Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/5JInjtJs-s2-yK_dBCuc4HDNHSk.roa
File: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (raw, json)
Hash identifier: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=
Subject key identifier: E4:92:27:8E:D2:6C:FA:CD:BE:C8:AF:DD:04:2B:9C:E0:70:CD:1D:29
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 019425FDDDBA4846190B5E38B9454A4EC18A
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/5JInjtJs-s2-yK_dBCuc4HDNHSk.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35499
IP address blocks: 45.66.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dd:ba:48:46:19:0b:5e:38:b9:45:4a:4e:c1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e492278ed26cfacdbec8afdd042b9ce070cd1d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:0d:e5:e1:66:8f:17:50:b9:7a:b4:c8:8d:
f1:6c:c8:c3:fe:f4:3f:49:4d:1d:23:9b:d8:f5:a9:
80:15:bc:74:c7:3a:2f:8e:23:52:a2:5e:a1:65:f2:
a6:76:e0:4f:56:43:8e:56:a0:a8:c6:19:bd:f2:b9:
04:ef:d0:2d:4d:62:55:10:96:48:f3:b4:82:da:27:
03:0c:18:8c:24:a0:a9:cb:8a:bc:16:c5:5f:14:df:
0a:d9:ec:4c:9f:df:aa:27:41:90:1e:3c:62:c5:e4:
45:a6:c6:f0:ff:74:d1:a4:da:de:ec:6a:a7:67:7a:
16:a3:b1:34:bd:a4:78:b4:b1:fe:28:66:fd:bd:f0:
04:c2:89:f3:3c:bc:ea:5c:61:c8:52:b8:27:2d:55:
71:57:d2:ae:a5:1c:68:d7:13:d1:3b:87:77:af:84:
eb:75:38:e3:7a:52:31:7e:63:7d:d1:95:03:1b:1c:
8f:22:9d:02:c7:88:7a:38:17:df:2a:c0:e5:04:1e:
49:5c:74:a9:dd:05:29:63:45:e7:49:a1:70:ba:65:
04:f0:62:13:83:af:f7:fb:f2:1f:46:21:d7:65:3a:
43:b8:9b:1b:08:4e:1d:62:53:22:4e:97:35:de:b7:
45:3e:08:45:5f:a0:76:7a:49:fa:de:56:6b:f3:a7:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:27:8E:D2:6C:FA:CD:BE:C8:AF:DD:04:2B:9C:E0:70:CD:1D:29
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/5JInjtJs-s2-yK_dBCuc4HDNHSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.124.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ca:e0:fc:0e:8a:9b:31:b7:7a:73:c3:10:c7:7f:a2:c8:a1:
3d:73:ae:a3:42:22:c8:40:1a:15:06:8d:5a:5b:a2:22:fb:20:
3d:31:ba:8a:64:c8:7f:8c:bd:8d:0a:b2:e1:f5:a4:a9:df:8f:
83:7e:67:5f:77:08:3b:8c:24:4f:c3:84:9a:13:75:66:15:11:
be:04:44:5e:76:44:19:8a:b4:97:95:f3:b2:3f:f3:a5:cd:f4:
a9:90:2d:d9:66:15:0b:7f:e8:1d:7c:8d:26:90:54:24:bc:f0:
05:6b:af:3a:d1:6e:c1:11:2f:ca:a0:d9:ee:7d:6a:15:76:17:
07:ce:88:38:b2:54:4e:52:de:bb:8e:18:5b:96:0b:12:22:6f:
b3:44:5f:f6:87:82:23:01:4a:52:28:42:b8:13:76:02:57:84:
ed:19:e1:16:ff:f9:99:40:7f:ee:31:07:f9:69:6a:30:b1:fe:
32:91:e6:42:9e:e6:98:63:2e:4d:99:29:62:a1:7c:40:ae:00:
aa:0c:40:4b:87:bd:98:0c:8f:52:3b:61:21:e3:17:d6:7e:6d:
38:c3:28:e9:01:97:b2:ea:3d:2f:3d:be:f6:52:68:b4:76:21:
61:94:36:fe:2b:c0:2b:74:52:a6:7e:5a:1b:20:6b:ad:42:e8:
5b:1e:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:55:31 2025 by rpki-client