Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5i1lh_A4T34CkiDQmmu8elHCbp4.roa
File: 5i1lh_A4T34CkiDQmmu8elHCbp4.roa (raw, json)
Hash identifier: 07sk5YQMTLxiaFFoW7skIp01VVH8pHukeQXMFKwIAO4=
Subject key identifier: E6:2D:65:87:F0:38:4F:7E:02:92:20:D0:9A:6B:BC:7A:51:C2:6E:9E
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59D3E4203221888B21DA64790CA00
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5i1lh_A4T34CkiDQmmu8elHCbp4.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5377
IP address blocks: 193.252.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9d:3e:42:03:22:18:88:b2:1d:a6:47:90:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e62d6587f0384f7e029220d09a6bbc7a51c26e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:07:3b:1a:6f:e6:91:2d:3c:e8:6f:dd:05:
76:83:d3:40:1b:40:c1:a4:cc:9d:a9:9c:3b:96:86:
cb:00:fa:69:1b:03:4c:4b:0d:a9:2b:0e:05:51:ec:
7a:be:91:0d:c5:d0:12:50:ab:aa:47:39:e4:40:b1:
0a:79:38:b7:9d:ed:b5:40:8f:86:3b:4b:c0:6d:16:
ab:b1:d9:66:5c:3a:eb:e0:62:40:25:09:fc:55:9e:
a7:d4:8a:2b:70:6b:f6:37:49:85:3f:04:d4:2b:81:
af:fe:75:63:55:ab:a5:63:6d:29:57:ed:05:47:98:
0b:a1:1c:2d:3e:12:e9:23:85:f7:85:6a:d3:13:91:
3a:90:73:51:b4:d0:21:f1:f6:91:77:9d:f2:44:72:
f7:db:bf:f4:65:67:87:f3:b8:76:e6:e7:d4:27:eb:
a6:a9:7e:75:fd:1c:1a:13:be:b4:c0:92:d8:38:4b:
47:eb:52:5a:81:3b:06:a9:d0:24:1b:ad:e9:38:b2:
49:51:8a:34:64:e9:86:73:cd:94:7e:0f:76:9e:22:
df:06:56:43:d2:35:28:05:24:aa:e9:cb:77:76:cf:
4a:53:28:28:22:36:05:59:a0:3e:d4:e2:70:86:d9:
e0:a7:6f:11:7e:ce:74:35:49:25:8e:ff:b5:70:7d:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:65:87:F0:38:4F:7E:02:92:20:D0:9A:6B:BC:7A:51:C2:6E:9E
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5i1lh_A4T34CkiDQmmu8elHCbp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e6:7b:0e:e0:1f:a9:6c:77:fa:a1:ca:f7:9a:07:82:0e:11:
42:7b:19:29:07:ed:ad:2d:a3:b4:66:c8:d0:32:1a:72:f0:35:
e8:c4:77:47:d8:c5:8c:f3:fe:a6:1e:97:e7:33:4c:e9:f9:dc:
04:2d:9d:76:27:44:4c:2d:ce:14:e2:af:ae:6d:5b:90:38:ed:
85:91:77:47:f5:16:58:7c:8b:c7:76:ee:c0:25:73:06:2f:7b:
d1:4a:0f:c9:ba:a3:9d:c5:31:5d:58:de:b8:af:4c:7b:b8:74:
24:c1:03:d7:de:0d:bd:84:dc:e6:41:fe:fb:4d:26:9e:e8:98:
7d:b9:e8:45:31:d4:a7:3b:d0:c7:4b:c7:50:12:14:3e:6c:28:
e5:56:84:d1:c1:d1:8e:be:6b:ff:c0:e9:6e:51:79:18:bd:fb:
16:81:c3:f8:d5:11:d6:05:46:e0:9d:52:69:b1:4f:2b:b7:12:
c5:82:4f:77:58:7e:79:26:b4:56:41:ae:78:75:3d:44:c8:0c:
cb:ac:56:8f:9c:df:1f:85:3e:82:ca:6f:fe:8a:74:9c:01:4a:
63:a2:30:e7:f1:ec:96:28:a7:58:06:79:91:f7:86:e1:fd:05:
f4:50:2a:51:ed:05:6d:1e:74:14:c6:fa:6d:5d:46:c0:aa:b8:
46:71:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:07 2025 by rpki-client