Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/5395RGU-O7_Y-Wk8o5ckF03TEl8.roa
File: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (raw, json)
Hash identifier: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=
Subject key identifier: E7:7F:79:44:65:3E:3B:BF:D8:F9:69:3C:A3:97:24:17:4D:D3:12:5F
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0194266C1F658BDDA05320D87132EC9F4335
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/5395RGU-O7_Y-Wk8o5ckF03TEl8.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5435
IP address blocks: 185.178.224.0/24 maxlen: 24
185.178.225.0/24 maxlen: 24
192.160.15.0/24 maxlen: 24
212.93.224.0/19 maxlen: 19
2a02:23d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:65:8b:dd:a0:53:20:d8:71:32:ec:9f:43:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77f7944653e3bbfd8f9693ca39724174dd3125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:8f:fe:37:2d:87:45:50:ee:2e:4a:4a:07:
d7:6c:d8:43:32:61:22:07:be:8e:f1:73:0c:20:e7:
c1:7d:d7:d9:22:90:8d:83:c9:e2:23:81:f7:cf:84:
4c:f5:3c:bf:18:66:fc:29:82:f7:53:1e:1c:6f:fa:
37:3a:72:42:c0:dd:6a:25:5f:ae:71:13:ba:44:60:
6f:65:3c:85:db:ff:08:ce:7c:21:ca:6c:e8:ae:94:
82:01:c0:02:3c:88:aa:dc:6c:38:b7:1a:d7:f4:82:
5f:dc:4e:f6:12:2a:b4:21:6d:4f:9a:9c:88:bc:7b:
1f:f5:be:b7:05:34:1b:d9:c2:71:41:8a:65:cc:12:
97:bd:d9:74:7e:b2:ec:ea:21:67:57:d0:0c:f9:e2:
bf:e7:db:36:10:4b:ff:f5:a1:81:95:f8:1e:27:f1:
11:f3:8d:57:70:c0:f5:a8:a7:ad:d0:58:23:52:67:
7e:20:81:ae:e7:a2:e6:52:af:31:0a:18:e7:5b:7a:
90:86:c5:b2:25:51:3d:c2:6f:f2:b6:19:a6:f4:c9:
41:5c:7a:ca:39:2a:06:b8:fc:bf:31:3d:6b:88:2d:
8a:cb:71:b8:70:69:49:ef:67:c4:d7:a2:39:b7:f1:
f8:96:54:d3:35:f0:9b:f4:29:de:70:92:be:ff:ec:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7F:79:44:65:3E:3B:BF:D8:F9:69:3C:A3:97:24:17:4D:D3:12:5F
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/5395RGU-O7_Y-Wk8o5ckF03TEl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.224.0/23
192.160.15.0/24
212.93.224.0/19
IPv6:
2a02:23d0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:b8:d8:8d:ff:61:7c:f8:5a:5c:98:a4:52:90:aa:7d:67:0c:
c9:1c:d5:61:2b:63:02:05:9a:85:59:88:9d:5d:4e:7f:79:13:
ee:1e:7d:3e:8c:6d:19:cd:7c:92:85:8c:05:42:bd:ce:81:ad:
20:d3:5f:0b:f9:d5:54:68:fb:2d:6c:63:7d:48:7b:65:b2:b7:
22:26:d2:9a:6c:7f:24:0a:a4:31:08:74:9f:8b:35:8f:d5:65:
fe:c4:43:eb:ba:b0:5f:87:70:79:d7:f9:67:33:f4:cb:4c:f3:
fd:9d:f7:04:f5:3c:ae:55:0a:1c:12:99:24:77:e2:7a:39:de:
a7:1e:78:38:ea:ab:87:65:70:89:da:42:94:ce:07:8b:de:17:
4f:60:62:66:de:60:55:a6:19:ad:10:cc:13:07:c7:9c:11:57:
ea:fd:ec:90:4e:5f:28:d6:9e:0c:93:db:6b:82:cf:51:4d:b3:
fc:58:0e:b4:1f:22:92:dc:de:80:f5:c2:83:f9:64:31:0d:b7:
e6:d4:0f:10:4e:c3:9d:91:fd:97:8a:23:0f:b1:3c:1c:21:23:
bc:4e:6b:11:e1:31:69:9b:7b:46:c5:65:91:22:47:fd:5b:90:
fd:b9:ca:77:02:67:f4:cb:c6:b2:27:3e:62:5a:b5:fb:87:8c:
22:e2:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:50 2025 by rpki-client