Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/5SBRKvoUR77xMW-RFvy5_fTtMLs.roa
File: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (raw, json)
Hash identifier: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=
Subject key identifier: E5:20:51:2A:FA:14:47:BE:F1:31:6F:91:16:FC:B9:FD:F4:ED:30:BB
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 019421B21B6346EE21F635C3FDEB76989C1D
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/5SBRKvoUR77xMW-RFvy5_fTtMLs.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51274
IP address blocks: 185.158.172.0/24 maxlen: 24
185.158.173.0/24 maxlen: 24
185.158.174.0/24 maxlen: 24
185.158.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:63:46:ee:21:f6:35:c3:fd:eb:76:98:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e520512afa1447bef1316f9116fcb9fdf4ed30bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:2e:0a:63:79:92:06:c5:99:ff:35:f6:2c:
5b:db:fb:f7:a2:58:df:66:00:66:ed:f8:87:e0:fd:
70:ed:43:e8:08:b5:e6:1b:06:6f:38:4f:56:97:b8:
a7:19:00:34:f2:35:13:69:e1:37:66:87:38:42:6b:
dd:ee:a1:05:de:d8:96:d6:4b:64:5d:a7:d1:d3:54:
75:19:d4:a2:f4:2f:33:3a:b8:41:f1:14:e7:d0:6f:
5a:63:70:1e:9e:fa:a7:f6:4a:bf:ae:15:35:77:20:
46:d4:17:bb:fc:51:bd:90:e1:29:42:94:2c:c5:61:
61:36:11:bf:a3:5e:3a:b3:7c:72:cf:24:6c:ba:3a:
d5:4c:6d:24:f3:6b:44:0f:50:d9:fc:44:bb:f8:15:
b2:41:1c:4e:0a:7f:ce:f0:36:6b:8a:1b:df:b6:ea:
f8:68:14:e0:c4:cb:67:47:e3:57:4a:38:9b:4e:60:
8c:26:85:93:30:94:b4:44:31:49:c0:d9:df:93:6b:
c8:bc:f0:a7:0b:ed:30:fe:5d:05:9d:13:7b:47:48:
00:f0:2e:03:57:e9:2b:d2:72:e2:05:7f:c3:0c:6a:
3f:73:e5:d3:07:36:39:8f:1f:f1:87:00:38:94:04:
eb:7a:d7:e6:fa:be:99:23:49:47:76:ea:49:da:f0:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:51:2A:FA:14:47:BE:F1:31:6F:91:16:FC:B9:FD:F4:ED:30:BB
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/5SBRKvoUR77xMW-RFvy5_fTtMLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:11:e1:bf:a9:f8:4e:b5:a5:e6:9b:b3:9b:25:f3:85:c3:df:
b4:33:92:b7:4b:c3:d1:ea:cb:1d:79:f2:15:d4:dd:e1:59:b7:
1f:de:13:49:4f:5b:b8:bf:c3:1b:36:f3:74:ca:0c:63:58:16:
c5:67:15:cf:84:2c:5d:21:77:e0:fd:a7:0b:16:11:e8:20:bb:
a5:32:1c:f7:bf:88:c1:7c:0f:4a:76:08:d2:8e:ac:23:b2:76:
d3:83:8d:27:ed:7a:3d:07:99:69:c0:6c:f0:60:d1:64:08:e8:
9a:49:3b:36:fa:d3:b2:bb:2c:7a:fe:87:94:58:43:cd:09:a4:
8e:6b:14:8d:09:27:0b:38:20:ac:4b:a7:10:d9:15:e8:d8:db:
74:1d:db:a6:49:32:66:13:b4:ed:10:d3:5e:84:3b:06:9f:f7:
ef:9b:cb:6a:a9:0e:a8:17:5d:03:f7:e8:e3:7c:9f:7d:06:92:
bd:b8:53:95:5f:f2:35:32:fb:02:c9:18:68:d3:ab:8f:26:e1:
14:24:53:3e:0a:2c:6f:e2:13:07:d0:2b:5d:d0:de:11:0f:a8:
d6:5f:df:37:0e:60:af:66:5e:e9:b2:22:4e:3c:3c:08:92:5d:
71:38:6c:53:e9:e5:3a:68:44:1e:4f:b5:11:9c:e5:20:92:60:
35:80:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:13 2025 by rpki-client