Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa
File: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (raw, json)
Hash identifier: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=
Subject key identifier: A5:F4:BC:9E:98:DB:D6:E4:3B:35:29:80:63:E2:F1:64:B9:6A:DA:9B
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019423697970261EE8F0EC4AC2FA33283305
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59518
IP address blocks: 5.158.200.0/21 maxlen: 24
5.158.200.0/24 maxlen: 24
5.158.201.0/24 maxlen: 24
5.158.202.0/24 maxlen: 24
5.158.203.0/24 maxlen: 24
5.158.204.0/24 maxlen: 24
5.158.205.0/24 maxlen: 24
5.158.206.0/24 maxlen: 24
5.158.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:79:70:26:1e:e8:f0:ec:4a:c2:fa:33:28:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5f4bc9e98dbd6e43b35298063e2f164b96ada9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:0e:e1:c9:df:70:70:25:39:dd:63:94:35:
2c:5d:62:28:b1:4c:b1:e6:35:9f:39:9a:9c:7e:49:
36:50:e6:f4:e9:fb:8e:0c:57:61:19:8a:3a:d9:b3:
bf:13:78:e4:4e:67:cf:0c:c5:7f:c8:db:57:bf:6e:
54:b8:66:89:9d:d8:77:14:d9:7b:a1:b5:77:0b:86:
95:36:17:89:3e:e6:26:f6:23:a3:a3:53:81:83:27:
37:33:c0:9b:23:e7:b0:4d:4d:ad:d1:99:43:98:0b:
64:f5:36:4c:b2:c5:dc:9b:1b:7a:42:e8:40:93:e5:
e5:31:cc:9e:66:eb:d0:18:07:e6:b7:76:fa:ed:9c:
88:8f:34:ee:5e:35:9c:39:17:20:86:ef:67:0c:a4:
de:35:b0:c7:fe:bb:1f:92:3e:e9:b4:a2:a7:cb:39:
94:9e:45:bd:87:1e:19:73:f4:b6:2e:ef:14:55:ee:
32:5e:45:62:c1:e4:77:e6:6b:ac:db:7d:46:e4:8b:
fa:0c:2c:30:c1:16:33:93:6e:a0:3a:3f:0c:84:3b:
34:fb:75:08:3b:89:ef:09:ed:fd:39:c0:4b:1a:26:
a1:de:86:46:f1:56:68:59:b4:34:46:6f:a5:48:08:
39:d7:25:96:cd:6a:0e:4d:b9:da:cf:7d:6c:3d:c0:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:BC:9E:98:DB:D6:E4:3B:35:29:80:63:E2:F1:64:B9:6A:DA:9B
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.200.0/21
Signature Algorithm: sha256WithRSAEncryption
77:78:71:81:f2:fc:78:aa:13:41:88:5f:e3:26:d3:ea:b7:22:
d9:81:f2:62:bc:6e:9a:dd:dc:1d:9e:8d:8c:0b:dd:94:d8:8c:
73:0a:d2:2a:c7:73:d2:f7:7f:43:02:35:cb:cd:06:8b:80:be:
6d:6d:a0:ed:56:d5:f5:66:9d:30:a1:48:f2:7a:7b:58:06:5a:
57:d9:ca:82:89:1a:36:18:e5:b4:c0:c5:61:b0:2f:dc:78:d5:
3a:e6:30:47:25:09:4e:ee:b7:dd:bb:a4:37:4f:ef:fe:39:df:
41:d3:87:ae:17:24:df:e1:5e:3c:d7:b5:b2:69:2a:18:9c:28:
3c:65:47:ea:e7:8d:3f:d7:d8:be:bc:76:48:08:bb:39:47:3d:
5c:13:f0:02:c6:f7:88:25:a6:71:24:30:98:6f:2a:ca:4f:06:
4a:0d:0b:a0:cb:42:5c:48:bc:06:a7:c4:e4:cf:ba:3c:6f:1f:
0e:cf:75:45:4e:5b:14:03:0e:ff:85:7c:57:49:57:96:cf:bc:
eb:08:b5:f5:d4:89:dd:60:d2:72:71:a6:1c:e0:60:58:b8:c8:
9b:ce:89:45:18:60:fc:f0:cc:0f:28:eb:26:4e:8f:3c:b5:af:
e9:92:c1:ad:8b:0f:09:17:0a:95:89:5e:54:18:4c:57:52:f3:
1d:00:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:19 2025 by rpki-client