Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/5cSVF2_nio6952U-LXaO6EaByvM.roa
File: 5cSVF2_nio6952U-LXaO6EaByvM.roa (raw, json)
Hash identifier: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=
Subject key identifier: E5:C4:95:17:6F:E7:8A:8E:BD:E7:65:3E:2D:76:8E:E8:46:81:CA:F3
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019426D9BC80BA7C557B6B23C20828E70390
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/5cSVF2_nio6952U-LXaO6EaByvM.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60471
IP address blocks: 185.30.144.0/22 maxlen: 22
185.30.144.0/23 maxlen: 24
185.30.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bc:80:ba:7c:55:7b:6b:23:c2:08:28:e7:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5c495176fe78a8ebde7653e2d768ee84681caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:fc:ba:b7:4f:a8:c4:c2:b8:52:24:4f:2d:
63:75:07:a1:dc:88:00:37:cf:b0:1b:32:5c:f7:92:
b0:1b:98:93:de:4b:0b:0e:db:2a:08:8d:09:31:be:
c1:c2:af:33:cd:b9:4f:5c:d9:8f:7a:78:d8:4c:c6:
0c:07:1c:96:74:61:28:9a:50:03:5c:cd:01:04:98:
cb:20:8f:f4:d7:0e:2f:ce:ac:ea:12:d9:30:a6:ba:
9d:18:7d:c8:5f:5c:ab:c8:c2:e2:97:a0:88:7c:ae:
b5:bf:f4:00:d8:f1:c6:9c:b9:97:48:72:54:2d:ef:
4e:1d:d1:d1:ea:38:51:47:eb:1f:41:4c:eb:6f:01:
1c:ad:87:b1:5b:af:af:30:8e:fa:36:31:2b:1e:6b:
24:db:78:42:05:65:62:77:6d:bd:8a:f5:04:82:a3:
d6:a5:2c:8a:54:a3:ad:3a:4c:00:63:f2:4f:95:09:
19:2f:42:1d:80:c4:fb:eb:25:18:85:8c:bc:fb:76:
e2:2a:d9:6a:f0:8a:3c:fd:2f:63:76:d1:07:30:e5:
8d:45:87:0a:9c:6d:3c:94:5f:96:ac:f0:8d:7b:f6:
9f:ea:51:63:4e:43:da:f7:38:1a:86:63:78:cb:07:
00:12:93:aa:77:51:ca:21:d3:bf:44:3f:6d:71:c6:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:95:17:6F:E7:8A:8E:BD:E7:65:3E:2D:76:8E:E8:46:81:CA:F3
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/5cSVF2_nio6952U-LXaO6EaByvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.144.0/22
Signature Algorithm: sha256WithRSAEncryption
36:25:d9:06:13:7b:28:bc:00:ab:2b:5d:93:d2:ff:06:f5:85:
13:fb:d7:2a:8d:3a:19:40:7d:51:33:e0:93:88:8c:02:da:dc:
8d:05:74:ce:bc:78:3d:5b:23:09:44:44:35:ff:db:4b:45:6c:
d0:05:4e:d2:57:8b:3b:f4:f5:8b:b9:33:0a:03:67:d3:a5:df:
22:f6:98:b8:b3:fc:dc:b1:d4:43:72:bb:f0:0a:bb:13:b4:39:
d9:cb:e2:1d:e2:75:9e:a8:8d:31:b8:46:bd:ba:12:21:0b:bf:
bc:55:4d:af:a2:f5:16:65:c3:1f:f5:5c:13:65:fb:5d:fc:08:
12:7f:4d:3f:6c:28:36:5d:23:27:85:31:c2:89:b8:d5:b4:3a:
6b:9f:52:68:2a:86:7b:7d:90:b4:a4:d1:75:07:df:99:4f:bc:
02:3b:4d:92:16:39:47:a0:b1:c1:9e:db:45:1e:56:ba:13:38:
4f:80:87:02:6a:c6:21:c4:e0:1d:f2:79:a8:62:ae:5d:78:5d:
79:fa:33:ae:8f:75:ca:56:cb:ab:a1:39:ee:91:ab:88:c6:9a:
97:75:5e:dd:e6:fe:5d:cd:34:18:e2:7f:19:45:9b:09:30:ce:
2c:9e:80:5f:a2:50:8a:33:4d:6b:27:5b:a2:66:a3:2a:2a:79:
1a:25:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:45 2025 by rpki-client