Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1nS0uX-20m5q3S5s2ax-hzltY7M.roa
File: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (raw, json)
Hash identifier: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=
Subject key identifier: D6:74:B4:B9:7F:B6:D2:6E:6A:DD:2E:6C:D9:AC:7E:87:39:6D:63:B3
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019424B3695FEE9F1F84980855F5C51F92F3
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1nS0uX-20m5q3S5s2ax-hzltY7M.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202025
IP address blocks: 5.8.252.0/24 maxlen: 24
5.8.253.0/24 maxlen: 24
5.8.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:69:5f:ee:9f:1f:84:98:08:55:f5:c5:1f:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d674b4b97fb6d26e6add2e6cd9ac7e87396d63b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:b0:b4:88:11:04:63:de:41:67:80:d6:7f:
be:cc:fa:cc:ee:d0:37:75:c5:50:d4:57:36:53:00:
25:06:a6:5e:ea:9f:9d:dc:60:bc:eb:72:d2:35:ad:
50:ae:d7:69:b5:4d:f3:03:d8:3b:77:95:ca:6a:3b:
c2:60:df:f8:f1:41:27:85:35:58:53:97:a1:c2:86:
e0:32:cd:98:db:c3:3b:c1:ac:3f:0d:a3:67:82:b1:
2d:61:81:f5:d2:a8:09:f3:9c:ff:dd:a6:e0:32:e0:
9e:42:e3:5e:59:f6:ee:7a:c1:5f:ed:88:87:8b:2c:
5c:fe:0a:f9:ad:8b:56:a4:55:d9:d2:09:59:17:73:
1f:23:9c:09:2e:56:4f:fa:89:a2:da:81:60:1c:d7:
a2:44:04:c2:eb:c1:f5:fc:1b:aa:f6:5c:97:48:1a:
0a:c2:df:a1:4b:db:26:a9:66:de:b3:ef:e5:ac:42:
26:ba:53:ec:6c:34:7d:af:ff:ae:f2:2d:66:15:fd:
14:f2:c0:6f:af:79:b8:0f:9e:9e:e7:d9:67:cc:79:
2e:b3:45:5c:65:52:43:45:e4:17:0f:54:b4:2e:54:
9b:49:6e:d3:a2:42:29:7f:34:b0:fd:7f:78:b2:b3:
40:5e:c6:0d:b4:fc:0c:ea:48:c9:bd:c4:bf:ba:78:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:B4:B9:7F:B6:D2:6E:6A:DD:2E:6C:D9:AC:7E:87:39:6D:63:B3
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1nS0uX-20m5q3S5s2ax-hzltY7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.252.0-5.8.254.255
Signature Algorithm: sha256WithRSAEncryption
6d:06:62:d9:60:be:2a:7b:49:06:67:0d:b9:9d:d3:ba:e2:89:
ae:38:88:6c:70:58:fa:33:d3:e3:80:79:60:ac:c5:d7:db:b8:
c5:b7:d0:d9:8f:c5:b1:cf:43:05:47:23:18:a9:fd:1c:2c:6f:
2c:da:67:e1:24:53:e1:c7:bf:db:e5:b4:71:c0:4e:e7:1d:7c:
ff:01:b0:16:71:00:54:8b:88:8f:d2:fb:2a:c4:0a:46:22:5c:
14:d3:67:6b:ae:68:02:10:a7:47:7a:3b:b9:63:83:33:3b:83:
34:29:97:ac:01:0c:96:96:1a:96:b2:9e:a1:44:ec:3a:16:bc:
4e:02:bc:ce:70:ad:b8:d6:0b:29:21:55:70:00:fc:56:72:8e:
d8:67:bb:25:6e:42:b6:2c:d3:6b:c9:ac:3b:58:a1:84:af:b3:
16:63:4c:d4:a3:46:8a:9a:09:26:b4:66:b5:1c:04:15:7b:ac:
f5:8c:dd:9a:b9:31:cf:fb:7a:99:04:f9:be:fb:69:ad:f7:56:
47:cd:94:c8:e0:e2:95:1b:d7:a8:da:05:01:a1:01:40:af:79:
df:a1:90:f6:64:89:45:6c:e1:26:57:87:d7:0b:a1:a4:0f:b8:
7f:08:b9:54:17:c9:28:9e:93:f6:41:c4:59:4a:76:cb:95:b5:
c1:76:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:10:24 2025 by rpki-client