Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5iQs-AEfjWaD2nccROLgiH6LXcI.roa
File: 5iQs-AEfjWaD2nccROLgiH6LXcI.roa (raw, json)
Hash identifier: ckTNrENMBhGu7OZYtWkwnIRWNZsZMkVMUjG3FOYGH98=
Subject key identifier: E6:24:2C:F8:01:1F:8D:66:83:DA:77:1C:44:E2:E0:88:7E:8B:5D:C2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143D36DA5693CAA3D1D70EBD4E6201D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5iQs-AEfjWaD2nccROLgiH6LXcI.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13649
IP address blocks: 82.153.68.0/24 maxlen: 24
82.153.71.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d3:6d:a5:69:3c:aa:3d:1d:70:eb:d4:e6:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6242cf8011f8d6683da771c44e2e0887e8b5dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:36:2f:05:2e:3a:5d:eb:5d:1b:21:ad:e6:
89:51:dc:f6:37:32:4a:e8:bf:64:bc:4c:e1:93:4e:
a5:c2:f4:07:1c:6f:40:cc:75:f1:72:61:9a:26:a2:
de:da:e5:2a:53:af:24:d2:d2:43:52:7b:f9:95:13:
b9:c0:5f:24:c5:5a:bb:86:26:fb:84:3e:79:8b:97:
3e:cf:68:33:a9:49:d3:53:96:12:95:56:8b:84:67:
81:ae:d3:a5:4c:9f:7a:28:fb:66:fb:4f:ca:80:f7:
c6:6d:81:0c:c2:9f:d5:5c:7e:31:07:47:93:5c:01:
04:5d:af:da:73:88:b2:3f:ef:f2:2d:b9:2b:4d:cb:
b3:b6:68:55:6e:29:7b:59:49:15:70:4b:75:9b:96:
1d:21:03:4a:04:90:ca:df:bc:2d:84:5b:ff:75:c4:
74:54:21:b9:e9:3d:a0:1e:4b:b9:91:52:b5:f2:cc:
58:00:10:61:49:22:d4:8e:f5:aa:7a:99:d0:aa:a7:
6c:84:97:a5:e5:c0:63:d5:19:ab:86:e1:e3:1d:74:
45:b7:1a:f2:db:ff:db:30:f2:9c:47:38:76:2a:79:
b9:43:bd:f2:05:37:58:d0:1f:ee:6f:cb:61:d2:55:
99:db:e6:00:8a:30:23:12:6d:f3:1d:77:7e:e5:36:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:2C:F8:01:1F:8D:66:83:DA:77:1C:44:E2:E0:88:7E:8B:5D:C2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5iQs-AEfjWaD2nccROLgiH6LXcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.68.0/24
82.153.71.0/24
89.213.180.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3f:0a:de:b9:bd:92:78:c5:81:68:0d:1f:64:8b:c3:dd:51:
12:99:61:6a:f4:f0:ea:28:a8:28:81:a5:59:02:ee:e3:8d:a5:
f9:5a:23:e8:5e:46:a8:ea:59:bb:d0:fd:62:fb:a9:c9:6b:87:
bb:95:38:fe:77:77:a1:0a:ae:d1:b2:a4:25:69:67:72:70:75:
b6:28:8e:1d:31:fe:22:e0:67:74:b0:6e:d2:2c:71:67:12:88:
fa:df:bc:1c:bc:1f:f9:6c:e3:76:94:9d:db:1f:99:e2:29:14:
45:fe:15:83:f5:ea:8f:3b:53:38:a6:a4:da:ed:2d:05:c7:6f:
ea:94:1d:27:ca:46:9d:80:4b:d4:36:f4:d9:a1:e8:a9:6f:c7:
3c:1c:10:25:6a:f7:95:7c:31:fd:fd:a8:37:15:90:82:c4:e1:
3a:b0:a5:26:2e:9e:53:5d:92:3b:09:f0:c8:a4:8c:ef:37:6a:
52:7f:82:05:11:81:0e:7c:48:f4:d7:73:3c:06:ff:75:d2:dd:
c0:a6:6a:64:f7:79:5b:aa:ac:8b:76:d3:69:e5:c8:07:c5:60:
22:27:7a:0e:6f:5b:95:2a:32:fe:5c:bf:00:e7:3f:73:6c:7a:
cf:bb:3e:49:7d:df:a1:74:5e:bb:74:35:bb:e4:5e:ca:3e:b8:
42:dc:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:11 2025 by rpki-client