:06:f4:9a:fb:f4:35:50:13:4e:6e:e9:11:4c:f2:
8b:45:4f:fd:f9:77:90:da:2a:eb:00:ef:96:9f:42:1a:c1:61:
42:18:65:69:22:81:11:11:33:57:4d:3e:3c:6d:9d:e0:56:e0:
3e:6e:ce:0b:ce:d4:1f:64:51:7c:3d:75:9f:b7:21:2b:90:f2:
61:b8:78:d8:52:39:cd:ef:58:6c:6c:f4:16:b4:7f:fe:43:d0:
e8:57:e5:3c:a8:4a:7a:8c:c7:78:ea:b6:4f:a4:51:e4:14:7f:
47:9e:ca:8b:58:2e:2c:26:05:c7:80:0f:86:36:b3:08:05:71:
83:58:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:40 2025 by rpki-client