Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xsu0Y3uzqTy-1RyisKqfwci5WA.roa
File: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (raw, json)
Hash identifier: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=
Subject key identifier: E7:1B:2E:D1:8D:EE:CE:A4:F2:FB:54:72:8A:C2:AA:7F:07:22:E5:60
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC2E2B2DBD98DC3F76D175AC9EE41
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xsu0Y3uzqTy-1RyisKqfwci5WA.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8971
IP address blocks: 193.80.22.0/24 maxlen: 24
193.80.42.0/24 maxlen: 24
193.81.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c2:e2:b2:db:d9:8d:c3:f7:6d:17:5a:c9:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e71b2ed18deecea4f2fb54728ac2aa7f0722e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:55:83:e4:26:74:97:0b:3b:c9:98:93:1b:
f7:27:81:6e:77:e0:62:7b:e5:ec:e1:fa:d4:2e:cc:
1d:97:6a:90:f8:5a:b0:8f:dd:12:58:7c:8e:f3:43:
88:1f:cb:9c:ef:87:ac:f2:1e:f8:5d:7b:36:c4:e5:
45:ef:1d:f4:f1:5a:0b:cc:7b:b5:3f:af:d3:8b:10:
0d:16:1e:e3:8f:f7:18:45:a5:a9:fa:dc:d2:87:34:
0a:d9:7b:54:d3:43:f2:15:bd:c6:9f:3e:66:03:54:
e1:0d:fb:af:e6:f2:4d:cf:cf:79:1f:c2:fe:7e:54:
ec:35:e7:14:c6:61:de:0a:21:8a:74:42:fa:aa:06:
4b:f5:b7:2e:25:3a:7e:c7:cb:34:3c:8a:28:7a:b1:
c3:a6:59:13:e4:91:7d:99:3a:af:9b:da:04:a9:eb:
81:38:65:2c:b7:26:8a:4a:4b:d9:36:d4:60:e2:8a:
89:6c:56:a8:32:b8:31:61:c8:02:cc:77:50:1a:e0:
53:10:a1:5b:c2:9e:30:69:dd:dc:1b:8c:f2:5d:ff:
58:c9:f1:a0:16:5f:72:2c:04:7b:34:bb:77:ad:2f:
8f:12:0a:29:5c:08:fa:82:1a:1e:38:f1:59:09:ca:
b0:71:8a:fb:84:50:79:e0:03:a8:00:aa:ce:d3:a5:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:2E:D1:8D:EE:CE:A4:F2:FB:54:72:8A:C2:AA:7F:07:22:E5:60
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/5xsu0Y3uzqTy-1RyisKqfwci5WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.22.0/24
193.80.42.0/24
193.81.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:00:29:63:a6:d4:90:db:63:87:74:ef:7f:fc:68:01:65:9e:
1d:5e:81:55:25:6f:69:08:d5:42:47:07:f1:e8:98:9a:48:2c:
fe:08:84:da:e2:fe:6d:13:91:e4:dd:d5:2a:1c:93:c2:66:b0:
58:0f:4c:28:70:4a:ea:f1:98:3e:6a:ae:2d:bb:48:fc:ab:44:
bb:66:0a:1d:9a:f4:b9:fe:e3:8f:10:8a:6c:d1:8a:79:bb:e8:
ea:bc:b4:2c:05:4c:11:96:3e:5d:cb:b5:84:76:ae:a6:56:1e:
b2:03:0c:98:fd:9a:4d:35:85:25:a0:de:ed:ea:a6:bc:33:ed:
9d:55:ee:24:60:89:d0:24:9f:1e:20:7e:33:a8:50:5b:52:49:
83:6c:c6:64:cd:31:ca:e4:08:53:71:4e:e6:6b:c1:bd:ad:5b:
dc:ce:03:9b:82:fa:09:40:cd:6b:f1:84:f1:ec:7c:85:52:33:
cc:6f:d3:55:6d:00:60:90:ba:f3:72:fe:6a:68:84:76:3b:a9:
af:04:61:d4:06:f8:c1:b6:1f:6c:42:14:35:d4:79:bc:4e:6c:
64:1c:e7:c9:9b:06:4f:19:ef:39:39:20:aa:2a:1d:55:cc:ea:
c0:03:14:81:db:8c:5e:25:fc:65:29:8a:c1:45:6f:fb:49:18:
33:e3:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:17 2025 by rpki-client