Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa
File: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (raw, json)
Hash identifier: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=
Subject key identifier: E4:46:BF:A0:56:3C:56:16:B3:93:6D:9D:B6:98:01:6B:98:AA:A0:77
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 019425FC5EB9891BE5224DFB14158C125250
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa
Signing time: Thu 02 Jan 2025 07:48:03 +0000
ROA not before: Thu 02 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60051
IP address blocks: 185.141.8.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5e:b9:89:1b:e5:22:4d:fb:14:15:8c:12:52:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e446bfa0563c5616b3936d9db698016b98aaa077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:31:fb:10:db:ed:ce:cf:28:10:6d:2e:b1:
8b:f7:95:4e:e7:99:ca:8f:67:93:04:e7:82:e7:cd:
04:b0:99:2f:2c:7f:1c:f8:1f:03:24:eb:b6:63:17:
6e:2c:ce:09:9e:63:94:55:9b:1d:ef:a1:a4:dc:16:
56:0d:2b:c6:0d:fa:07:37:38:f5:af:fb:44:3f:fd:
f7:30:9c:5e:24:ab:6f:4e:1b:d3:29:28:47:28:b2:
4f:0c:1d:10:7d:86:ef:b4:fa:78:b2:e6:8a:bb:d3:
c4:65:9c:3a:0a:e1:49:0d:27:b3:5c:90:bf:0d:3b:
cd:b6:93:99:d8:75:2e:7b:ab:87:81:11:08:75:37:
97:5c:21:5a:e1:5b:38:ef:45:d2:23:0b:04:2d:a7:
d5:a6:73:a4:2f:e4:d7:8d:25:24:50:d2:df:1f:b5:
9f:54:f2:0f:6b:7a:23:df:9b:9e:73:22:d0:6d:ff:
fd:85:ab:1f:ad:b6:51:29:61:18:3f:8a:7b:6c:e3:
6e:a5:3a:12:c9:6f:b9:60:e5:91:a0:ce:dd:91:62:
a7:8d:da:10:84:c3:b8:d0:42:7b:17:c9:99:56:3c:
5a:c6:30:ef:88:9c:f0:ee:ea:53:33:82:04:80:99:
87:59:bc:bf:27:40:da:75:2e:1c:f5:de:d5:86:10:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:BF:A0:56:3C:56:16:B3:93:6D:9D:B6:98:01:6B:98:AA:A0:77
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.8.0-185.141.10.255
Signature Algorithm: sha256WithRSAEncryption
94:56:5e:93:3f:22:20:1a:23:4b:58:70:87:29:a7:fa:54:3b:
ab:7b:59:c4:93:04:a7:c7:55:78:f3:c6:45:d3:d4:19:c8:c8:
42:0e:a4:6a:d5:d8:cb:69:6c:67:43:89:c6:ad:5e:34:24:dc:
d2:68:9c:72:6d:62:4f:40:4a:65:ce:db:c9:53:47:a5:fa:d5:
97:74:c2:b9:d5:1f:e0:2e:20:5f:2e:e7:8a:be:6d:20:e8:c7:
13:49:63:12:cb:4c:c6:2e:b3:ef:16:91:e2:cc:6c:de:d6:eb:
9f:41:fb:98:31:c8:10:54:02:15:35:f4:f9:ea:2e:f5:a6:e2:
96:48:a2:5e:55:3f:73:57:ba:f1:63:4d:2d:b6:3a:f6:88:b9:
35:ec:a9:3e:cb:13:0b:f5:82:87:4b:d8:1f:74:28:d6:01:68:
c2:63:49:eb:6e:42:b0:86:ee:71:e4:a4:8b:72:60:7a:ba:59:
3b:c7:64:73:91:17:83:fe:ce:e1:02:2f:53:33:21:62:3f:06:
b3:4d:98:61:bf:bf:75:b4:a3:6c:a0:fd:55:cc:37:f1:23:87:
ec:9a:0c:9b:85:bb:2b:95:23:34:fa:a5:31:e7:db:74:65:44:
b2:d1:11:eb:84:76:61:c0:11:03:25:f5:56:10:11:c5:46:8d:
30:fa:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:06:22 2025 by rpki-client