Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-5hSTIPsRy5D9_bcwYF_WMz1BH8.roa
File: 1-5hSTIPsRy5D9_bcwYF_WMz1BH8.roa (raw, json)
Hash identifier: BZPrksSfRlF6LAV7eR2IosdBvVh2oBZxAtVrv/y7NIQ=
Subject key identifier: FB:98:52:4C:83:EC:47:2E:43:F7:F6:DC:C1:81:7F:58:CC:F5:04:7F
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FCE276830C418AED5678FD46CC049
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-5hSTIPsRy5D9_bcwYF_WMz1BH8.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201893
IP address blocks: 94.42.195.0/24 maxlen: 24
94.42.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ce:27:68:30:c4:18:ae:d5:67:8f:d4:6c:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb98524c83ec472e43f7f6dcc1817f58ccf5047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:ef:69:1b:94:0b:74:e5:4d:9e:5b:1a:f0:
b6:55:b8:4f:d0:08:a5:04:9b:bd:a9:c0:af:18:0f:
69:07:2d:c9:d2:fb:ca:48:5b:63:63:5f:bf:c0:68:
75:c3:60:d6:0d:fe:75:39:82:b2:a8:2a:31:f6:f4:
25:5b:93:1e:ab:62:e4:5a:2f:46:31:99:06:38:97:
3c:ce:29:43:5f:23:58:c1:87:ea:3f:a7:e7:36:29:
92:08:9a:0d:3b:08:29:a6:33:0a:17:2e:e4:62:7c:
a4:2e:57:78:e9:7a:55:5f:7d:c6:77:bb:6a:df:f3:
52:d9:73:42:ef:9d:fe:1b:f7:cb:b4:7a:32:34:05:
f5:38:71:f8:06:77:b2:b9:83:4c:d9:75:dc:7a:4c:
5f:a8:4d:08:92:5a:ef:cc:ff:c8:e4:5c:ed:da:7e:
56:43:16:60:43:f5:73:16:11:7f:cd:54:25:51:4c:
dc:f0:87:b1:29:87:55:88:d5:8c:b8:ce:c7:2b:19:
a5:a7:ee:9d:6b:33:96:9b:6f:db:7a:20:ed:62:42:
47:28:03:56:c8:9b:53:16:2b:55:24:53:e6:ba:e8:
55:31:c4:3e:d8:b3:72:6c:37:a5:2f:e2:76:2a:f1:
30:c3:df:40:4e:dd:1d:f8:2f:f4:cf:41:70:6c:66:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:52:4C:83:EC:47:2E:43:F7:F6:DC:C1:81:7F:58:CC:F5:04:7F
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-5hSTIPsRy5D9_bcwYF_WMz1BH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.195.0-94.42.196.255
Signature Algorithm: sha256WithRSAEncryption
95:1d:5e:df:84:95:3f:20:7e:1b:21:39:cc:21:ca:d1:9b:f8:
b7:21:e9:64:e6:2d:7e:e5:24:02:bc:9e:bd:63:d6:07:fc:c4:
ac:81:02:e7:01:56:37:f6:08:1a:c7:bc:36:c4:d8:c9:bc:69:
1c:f1:54:8f:68:fd:76:56:f7:27:47:0c:a4:b1:bb:db:76:1e:
34:d3:90:c3:b3:20:b8:51:88:82:a1:17:c0:fb:3e:ff:32:3e:
96:32:61:ba:4d:3a:35:e5:f4:01:01:f0:19:b4:71:8a:54:8a:
b4:f4:34:81:90:15:04:42:01:6e:ae:b3:fc:e7:d9:6c:71:f6:
80:c6:83:53:69:ab:35:bf:f3:0a:75:b3:6a:9c:42:62:14:a9:
39:4e:0b:b2:c8:76:02:90:64:21:e2:6b:2d:e9:32:30:12:fc:
06:e8:7a:14:ac:d6:b9:97:4e:1a:84:fd:a6:b5:86:1f:48:fb:
e2:49:c5:a5:a8:6a:1a:ec:99:1a:48:f1:d6:12:75:76:d7:ba:
06:c4:98:aa:8d:57:bf:da:18:53:b5:ee:e3:fb:a5:6a:0b:ba:
2e:ef:ab:65:b3:eb:85:5b:98:b1:22:d8:98:33:7b:d5:6a:65:
ec:55:ef:6c:32:27:eb:76:99:5b:5e:d5:46:be:7e:fc:89:2c:
94:2a:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:30 2025 by rpki-client