Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/5QHAsQaUMAZIN1n6-pxK5K91a3o.roa
File: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (raw, json)
Hash identifier: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=
Subject key identifier: E5:01:C0:B1:06:94:30:06:48:37:59:FA:FA:9C:4A:E4:AF:75:6B:7A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 0194228DE4F6563CECA970105BF175579887
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/5QHAsQaUMAZIN1n6-pxK5K91a3o.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208685
IP address blocks: 89.47.1.0/24 maxlen: 24
2a00:1ca8:8a::/48 maxlen: 48
2a03:3f40:89::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e4:f6:56:3c:ec:a9:70:10:5b:f1:75:57:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e501c0b106943006483759fafa9c4ae4af756b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:71:1b:c3:36:cd:ce:cf:37:ab:2f:d6:49:
60:2f:d5:38:77:c9:3e:60:e5:93:cd:6d:f8:e4:5b:
b5:bb:75:3c:6b:62:cc:71:fc:44:93:d3:8c:cb:c1:
08:b6:ea:1c:87:f2:dd:07:d6:c7:77:4b:26:51:c9:
a4:b3:25:10:6c:b4:4d:25:0c:a1:6a:fb:22:f2:ae:
e3:82:7e:c0:96:00:82:b0:12:8d:96:73:9d:d0:5e:
bb:86:99:3e:2c:d9:fd:1f:66:76:93:06:47:6d:44:
ce:82:66:67:76:5d:0c:c8:e7:55:e4:d0:3f:31:27:
35:f3:b4:54:df:3d:f6:f9:46:23:6d:1d:db:f8:48:
28:e6:a7:df:4a:77:2c:7b:2b:20:13:23:6d:30:cb:
39:c2:83:17:b1:11:f3:ff:01:22:1f:c2:b1:d7:42:
08:c4:69:77:43:e0:65:69:29:87:78:24:c7:41:98:
e2:1e:73:26:3c:39:36:5b:bc:e7:25:9b:f6:93:e1:
7c:9c:83:f6:43:43:32:d9:79:39:48:6c:72:5b:00:
19:2f:5a:8e:ab:34:77:26:58:95:ec:e5:7d:29:c9:
6e:8d:3a:17:e4:f1:1d:dc:72:98:d2:a4:44:ee:c9:
70:31:45:dd:d7:b5:98:cc:0e:34:12:a5:f4:50:4d:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:C0:B1:06:94:30:06:48:37:59:FA:FA:9C:4A:E4:AF:75:6B:7A
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/5QHAsQaUMAZIN1n6-pxK5K91a3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.1.0/24
IPv6:
2a00:1ca8:8a::/48
2a03:3f40:89::/48
Signature Algorithm: sha256WithRSAEncryption
5e:82:b8:93:0b:5e:33:31:df:71:2b:c0:a9:bc:9d:1e:88:30:
0a:92:ad:d3:78:2f:11:12:69:e5:b9:6b:5c:50:dc:e6:ec:92:
80:b9:ad:e5:6e:97:8d:cf:df:52:41:57:87:85:aa:26:ce:4d:
e2:71:c7:eb:d6:1c:3a:32:2e:d3:d6:55:50:9a:f0:02:fb:ca:
c9:59:34:74:b9:4b:0d:d6:fc:89:b3:10:c5:1a:e3:64:47:51:
e4:b8:3a:d1:59:eb:5c:c1:a8:e1:81:7d:a2:f0:52:18:e7:1e:
c8:3c:68:34:b7:7f:6e:04:5a:de:df:15:dc:33:52:73:04:ee:
f7:4f:21:0b:fc:bc:31:93:6b:09:a8:96:72:fc:87:3d:e5:de:
cf:58:bf:29:ba:ec:79:75:32:94:3f:d5:f2:e8:90:cd:2e:a8:
9f:fb:af:fe:07:1d:a7:6c:6c:ee:bc:bd:7c:fd:45:0c:ff:b8:
7e:72:90:09:34:14:db:15:57:e2:3f:b1:c5:02:3a:8c:4e:a7:
a2:0d:c5:36:f3:73:9b:3e:7c:5b:b4:86:16:9c:86:58:13:4d:
ce:86:7b:c3:23:83:e4:be:1c:ba:4c:d0:9e:65:fd:bd:25:21:
d7:8e:e5:f3:f6:43:e4:6b:7a:e2:7b:a1:f3:c7:cb:81:8a:65:
48:2e:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:28:07 2025 by rpki-client