Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa
File: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (raw, json)
Hash identifier: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=
Subject key identifier: E4:97:F9:01:24:C3:F2:39:5B:9B:69:0B:01:11:E0:41:DD:94:86:98
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 01942747A085BEE43C767D66F56BA04502F0
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 2001:67c:bd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a0:85:be:e4:3c:76:7d:66:f5:6b:a0:45:02:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e497f90124c3f2395b9b690b0111e041dd948698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:3c:0e:4a:fc:35:c4:dc:7e:af:eb:8f:4a:
ed:8d:65:76:10:0c:6c:b2:fe:8b:bb:66:27:ea:37:
eb:e5:e9:d7:03:cc:bf:0d:62:00:35:d0:93:77:56:
9c:74:71:99:0d:29:bf:9b:42:e8:7b:90:ce:50:c1:
89:a4:06:b0:d3:d5:3c:70:30:bd:1f:b7:24:c0:7b:
b9:fd:4e:92:af:5d:cf:90:36:3b:15:77:88:4c:e6:
11:7c:66:95:3a:98:60:fd:37:b1:03:f7:b1:e5:22:
1b:a8:9a:d5:57:95:cc:4a:30:e7:c8:21:93:ef:2a:
cf:3c:c8:1d:ad:94:06:8e:13:3f:22:2c:0d:f3:fd:
b3:81:58:87:d8:c5:be:b9:46:6d:28:8f:79:54:5c:
fe:88:3e:aa:aa:47:2c:4b:0d:e7:3e:09:84:fe:af:
9f:68:23:73:e0:3f:69:9d:3e:11:e2:26:24:d0:3e:
be:c6:af:54:01:79:d6:9b:f4:d1:6a:29:83:58:02:
19:eb:9d:c6:98:48:7f:ad:65:dd:40:93:84:74:73:
0f:4d:34:d4:4d:25:17:89:55:b8:cf:cc:bf:58:e8:
89:c0:c0:55:75:d1:a0:b0:01:73:ac:c5:62:56:b3:
8c:cb:40:d3:81:1d:c0:a2:aa:e6:ee:12:a3:ac:1f:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:F9:01:24:C3:F2:39:5B:9B:69:0B:01:11:E0:41:DD:94:86:98
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bd4::/48
Signature Algorithm: sha256WithRSAEncryption
57:67:91:d7:7b:cc:b9:56:26:da:b8:e0:64:0a:65:34:65:fc:
c2:17:ee:9a:80:5f:00:61:e5:98:d4:af:ea:4f:73:ca:9a:c7:
f7:83:27:61:d6:8c:e5:88:3c:7d:5c:e9:73:b5:7c:6c:8a:77:
5c:33:7f:bd:9f:90:5c:4a:7a:a9:30:9d:f5:aa:a4:ed:4a:ec:
52:56:45:73:41:10:cd:37:ec:2a:15:74:0c:14:2e:01:49:c9:
a9:0c:78:91:5a:7b:28:c2:e3:2e:fd:64:4f:41:35:76:68:95:
22:0c:fb:39:61:72:40:8c:67:d8:30:d3:02:1d:78:85:3c:95:
43:ba:e9:d0:7e:d8:95:51:31:41:39:20:ad:9a:4c:51:92:76:
b9:95:ac:a2:26:fd:68:aa:12:ed:70:40:53:6c:b3:81:6a:32:
e2:63:45:42:a9:27:54:9b:b9:b0:59:ab:cd:3d:bc:1c:cf:02:
5a:ba:05:b1:d0:c8:a1:6b:dc:5f:c5:c4:62:a8:57:a2:76:7a:
12:8b:5b:50:9e:ce:45:66:67:e9:d9:85:31:03:81:c6:e3:f2:
f7:44:67:66:44:53:27:dc:f0:05:7a:9b:10:24:ad:bb:8e:a1:
82:17:4c:1c:74:c2:f5:9f:33:2a:72:33:f5:14:a9:15:d0:d4:
34:5d:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:44:01 2025 by rpki-client