Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/5mIqDi-qSZMNQfzVabCDYIualIY.roa
File: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (raw, json)
Hash identifier: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=
Subject key identifier: E6:62:2A:0E:2F:AA:49:93:0D:41:FC:D5:69:B0:83:60:8B:9A:94:86
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 01942826A3AA754D75D7587B95F4E2F3FAA9
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/5mIqDi-qSZMNQfzVabCDYIualIY.roa
Signing time: Thu 02 Jan 2025 17:53:28 +0000
ROA not before: Thu 02 Jan 2025 17:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 139.18.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a3:aa:75:4d:75:d7:58:7b:95:f4:e2:f3:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Jan 2 17:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6622a0e2faa49930d41fcd569b083608b9a9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:5e:27:5d:e9:93:c3:42:f9:ea:8d:d1:46:
65:f2:7c:a0:c8:91:95:f3:ee:9f:9e:3b:97:2e:f3:
60:e6:ab:cb:77:af:5d:e2:9e:90:26:d4:44:74:0b:
c0:4c:ce:8a:c1:37:af:4e:24:c1:5d:78:2e:8a:d1:
9f:2d:b8:40:15:c0:6b:1b:6d:1c:08:db:69:6d:ff:
2d:91:6a:bf:b8:64:d6:dd:36:ca:05:72:d0:96:ba:
13:55:b5:56:49:84:ef:40:a0:b4:e5:ab:9c:0f:c8:
8c:48:07:fe:b1:4c:db:2f:98:fe:5c:2f:94:5d:e4:
6d:ea:99:b2:77:fd:11:98:d2:42:6b:fb:a0:00:0d:
a9:c7:d8:11:17:55:b6:c8:a5:29:7e:e1:f7:c2:6f:
21:07:b5:53:66:08:4f:9d:1f:b7:9f:5f:d0:79:c7:
90:f3:a4:a9:9a:08:21:5e:c6:f9:82:1e:76:b2:07:
c8:ca:5c:a0:93:82:e6:c0:91:f5:e8:37:4c:cb:fb:
d0:bb:ad:83:1a:80:bb:b3:ff:ee:68:67:37:a0:2b:
00:6c:e2:72:04:55:03:67:2d:75:50:9f:2a:cb:a5:
9f:f6:d2:4a:8e:c1:7f:db:e9:72:16:3c:91:1e:c7:
0f:d5:7b:7a:41:5b:9b:92:a9:1f:b9:ec:95:94:15:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:2A:0E:2F:AA:49:93:0D:41:FC:D5:69:B0:83:60:8B:9A:94:86
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/5mIqDi-qSZMNQfzVabCDYIualIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:fe:63:6f:4b:9c:b1:ca:97:2c:85:4f:c3:04:54:f5:c0:81:
af:11:d0:c3:30:8d:0d:30:5f:66:e4:67:cf:e8:29:1a:fd:c4:
b2:49:d2:d6:ff:36:52:81:f5:e3:b7:78:f1:d2:ac:4a:6b:a1:
07:35:8b:01:38:cc:09:c5:10:56:dd:a2:c5:98:d6:66:be:a0:
a7:40:49:65:13:89:40:bc:ad:35:51:f4:ee:c4:41:31:cc:c8:
1b:65:06:97:a0:2c:ce:d4:02:e1:09:fc:c4:4a:b9:1b:88:1c:
50:12:67:c3:41:ec:1d:d4:fa:43:9f:18:c4:b5:23:8d:ab:c3:
66:ba:f6:b5:e2:83:2f:54:95:ab:86:8a:7a:9e:3e:39:e1:95:
70:ec:6b:73:9e:d1:4a:9a:1b:e5:85:ea:fa:9f:3d:79:0d:47:
18:a0:0d:7b:cb:bb:98:dc:8d:2d:ee:3b:ec:0e:f4:45:d8:3e:
22:20:b9:fc:e3:48:c0:4d:8a:f1:d8:81:3b:62:69:a5:4e:08:
f3:87:99:d9:e4:ef:72:95:82:26:38:ad:c2:24:49:af:75:f0:
33:51:df:27:3e:46:26:e5:25:d1:0b:0c:f8:7b:0c:3b:96:ba:
b2:7c:b1:64:14:88:93:c7:49:3a:ad:11:03:c4:eb:b9:20:ea:
53:5d:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:02 2025 by rpki-client