Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5vJKf9rRscQn60NceOgS-TYmgqo.roa
File: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (raw, json)
Hash identifier: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=
Subject key identifier: E6:F2:4A:7F:DA:D1:B1:C4:27:EB:43:5C:78:E8:12:F9:36:26:82:AA
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A39F2A9590B5276C9BC4B8E074BD
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5vJKf9rRscQn60NceOgS-TYmgqo.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153371
IP address blocks: 185.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:9f:2a:95:90:b5:27:6c:9b:c4:b8:e0:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6f24a7fdad1b1c427eb435c78e812f9362682aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:1f:fb:c3:07:78:df:a3:44:d9:42:d4:fa:
f5:c8:d0:32:8c:de:8a:a8:15:3c:55:b4:1b:1e:40:
99:28:fd:92:e6:1a:e5:c3:17:f2:0d:88:14:c0:ab:
42:ed:73:6d:4a:72:21:db:e4:26:7e:13:9c:60:4b:
41:8b:3c:53:d1:7a:da:f0:50:d8:e1:0c:f0:25:aa:
32:9e:d4:c2:67:7f:19:48:b2:dc:7a:10:39:a7:48:
91:93:85:b3:d5:9d:7a:ac:59:90:4d:1d:1a:b7:78:
78:bb:45:2b:14:e8:ca:0f:90:66:e6:ab:e6:f9:a0:
d9:83:1d:77:a7:fa:65:42:79:40:7d:f3:18:c2:42:
37:18:5a:5e:74:01:0e:19:50:bd:53:d7:18:4a:cd:
85:da:63:3d:e2:0d:fb:ce:38:e0:ce:0f:d5:da:7e:
30:21:a8:66:c8:7e:7a:3b:89:68:3c:25:d5:fe:88:
67:e5:e7:2d:bf:a3:c3:75:cf:15:8b:88:aa:2b:0c:
28:98:89:ea:a2:35:df:c5:9c:ff:d1:e3:d2:6e:ce:
32:80:87:15:88:73:12:8f:15:f8:e6:17:42:92:5b:
69:af:04:26:85:4f:95:16:2e:7b:ba:cc:9a:f8:52:
29:40:59:24:02:7e:4c:5c:55:32:67:b8:66:83:95:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:4A:7F:DA:D1:B1:C4:27:EB:43:5C:78:E8:12:F9:36:26:82:AA
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5vJKf9rRscQn60NceOgS-TYmgqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bc:cf:51:d4:1c:1c:3f:f5:2f:4f:92:7b:22:c0:29:7b:24:
48:f8:5f:8f:0b:28:6e:f0:73:d2:fe:c3:c6:0c:74:e9:eb:30:
99:a7:37:aa:6d:88:c8:e1:fd:57:08:b7:58:a4:0f:01:43:e2:
f7:8f:88:d4:c6:f0:c5:b5:43:2a:b7:15:ea:15:0b:26:b1:78:
3b:33:e6:0e:b5:bb:75:7b:6f:fc:21:d6:cf:41:90:a2:da:aa:
5f:80:95:45:9b:9a:90:2e:49:49:8f:33:57:89:25:bf:e7:d2:
5e:05:be:e6:56:14:43:e3:92:11:c2:78:c7:76:d9:5e:bb:0c:
dc:49:fd:40:8e:58:34:f1:e1:8e:1c:75:a8:64:0f:1f:3e:69:
08:7a:ad:06:c0:c1:e1:ae:2a:2b:ba:42:f6:74:72:1d:a7:fc:
39:e9:de:76:99:c5:12:53:5d:e1:de:d0:f9:b1:af:11:95:b6:
46:9c:2b:d6:d8:3c:66:a4:d0:bb:83:c5:7e:25:0b:7a:b4:dd:
fd:fb:30:55:ce:db:b1:94:f4:8e:2a:14:45:24:61:30:9f:36:
db:0d:9c:dd:67:5f:2f:a6:a9:dc:13:50:11:e8:2c:1d:6d:67:
2d:b7:56:09:77:b4:5d:bb:ab:a8:ff:ed:30:1b:b3:c7:88:4f:
6f:9f:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:45 2025 by rpki-client