Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa
File: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (raw, json)
Hash identifier: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=
Subject key identifier: 70:97:B5:4B:55:7A:00:93:E2:F5:C0:1B:E0:DC:CD:C7:C9:58:C2:C3
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 019424B3AB76F6034626AB845D0684140E0B
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42855
IP address blocks: 84.54.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ab:76:f6:03:46:26:ab:84:5d:06:84:14:0e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7097b54b557a0093e2f5c01be0dccdc7c958c2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:e4:f5:66:7d:4a:1c:2b:e1:2c:38:04:ea:
e5:b6:ff:ba:db:ed:32:d6:05:12:b5:89:fb:29:6c:
4c:ca:f9:bb:f8:36:18:ce:cc:6f:40:42:38:6b:d9:
87:2f:9e:93:18:ce:b4:b7:8c:58:39:d6:7e:e0:67:
69:0e:9c:5f:6b:f3:eb:f6:54:09:dc:ff:34:47:49:
78:6a:49:f0:d0:3b:5f:70:4d:04:5e:7d:b3:25:72:
95:aa:34:2e:ad:ef:41:7f:af:21:d3:9c:73:e6:9a:
98:20:3f:63:05:61:33:a9:fe:d4:a8:36:23:f7:db:
12:9b:b8:cb:2e:a5:bc:2c:a5:2e:f4:d9:d8:fe:2c:
5e:26:2f:46:3a:3f:d0:0c:3b:51:04:eb:40:3f:ed:
43:4f:42:93:05:c4:40:9a:35:37:04:8b:a6:96:df:
42:12:1d:a1:79:50:aa:99:37:e2:e5:21:b8:cd:5a:
32:df:6d:e3:a5:1c:0d:fd:cd:fe:f5:19:54:5e:86:
cf:b6:43:41:b0:6e:46:24:8e:1e:2e:8f:91:69:25:
85:99:c8:6f:a4:aa:54:28:0a:49:48:9e:fc:b1:8b:
7f:6e:10:19:91:52:b4:76:f1:4e:6d:31:b3:00:0c:
15:d2:a4:72:2c:dd:22:d0:27:8b:f4:92:ac:50:31:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:B5:4B:55:7A:00:93:E2:F5:C0:1B:E0:DC:CD:C7:C9:58:C2:C3
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:19:d4:ac:0f:f4:a1:df:ed:df:d8:12:9b:46:00:10:79:97:
aa:20:80:03:bf:96:1b:12:1c:f8:d5:98:97:10:12:2e:73:b0:
cb:3d:2e:3a:c1:40:40:b7:e9:6f:3f:aa:2f:32:8d:fa:12:2a:
9e:25:71:45:1d:34:67:81:0a:84:60:92:85:8f:a3:db:40:51:
ea:ee:af:a2:99:a5:24:4f:1f:82:23:53:8d:41:1e:c2:96:76:
f5:fb:54:e7:00:ba:25:b4:44:c5:69:bc:9e:c0:9e:07:ab:d6:
a6:c5:53:8b:ba:c3:10:f4:22:49:80:2d:a6:43:78:ec:93:6c:
d1:75:0c:03:61:c8:4a:5e:95:90:25:10:07:5c:8d:b8:d3:e9:
f5:2f:0d:85:e0:c5:ae:0a:85:11:f7:7a:80:1f:d6:e5:f6:0c:
da:ad:50:8c:e3:f6:ce:44:03:ae:7c:55:52:55:e0:23:69:03:
d4:31:6b:d0:16:b9:13:60:ae:10:c9:c1:12:92:88:d2:da:61:
6e:44:fb:97:78:d2:5a:79:f2:f4:f5:53:ca:a1:6b:13:79:53:
4a:3a:03:9c:8a:41:7b:68:50:ea:11:dd:94:73:74:e3:78:15:
55:51:f6:59:81:82:36:36:e4:0d:66:65:5c:02:f9:fe:67:70:
b7:5c:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:16:58 2025 by rpki-client