Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/V5Ea_MOjcLpHVqvLmTw95SkN7Ks.roa
File: V5Ea_MOjcLpHVqvLmTw95SkN7Ks.roa (raw, json)
Hash identifier: 63GkAbV3jgXFnu6FUA8oBV00tbpo0nbUcnNRMAuPFWE=
Subject key identifier: 57:91:1A:FC:C3:A3:70:BA:47:56:AB:CB:99:3C:3D:E5:29:0D:EC:AB
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019422FBB2E9E0B6BD714F18927B450A9CFE
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/V5Ea_MOjcLpHVqvLmTw95SkN7Ks.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215272
IP address blocks: 5.44.44.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:e9:e0:b6:bd:71:4f:18:92:7b:45:0a:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57911afcc3a370ba4756abcb993c3de5290decab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:39:c2:44:58:c3:c5:08:69:9b:70:aa:e7:
cd:0c:81:47:81:51:f8:c7:d5:47:8a:b4:3f:11:27:
72:10:02:1f:be:3e:9a:e4:43:d6:89:3e:99:5a:6a:
20:b2:f4:67:e1:ba:27:ee:e6:04:c9:d0:11:90:af:
e5:cc:76:c8:e2:da:07:2c:29:23:88:7c:4c:8f:4d:
9e:a8:7c:95:1c:03:8b:72:44:a5:07:df:b2:27:e3:
dc:37:8e:6b:50:1a:d0:5a:4b:fa:77:45:5b:7e:bd:
98:a9:e2:30:1a:9d:38:a6:0c:d2:c9:22:9b:30:53:
aa:2a:01:63:34:74:3b:96:aa:2e:08:bc:15:02:2c:
9b:6f:2f:2a:0e:dd:e6:83:64:d4:12:c4:b5:82:50:
24:28:c1:71:29:80:1a:12:c3:90:14:66:0c:c1:52:
3d:5d:c2:50:70:0f:87:b1:0a:bb:a6:ea:1b:12:c1:
1a:0b:70:d7:b2:28:c3:7d:74:26:9b:0e:c7:25:14:
e2:08:8c:83:51:31:e2:53:21:fa:dd:65:f5:1f:3b:
66:16:fa:b5:35:08:7d:15:b5:0e:80:fe:b9:eb:14:
16:a5:1e:67:7b:bc:ed:97:ab:9b:d5:93:2b:7c:30:
d6:e6:3e:73:74:0f:e3:cf:e2:ac:25:a4:9a:a1:69:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:1A:FC:C3:A3:70:BA:47:56:AB:CB:99:3C:3D:E5:29:0D:EC:AB
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/V5Ea_MOjcLpHVqvLmTw95SkN7Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.129.186.0/24
185.244.50.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f2:24:58:74:8b:10:e6:0b:90:5c:39:74:e7:9c:6b:08:4c:
0e:cd:28:ad:30:57:7c:4c:11:84:b9:60:cb:26:a0:08:1b:ee:
af:c0:a5:36:f6:de:c8:79:14:84:8a:0b:0d:11:b6:4d:a9:9b:
62:5b:09:19:ef:cb:39:95:37:4c:44:3b:30:b4:1a:86:2f:73:
26:81:17:72:73:02:13:bd:96:9b:3b:29:85:39:c6:53:ca:48:
23:aa:b8:a0:25:62:67:50:d2:df:13:f3:c4:74:21:15:a3:c6:
8b:83:79:cd:43:89:16:01:70:2e:6d:17:5b:bc:2d:da:a7:e4:
ab:2c:8a:cf:5b:00:3f:aa:b1:a0:fa:88:78:01:0d:ee:b0:23:
6a:0c:5f:e4:5d:d0:97:1f:7f:8c:bd:18:db:fa:41:94:5f:cd:
cd:95:12:15:d5:06:67:38:75:cf:b3:16:90:76:d2:cd:bd:1b:
4e:a0:19:b1:e4:8a:0c:45:ab:a9:ca:d4:c0:2b:8a:dd:2b:50:
1a:ec:54:79:7c:80:aa:c1:88:e2:7b:91:60:db:4e:ce:20:45:
aa:51:25:4b:e8:53:e5:2d:85:a7:0e:fb:af:38:c8:08:4a:69:
62:1d:a4:cf:21:36:90:69:a0:cf:95:44:f1:61:3d:85:a4:fd:
15:fa:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:29:53 2025 by rpki-client