Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa
File: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (raw, json)
Hash identifier: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=
Subject key identifier: E6:80:F6:1C:DA:A0:CC:6F:EA:39:C1:7F:DB:51:BD:28:BC:B9:7B:66
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BE84BA2FA97C3D98DBA00E8559B16
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 158
IP address blocks: 194.237.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:4b:a2:fa:97:c3:d9:8d:ba:00:e8:55:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e680f61cdaa0cc6fea39c17fdb51bd28bcb97b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:ba:eb:96:98:43:44:54:cc:9e:a6:20:79:
15:64:e7:1b:2d:58:3d:43:b6:50:59:6d:69:42:95:
20:84:69:48:44:48:40:ca:22:33:89:8a:4a:78:a6:
8c:d2:a8:e7:07:a8:66:ae:92:c7:a4:73:fd:34:d1:
16:43:7f:50:7b:90:29:47:ca:01:28:ae:97:8c:b5:
3e:ad:7d:a8:6b:af:f9:5a:67:80:de:7d:93:cc:60:
27:75:f7:bc:8f:18:1e:14:54:fb:9a:c9:88:c9:cf:
63:21:de:ec:a4:c0:7f:f3:69:7a:77:49:89:aa:f8:
5b:7b:75:71:5a:02:64:dc:a9:e1:99:db:8f:2c:c4:
cd:bd:67:2f:64:3b:bc:ac:0a:3d:0b:57:1c:f2:0e:
2b:af:e2:3d:ab:01:05:e3:84:aa:94:8a:37:b8:57:
a1:4f:da:c3:ca:46:6d:a0:b2:f4:ac:7e:0d:21:d9:
5e:5a:65:d9:d5:d8:a6:bb:7b:82:d8:5d:cf:64:1d:
d8:1d:d2:27:ec:4c:0b:ea:2c:f4:19:10:33:40:2d:
2a:92:ca:d4:5a:fd:0a:21:4f:a9:e2:c9:d8:05:6a:
35:55:70:ed:3e:d9:53:3a:16:ed:3b:78:ba:b4:ab:
5e:b9:d6:8f:98:bb:a7:26:cb:35:ed:f5:c3:4e:85:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:F6:1C:DA:A0:CC:6F:EA:39:C1:7F:DB:51:BD:28:BC:B9:7B:66
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ef:a0:4a:b5:1d:c9:dc:a3:ca:02:5c:28:41:2f:66:da:e8:
1c:96:c6:7b:be:36:6f:3e:7a:35:5e:fb:5b:f2:c7:74:20:0b:
d9:13:81:4c:e4:d6:01:e6:5f:92:ae:21:de:1a:50:0c:9d:9a:
d4:e9:67:fb:07:50:93:64:b0:df:59:9f:57:5c:5b:04:d5:08:
f0:3f:6d:0b:29:e8:d3:14:9d:5b:d4:e7:1e:e7:82:7f:4b:a2:
f0:da:5b:38:39:00:55:61:44:cb:7d:83:f1:91:c3:01:2d:d2:
2f:3b:0e:cf:fa:1b:69:bf:23:0e:b5:b1:cb:e8:dd:9b:69:bb:
ef:76:b0:bc:06:42:e6:9d:69:ac:e5:75:96:d1:0e:90:14:33:
64:ed:ea:1b:d4:ab:b5:a3:e1:96:15:ca:f1:78:d8:db:b2:f9:
e5:ea:21:3c:72:51:bb:ae:70:e8:64:db:a2:ab:f0:a0:c1:ea:
46:00:db:56:74:2a:63:fd:a2:49:b3:41:6d:b8:d7:45:ea:c8:
31:af:a5:ec:f8:23:35:1b:b6:06:41:be:4e:9b:4c:96:47:ee:
fe:c8:26:f4:41:88:e8:03:46:3f:dd:0e:fc:eb:8e:e4:cf:99:
23:0e:0a:20:83:8e:0c:f6:97:1a:6e:ba:7d:08:23:8c:57:8b:
22:2f:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:29 2025 by rpki-client