Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5T-m5fbbInX_s0STclh4qrGLaco.roa
File: 5T-m5fbbInX_s0STclh4qrGLaco.roa (raw, json)
Hash identifier: 5ZXOVy4LSAcQBIFaxya6Ic+fwXgcKHGM0tBUUMbqFeQ=
Subject key identifier: E5:3F:A6:E5:F6:DB:22:75:FF:B3:44:93:72:58:78:AA:B1:8B:69:CA
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A2DF46A630A6671C9E9EDF3473C9
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5T-m5fbbInX_s0STclh4qrGLaco.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12826
IP address blocks: 81.80.237.0/24 maxlen: 24
194.250.211.0/24 maxlen: 24
195.101.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a2:df:46:a6:30:a6:67:1c:9e:9e:df:34:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e53fa6e5f6db2275ffb34493725878aab18b69ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:54:86:b5:79:41:58:10:86:7b:a0:15:de:
0b:5b:73:f2:42:51:72:3a:a9:1d:4c:a7:de:26:86:
41:ef:69:55:f6:ff:db:9d:89:06:23:15:0f:99:8c:
47:d2:c9:8d:3e:05:ab:68:b0:0c:90:84:21:d4:95:
c5:9e:b7:06:60:4d:df:33:67:35:da:0b:64:44:f0:
b2:39:0f:c8:93:7e:ef:4d:37:74:17:a1:a1:91:e1:
7b:bb:fc:4a:00:a5:f7:f7:98:77:f1:1d:99:8a:22:
2e:19:a6:8f:55:0f:3a:c7:d2:ec:49:73:63:a6:70:
9f:e7:7d:5c:29:b3:6e:6e:53:ff:25:0e:39:b1:48:
f1:ed:b8:37:15:fd:2c:f8:45:b6:ab:fa:8f:e1:67:
ad:36:5e:03:17:d9:ff:cd:ca:18:f1:13:3f:7b:3f:
af:fd:e2:6c:9d:61:7b:14:23:78:34:7d:43:ea:bd:
7c:44:7a:37:cc:9c:10:2b:fa:aa:08:3f:4c:6d:28:
0d:bd:c7:b3:b9:a9:55:d6:fc:78:57:9f:b0:6e:1f:
fe:64:52:94:e7:0a:c9:2f:da:b4:eb:57:c5:ce:2e:
69:41:ab:a3:f2:cb:a1:77:3d:ee:21:bd:aa:c5:c2:
5c:76:74:8c:b3:64:47:e4:b4:b3:51:9d:ac:dd:e9:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3F:A6:E5:F6:DB:22:75:FF:B3:44:93:72:58:78:AA:B1:8B:69:CA
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5T-m5fbbInX_s0STclh4qrGLaco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.237.0/24
194.250.211.0/24
195.101.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5c:c6:f1:e2:42:a0:67:05:20:96:f5:89:4e:d9:ef:10:17:
45:3f:f6:06:d3:d9:13:d6:99:82:29:57:db:54:11:0d:25:9d:
d7:21:4c:43:28:b9:68:5d:99:5f:c6:20:68:25:9f:b5:ca:dd:
82:8d:b9:f2:f1:36:34:06:40:be:00:87:5c:cb:31:27:40:c9:
e9:38:cb:d3:37:f0:b1:75:b7:52:0e:05:a7:be:f1:83:24:6a:
30:25:d6:72:0e:b6:6d:fc:cc:83:ce:09:73:d6:bb:59:b2:23:
0f:8f:13:97:39:48:2b:a5:56:72:d2:c2:62:3b:c5:93:04:d7:
db:67:eb:6b:d4:07:a0:5a:0d:b8:b2:c8:1e:73:4e:93:76:b7:
6b:00:93:99:7d:14:8c:a6:b3:2e:84:ac:a4:10:27:21:52:9a:
20:f0:d5:be:c0:2e:0d:30:bf:54:a1:27:64:70:41:b8:dd:7a:
86:da:84:71:5c:c0:8c:87:2e:d4:89:88:e2:1b:7e:b5:19:14:
8b:56:1b:75:1f:5a:35:b3:61:e8:05:c6:ca:49:4f:1b:7c:46:
9a:87:57:97:fe:35:16:02:86:45:f6:ca:3c:57:92:c6:70:2c:
9d:2a:8d:c5:a2:c8:e8:97:1f:f2:2a:97:0d:28:1b:0a:d4:f8:
e4:2a:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:32 2025 by rpki-client