Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/5QH7uoE58dfucr5l0cknmb5_6nM.roa
File: 5QH7uoE58dfucr5l0cknmb5_6nM.roa (raw, json)
Hash identifier: am7mbJzCmfdx1pMjvSb/IknD/TSfo87lHt1mL7pdZCQ=
Subject key identifier: E5:01:FB:BA:81:39:F1:D7:EE:72:BE:65:D1:C9:27:99:BE:7F:EA:73
Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial: 019421B1EED9F5A709B9C4B09AF297D1990C
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/5QH7uoE58dfucr5l0cknmb5_6nM.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 77.75.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ee:d9:f5:a7:09:b9:c4:b0:9a:f2:97:d1:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e501fbba8139f1d7ee72be65d1c92799be7fea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:c2:e9:29:7b:b3:b4:c5:d1:09:1d:f6:98:
dd:1f:55:9e:f9:7d:2b:c6:8f:1e:3d:a3:3b:05:c2:
a1:77:6e:15:f0:92:2d:28:c3:52:8f:5d:b4:a7:63:
a1:30:64:5f:91:0b:4b:df:5e:a0:47:07:53:8d:42:
1b:ed:ce:f5:3d:0b:76:ba:59:37:1a:a1:cd:4e:87:
15:18:73:05:88:b7:d5:40:7f:69:3b:98:32:e7:49:
78:25:e1:5f:fe:ac:d9:24:c9:3b:71:d6:1c:61:d4:
1a:aa:93:dd:e3:a2:28:a9:28:cd:ae:87:b4:fe:42:
63:5a:92:a0:e7:7f:87:b2:46:02:84:83:a5:7d:52:
94:60:a7:e7:5e:00:76:c0:98:d3:fc:b8:bd:ac:c5:
a7:d1:53:1a:e8:b8:1a:50:50:56:46:db:84:73:e8:
6f:11:21:ae:9b:b0:aa:8a:73:7f:b5:9d:e3:f7:05:
87:53:ae:f1:b9:8a:67:c4:d2:ee:97:7a:00:8c:8c:
6d:98:41:47:bc:44:fc:14:3c:8f:b3:7a:80:d1:a2:
49:bf:6e:75:af:20:bc:05:dd:ee:6b:97:0f:00:4f:
97:6d:f8:f8:b2:81:02:39:a2:0f:4b:b4:1f:55:53:
0b:77:f1:9c:47:5e:a4:eb:ba:bb:68:f5:f4:2e:ae:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:FB:BA:81:39:F1:D7:EE:72:BE:65:D1:C9:27:99:BE:7F:EA:73
X509v3 Authority Key Identifier:
keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/5QH7uoE58dfucr5l0cknmb5_6nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
28:d7:2e:c0:c9:e5:ed:0f:7e:78:b6:50:b1:55:26:38:54:b9:
b1:c1:bb:9f:cf:c0:eb:00:c3:9f:4e:04:3a:43:61:3c:85:79:
3a:48:37:11:f0:45:cc:7a:ae:01:f7:a6:4e:f9:c1:15:72:c3:
85:cd:d1:d9:50:c9:9f:38:22:d4:ab:95:7d:a3:68:be:4b:6b:
27:30:29:95:7a:ee:ae:68:13:1a:eb:50:9d:96:18:82:21:c3:
e6:b9:64:dd:d2:10:c3:fa:49:c5:0d:d1:1a:3d:7d:bd:f2:2c:
8f:54:62:b1:b8:eb:d8:f8:d1:8a:bc:d8:32:68:23:23:0b:e8:
c3:2c:26:08:a9:b4:43:aa:e8:14:f3:ce:ad:26:d1:f2:f1:8e:
4d:5e:25:1d:f5:6a:f7:74:3a:38:ba:e4:93:d6:ad:02:11:38:
8d:91:e4:b8:30:d8:8a:4b:a4:6d:e6:2b:03:f0:21:f3:41:dd:
30:f3:6d:ea:a0:27:59:c2:e4:a7:8b:a5:ac:c3:a5:74:0d:b9:
35:44:ec:23:08:09:e6:d9:fa:f5:2b:d3:3e:f7:f5:5b:00:a1:
02:53:fb:2b:9f:45:97:f6:73:48:7e:50:b1:8f:63:12:1e:be:
c5:49:e3:44:e4:33:c0:85:77:b1:3e:44:2e:b0:9d:38:24:03:
eb:99:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:03 2025 by rpki-client