Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/1kmQygnKJuFomMWscO7_tmV5MPY.roa
File: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (raw, json)
Hash identifier: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=
Subject key identifier: D6:49:90:CA:09:CA:26:E1:68:98:C5:AC:70:EE:FF:B6:65:79:30:F6
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 0194258F5C9A1A8847AFCC589FA56DAEB4FA
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/1kmQygnKJuFomMWscO7_tmV5MPY.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58141
IP address blocks: 5.34.232.0/21 maxlen: 21
5.34.232.0/24 maxlen: 24
5.34.233.0/24 maxlen: 24
5.34.234.0/24 maxlen: 24
5.34.235.0/24 maxlen: 24
5.34.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5c:9a:1a:88:47:af:cc:58:9f:a5:6d:ae:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64990ca09ca26e16898c5ac70eeffb6657930f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:3b:d5:48:4d:ae:79:af:21:ca:d4:4d:b7:
e7:b6:32:0d:fd:61:9b:58:bd:7a:7a:4b:1b:71:28:
82:d3:0a:ec:7f:a5:63:1a:0a:46:4d:d0:0c:86:04:
e3:a5:a1:a0:6b:ce:5d:72:34:72:f2:ef:e5:45:f6:
e7:e9:a2:c5:82:6b:16:b3:51:fa:2f:21:86:4a:37:
f0:50:2a:dc:01:b6:d1:26:a5:c5:f5:0e:b4:11:f4:
55:31:04:78:9b:46:2c:5d:9b:99:ce:16:9e:b4:8c:
79:54:0e:4f:01:9f:f6:e6:5e:3c:2a:af:52:95:98:
07:ee:cd:d4:0a:46:87:60:03:57:2a:db:bb:22:2a:
cc:76:1c:25:d8:b1:58:a8:87:86:5d:4a:01:ff:44:
8c:77:df:c6:63:20:a5:a8:85:34:63:ac:92:60:ea:
c4:e1:7f:4d:60:92:62:e1:9d:38:e2:20:be:49:4d:
d7:0f:5c:36:76:67:b5:54:1f:8e:8b:4a:f2:6a:fe:
b0:55:00:0c:68:d7:61:ea:06:40:97:cc:72:bd:dc:
3f:5f:08:cd:c7:00:7d:df:cb:f1:a2:c5:a2:b1:b7:
a8:39:50:7a:26:5e:91:f0:bd:f0:6b:c4:67:64:e2:
f7:49:48:87:c0:76:d5:1e:48:9b:35:81:b8:4f:37:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:90:CA:09:CA:26:E1:68:98:C5:AC:70:EE:FF:B6:65:79:30:F6
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/1kmQygnKJuFomMWscO7_tmV5MPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.232.0/21
Signature Algorithm: sha256WithRSAEncryption
89:d8:23:ba:fa:9a:d1:4c:7f:7f:71:82:40:2f:f8:90:13:c3:
99:15:a0:8d:88:6c:a5:ad:29:38:98:9e:66:19:eb:9b:f6:f4:
5a:fb:1a:0c:38:8a:e5:f8:e0:96:b2:7d:6e:ae:f1:ae:44:e9:
d3:b2:77:ba:77:5a:12:57:3a:b4:3a:9e:8e:d7:bc:b5:b7:bc:
b1:10:39:24:a6:51:85:34:0d:51:f9:85:fa:3e:8c:00:60:bc:
f5:9a:d8:d6:68:e6:bc:57:d1:d0:99:8e:2e:4d:0a:33:75:a7:
ca:25:bc:46:2e:0b:1b:a6:5b:30:62:3d:60:1b:fd:54:bf:31:
c3:15:8e:07:b2:ce:b7:e1:fa:d2:c1:88:4b:25:90:31:ae:a6:
6c:cc:01:d2:80:66:5c:58:bd:a5:c3:f0:06:68:42:7b:cc:7c:
00:79:e8:0c:2a:40:c3:8d:a2:04:59:b5:84:3f:72:3c:eb:1c:
08:b0:a2:9d:d8:5c:e8:06:d2:36:ae:95:fc:d4:a5:84:c1:c5:
25:1c:f5:f6:05:6a:6b:72:e1:8d:5d:8e:20:8a:76:8c:38:2f:
3f:50:7d:44:2d:9f:be:c9:70:ef:49:66:fd:f3:68:78:f5:c8:
0e:e6:16:f8:b7:55:b0:5b:f3:be:c0:a4:1a:51:c7:26:e6:1b:
f5:66:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:12:50 2025 by rpki-client