Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5YqClDe8SHpK1wvqXT8TcDUjBy4.roa
File: 5YqClDe8SHpK1wvqXT8TcDUjBy4.roa (raw, json)
Hash identifier: zT749N6R3tKtpJbaM1+04im8HKIyZTFkcGm4xFYNAXs=
Subject key identifier: E5:8A:82:94:37:BC:48:7A:4A:D7:0B:EA:5D:3F:13:70:35:23:07:2E
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD5E3AC1DA680FE4D1D6B77DCE4980
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5YqClDe8SHpK1wvqXT8TcDUjBy4.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61206
IP address blocks: 194.190.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:3a:c1:da:68:0f:e4:d1:d6:b7:7d:ce:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58a829437bc487a4ad70bea5d3f13703523072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:e4:41:ec:fc:8a:90:fb:ef:e2:7e:82:30:
a7:e9:b0:92:90:fc:4a:61:65:cd:23:fa:35:70:38:
ff:dc:67:4b:90:a5:71:b5:3a:65:95:2d:90:b6:72:
4f:f0:47:df:29:ef:7d:d7:d4:87:5e:d8:c1:27:de:
22:84:a3:0f:f6:71:0d:84:94:12:74:6c:c4:2e:48:
2b:c7:05:0e:f0:f4:09:df:0f:69:f6:98:80:73:0f:
3f:57:e8:8b:fc:b2:33:38:c3:26:4c:ee:fc:ac:13:
1b:ae:5a:fc:25:35:bc:be:80:53:21:92:5d:f6:f3:
91:bd:7b:ce:b8:88:e2:df:1f:81:1c:bd:38:ae:d0:
23:d1:85:2a:37:34:ab:60:37:ff:70:0b:75:f8:40:
d6:87:84:9b:72:f4:41:6b:d9:3f:5b:fa:06:3c:ff:
c6:f7:61:d7:cb:34:f2:e8:19:5c:4d:e0:bd:16:1a:
37:41:ee:7b:b8:49:13:05:9f:6a:3e:5d:76:9b:73:
ac:72:a1:47:2c:2a:20:c8:83:fa:7f:e8:00:05:ca:
42:e3:fd:86:69:5f:cf:16:4b:29:b0:d3:5e:9c:46:
10:90:cf:9b:ba:de:19:9f:1a:c0:78:d2:fe:45:88:
91:e2:9c:ed:43:05:0a:52:d7:42:70:0d:3b:03:fe:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:82:94:37:BC:48:7A:4A:D7:0B:EA:5D:3F:13:70:35:23:07:2E
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5YqClDe8SHpK1wvqXT8TcDUjBy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.74.0/23
Signature Algorithm: sha256WithRSAEncryption
17:6e:15:9e:3d:15:6a:c2:b3:05:e9:70:61:1f:9f:de:55:90:
bc:b4:29:4d:64:8a:c8:5d:2e:98:0a:0f:36:90:27:7f:40:c3:
54:cb:e5:bc:16:fd:0c:c1:db:7f:24:32:57:0b:cb:d4:81:c5:
93:a8:16:83:ba:d6:ff:9f:b7:36:00:c9:de:eb:2e:79:a0:c0:
d3:f8:9a:04:69:1a:16:9d:0e:d5:1f:a6:67:a9:d1:24:1b:d6:
2c:a2:7c:4f:01:18:6a:14:1c:d9:7c:2c:af:65:96:3b:1d:8e:
13:8b:23:76:83:5d:d3:ed:cb:77:ae:fd:ea:a5:67:b9:36:9a:
5c:ee:35:00:0f:b6:73:72:9d:5c:85:68:11:03:d9:b8:17:8e:
db:a8:32:b4:fa:18:28:99:b7:77:90:90:f3:35:7c:d5:7d:14:
12:a7:eb:f2:91:00:75:2a:3a:01:90:37:6e:56:c6:25:81:40:
b8:fe:f9:a6:f1:06:72:1b:99:a5:21:97:f9:ae:f4:ca:fa:a9:
e1:6b:b4:26:1e:6c:64:70:63:8f:0f:ef:4d:87:84:2d:a3:e9:
2d:15:96:fb:84:b2:06:9e:d2:c8:86:51:00:16:fd:4a:b8:1b:
ae:39:04:1b:4d:46:0c:cb:f3:5a:23:8e:4e:73:70:4c:f0:16:
a9:f4:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:15 2025 by rpki-client