Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5w999aY5B-VWAa6ftaNr618pG0E.roa
File: 5w999aY5B-VWAa6ftaNr618pG0E.roa (raw, json)
Hash identifier: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=
Subject key identifier: E7:0F:7D:F5:A6:39:07:E5:56:01:AE:9F:B5:A3:6B:EB:5F:29:1B:41
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D6557FE4F417078EA9E454C225DDA
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5w999aY5B-VWAa6ftaNr618pG0E.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200088
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:65:57:fe:4f:41:70:78:ea:9e:45:4c:22:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e70f7df5a63907e55601ae9fb5a36beb5f291b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:d5:cd:00:0a:c3:3f:a7:17:4e:75:98:52:
16:3a:c1:36:b5:b0:70:0e:18:5e:5f:c5:7a:20:57:
42:62:12:77:4f:7f:a2:1c:95:6b:b4:ff:b0:f2:c1:
27:b5:9c:a9:59:b2:6c:ea:c4:34:2e:e8:24:46:23:
db:14:63:b7:f1:cb:d8:42:b8:d2:a0:1b:63:fa:d0:
53:97:30:9d:a0:fb:e1:68:e6:80:5b:5c:8e:fd:0b:
0f:b6:a1:27:ed:c3:c4:2d:49:68:d5:6c:19:08:3f:
02:3b:28:8b:92:11:60:38:51:6d:ec:74:d9:d3:92:
14:80:0f:4c:fb:f4:66:0c:d2:6b:19:78:ca:fa:4e:
dc:bd:9f:42:36:14:c5:47:71:2a:cf:37:73:ff:5a:
75:56:71:de:16:da:32:20:3b:fe:14:fe:39:d9:a1:
0e:b8:ce:16:b0:ed:26:40:a1:f4:fd:07:0f:4a:e5:
01:fd:0b:c3:5c:27:b2:66:17:37:76:44:f0:73:8f:
d5:e8:a1:c7:cb:61:23:41:81:7c:98:be:cf:af:9b:
f1:50:c0:3b:44:a4:76:1f:85:80:7d:c3:4a:cc:55:
e9:3f:32:87:8f:fb:38:d4:1c:b5:3a:34:46:43:e7:
a1:5c:c5:b6:23:cd:97:67:9c:a5:fa:c9:e6:e7:98:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:7D:F5:A6:39:07:E5:56:01:AE:9F:B5:A3:6B:EB:5F:29:1B:41
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5w999aY5B-VWAa6ftaNr618pG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
18:6d:2a:d5:f8:88:b0:c7:63:1e:af:b6:1f:a3:f2:c5:d7:d8:
98:34:1a:29:3e:9e:53:50:55:f3:fa:65:dc:7c:1a:f2:86:fd:
72:cd:63:c7:08:79:3c:98:20:f8:96:8b:3a:10:79:09:da:ae:
b6:ce:5b:63:26:e8:a5:4e:a7:d8:c3:34:95:85:7a:c8:54:9e:
8d:01:8e:e5:0d:aa:b2:71:4e:fc:51:fb:4c:5e:e7:5f:fc:62:
41:dc:07:9e:dc:4d:e5:49:95:78:7b:c4:18:94:c5:b2:99:22:
ad:2d:3b:4e:b1:8d:6d:63:3c:04:22:4c:2e:f5:92:2b:31:d3:
c9:74:07:ed:5d:80:0f:92:4f:4c:08:e4:f6:d0:02:0d:41:8b:
8c:73:77:4d:18:8a:72:d5:90:d8:11:d0:32:e4:04:55:22:2c:
0f:ef:c5:74:0f:9d:a6:9c:2d:94:3e:6d:4f:9e:2d:3b:c4:bc:
90:e0:fd:bb:22:17:e7:d0:0e:96:60:33:d2:d2:29:e7:73:f1:
f1:3c:06:d6:d1:a1:8d:a4:df:35:6d:43:62:90:8e:e7:ff:2b:
95:b4:b5:96:d4:7c:7a:4f:e0:27:b4:43:a1:f9:e2:eb:1a:59:
62:4e:b6:5e:f2:06:ea:35:8c:36:87:13:ea:b8:7d:d2:da:3f:
0b:34:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:35 2025 by rpki-client