Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/5SSOCLgHzcxdzYdGNpYRPqovl-A.roa
File: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (raw, json)
Hash identifier: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=
Subject key identifier: E5:24:8E:08:B8:07:CD:CC:5D:CD:87:46:36:96:11:3E:AA:2F:97:E0
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019423D7F4D4FC32C320793DE34E663FDDBA
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/5SSOCLgHzcxdzYdGNpYRPqovl-A.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8812
IP address blocks: 51.18.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f4:d4:fc:32:c3:20:79:3d:e3:4e:66:3f:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5248e08b807cdcc5dcd87463696113eaa2f97e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:18:63:93:17:ee:97:86:ec:88:f6:99:f0:
15:c2:f0:fa:b8:3b:00:1a:bc:69:1e:0f:29:1c:21:
d4:ad:50:82:47:c8:77:e5:7e:50:9b:12:a2:80:a0:
14:04:d8:0a:c1:a9:8e:db:10:f1:c1:78:28:bd:42:
ce:3c:71:5b:87:7b:c5:31:03:c5:a2:00:87:3e:67:
8e:51:81:06:ea:f5:7b:c3:75:87:87:b9:bd:14:eb:
4d:db:92:f6:40:2d:ea:5c:68:94:41:bd:bc:56:b8:
76:a6:de:b3:3b:b0:3e:b3:5a:7c:5a:6f:d0:31:af:
6b:3e:1c:39:c3:8f:0c:27:41:e2:1c:52:77:0f:91:
ff:1d:47:f2:59:1a:1a:3d:65:a6:9c:89:f2:50:16:
05:96:e6:d5:ac:22:66:71:df:80:e3:82:13:93:bc:
ad:22:9d:62:84:33:9f:65:40:d8:84:bf:e8:04:88:
95:1f:47:66:46:32:68:a3:3d:44:d0:e0:44:30:a2:
4c:0a:08:fe:99:5a:7c:54:8a:54:ce:1a:16:ee:e5:
4e:25:68:5f:0c:b9:8c:5b:b3:e9:c0:e7:ed:9a:23:
03:4f:93:c4:63:09:30:c6:05:d5:54:bf:1c:d2:54:
3b:0e:0f:44:a7:98:e4:28:b8:53:a9:bd:d8:b4:38:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:8E:08:B8:07:CD:CC:5D:CD:87:46:36:96:11:3E:AA:2F:97:E0
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/5SSOCLgHzcxdzYdGNpYRPqovl-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:91:a8:17:b7:28:e9:70:2a:30:35:e5:b9:8d:d8:59:27:78:
35:bb:41:16:99:b3:88:34:5e:cb:4a:76:d0:fc:0a:95:b1:67:
b1:6b:d7:3d:87:07:02:df:b1:f9:5a:33:aa:28:17:51:8b:4d:
76:3d:25:7d:b5:8c:5e:e6:22:2b:67:02:b3:3c:20:46:27:83:
c4:dd:42:e7:97:e6:83:de:fd:9a:09:3e:0d:5c:22:c3:2a:55:
4d:48:cb:96:bf:99:2b:e1:82:66:30:91:79:36:8c:66:72:11:
7d:a8:c7:2e:c2:d7:bf:78:67:d0:79:05:12:96:3d:be:f4:6d:
15:75:b3:ae:22:05:cd:3e:fa:e7:93:10:14:bd:d1:7d:9c:ce:
48:04:ee:84:72:a4:d8:70:cd:8b:ed:d2:55:b2:00:04:17:b0:
b0:31:ee:da:6d:15:79:2b:0f:73:01:57:d0:1d:0e:79:4d:17:
d8:fe:ca:80:73:6d:9d:26:ab:e7:e6:24:ac:62:96:aa:8e:76:
cb:51:bc:ff:c4:f2:33:20:0b:c7:8e:79:c5:06:ae:9e:44:03:
8f:ea:2f:5a:40:b7:7f:17:31:71:6c:ea:b7:40:c1:44:32:9e:
ec:41:05:5b:38:13:f9:1e:87:3d:f9:49:02:1f:8e:36:72:3a:
46:f7:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:09:40 2025 by rpki-client