Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa
File: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (raw, json)
Hash identifier: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=
Subject key identifier: 91:94:97:3E:BD:F4:37:11:B6:11:CE:57:EA:EF:D4:B4:8C:58:3B:D2
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 01942444A4777D0431F9A39393A7FCDF2CAD
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201019
IP address blocks: 5.173.224.0/19 maxlen: 19
5.173.224.0/20 maxlen: 20
5.173.240.0/20 maxlen: 20
185.89.184.0/22 maxlen: 22
188.33.0.0/18 maxlen: 18
188.33.64.0/18 maxlen: 18
188.33.128.0/17 maxlen: 17
2a00:1982::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a4:77:7d:04:31:f9:a3:93:93:a7:fc:df:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9194973ebdf43711b611ce57eaefd4b48c583bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:41:cf:db:14:0f:15:27:68:ab:6c:bc:9a:
f3:a5:b8:84:c5:da:c6:00:c3:cd:4f:89:62:03:0a:
50:b2:a7:7a:fb:ba:58:d2:a9:6b:d5:d3:08:0e:c2:
41:e4:fb:a3:25:b1:e0:34:45:e5:a4:41:36:51:cc:
b7:dd:55:58:e4:6e:1f:91:6c:bc:a5:05:6b:3c:ad:
20:10:e3:37:50:c3:12:6d:bd:4c:41:22:55:39:18:
6e:65:e1:d8:31:ef:09:9c:c5:8d:54:e9:f6:d8:63:
97:f4:f8:eb:4e:98:68:64:be:47:44:f8:62:33:5f:
73:7c:8c:50:de:fd:6b:0d:60:00:8b:9c:5e:5a:af:
df:59:27:f2:68:f3:29:3d:47:35:54:b1:77:f2:cf:
63:76:b9:c9:53:35:e8:64:5c:91:34:1d:de:27:17:
ca:b1:e6:95:b4:01:6a:ca:00:7d:78:f8:88:5e:81:
e7:3c:5a:ac:1f:5a:ff:ba:5a:07:7c:00:0b:54:86:
95:5e:b9:b3:95:d4:0d:65:e3:f0:d5:3f:4b:39:aa:
b1:b0:d8:a5:14:6c:a9:73:63:66:d4:06:64:33:64:
4b:84:1a:78:ce:06:78:02:a2:9e:75:71:78:75:86:
0f:12:b7:5b:bc:7d:46:ac:c9:72:b6:a9:19:74:08:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:97:3E:BD:F4:37:11:B6:11:CE:57:EA:EF:D4:B4:8C:58:3B:D2
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.173.224.0/19
185.89.184.0/22
188.33.0.0/16
IPv6:
2a00:1982::/32
Signature Algorithm: sha256WithRSAEncryption
34:ed:76:97:86:e6:db:22:52:7d:c1:5c:36:7a:34:fa:1b:c3:
b1:7b:67:26:7e:da:93:b5:d1:62:af:27:63:bd:59:36:d4:aa:
02:1c:35:7f:5c:59:c5:a0:ce:8b:20:28:b1:03:c7:a5:ec:44:
95:dc:87:69:44:5b:95:b2:45:40:0b:25:07:7c:fb:d8:d0:0e:
1b:96:72:ca:8f:14:ea:e9:cd:55:dc:30:74:0d:c6:c7:7c:f7:
61:97:59:98:f6:f9:61:f2:39:20:de:44:a8:46:7e:43:0c:f6:
8d:6c:d9:f4:59:d3:21:7a:d3:cd:d9:19:74:d6:99:46:44:56:
d9:97:a6:60:09:99:78:53:4f:d5:63:9b:d3:88:21:12:af:39:
80:0d:6d:7a:60:b8:e4:1a:ea:83:d9:ca:35:9e:34:9f:4d:d6:
47:65:62:a9:a4:fe:90:e1:b6:dc:4f:dc:de:4e:72:e5:04:ae:
39:e4:33:7e:3d:d0:b1:75:93:7b:53:0b:dc:a7:5c:8c:82:2f:
2b:42:a8:1a:67:b0:16:8d:f9:b4:dd:7b:76:ca:b2:2b:67:92:
a2:48:15:e1:5b:da:e9:8d:6f:2e:3e:a3:85:a5:4a:4e:17:d4:
34:18:7c:49:2a:4a:7f:3a:7f:da:29:c9:fa:62:97:3b:91:40:
f6:16:07:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:06 2025 by rpki-client