Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5JoRYGjegq2OPh8_zCttswNJjaM.roa
File: 5JoRYGjegq2OPh8_zCttswNJjaM.roa (raw, json)
Hash identifier: 7SH7TMZ+0HG03MONHVtq4uTHHvqG1NuyO97QIbboO2I=
Subject key identifier: E4:9A:11:60:68:DE:82:AD:8E:3E:1F:3F:CC:2B:6D:B3:03:49:8D:A3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7051093C75671A745D644CF0B2916
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5JoRYGjegq2OPh8_zCttswNJjaM.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 193.34.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:05:10:93:c7:56:71:a7:45:d6:44:cf:0b:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49a116068de82ad8e3e1f3fcc2b6db303498da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:56:3e:68:32:a9:ff:60:04:98:bc:36:81:
a1:5e:85:8c:a8:53:c1:92:0d:3a:a8:96:9b:6f:be:
fe:30:19:05:6f:44:ca:72:b1:9f:25:bb:ab:f9:32:
ea:d5:94:55:72:d8:bf:d2:be:94:8e:b6:27:9f:eb:
3d:44:9c:56:be:9c:69:8f:04:16:4e:0c:6c:bc:05:
ca:5e:bd:19:38:43:3c:6e:7f:f3:d5:5a:53:fc:e0:
a0:98:06:1a:c5:fe:64:65:bb:87:e9:c5:00:60:2a:
32:11:15:20:2e:38:1e:d7:74:23:f4:d7:5e:7c:ae:
a5:01:19:91:7d:3e:e1:d9:5a:8e:4a:d2:a7:b7:f4:
c7:f2:33:57:1b:19:d4:f6:fa:ef:0f:36:4a:c6:62:
7e:ad:f6:86:a3:7b:55:bb:78:cd:97:10:c3:09:8c:
1e:c3:52:d3:70:8d:62:90:0e:50:b0:7d:3c:5d:b5:
28:a6:c5:2f:13:a8:d1:2a:d4:b8:64:9f:e9:82:88:
7c:e5:c8:e6:f8:44:fc:ca:9e:31:94:c2:ea:cd:f4:
dc:de:9d:82:ec:cb:de:85:9b:b2:8c:2b:ad:e6:4d:
40:a7:4c:1f:5f:01:73:33:35:e8:56:af:94:a2:d5:
ba:1e:25:4f:67:64:f3:37:3e:8c:e4:a6:e0:f5:94:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:11:60:68:DE:82:AD:8E:3E:1F:3F:CC:2B:6D:B3:03:49:8D:A3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5JoRYGjegq2OPh8_zCttswNJjaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.232.0/24
Signature Algorithm: sha256WithRSAEncryption
54:32:a9:95:4c:3d:90:87:6e:8f:6f:7b:5f:62:49:2f:5b:1f:
33:82:5f:bf:6d:84:67:da:52:81:15:af:c5:48:3a:c9:60:2b:
08:4e:ac:da:d9:8f:47:18:fe:95:db:67:6c:93:ab:0b:86:7d:
d7:14:13:d2:41:be:b7:a5:36:1f:a2:ef:51:0e:e2:d2:16:33:
c5:8e:49:65:fd:65:2d:45:81:7b:38:c4:70:2b:f7:90:e2:d8:
61:60:f6:f9:70:1e:b0:43:e8:4c:a6:63:5f:0e:bd:81:73:a1:
7a:af:db:9c:5b:14:0b:ae:9a:4c:af:3c:41:1a:1b:6a:2b:b8:
3b:33:59:96:27:3f:b5:24:d3:6b:0d:aa:78:3e:47:b1:58:47:
0e:20:1a:07:9e:1e:fe:65:78:8e:44:88:32:c9:88:1d:a8:11:
cd:47:11:74:62:dd:db:13:51:81:56:1d:dc:eb:df:70:0b:20:
31:87:1c:19:b8:f3:71:15:f7:3b:84:68:1b:0e:b8:1f:b4:ef:
e8:fd:af:8e:37:df:3a:f2:f0:a8:c0:bf:03:57:a5:b9:bc:44:
97:9f:9a:5d:83:b4:7d:12:90:b3:ac:e1:2d:ec:e0:9d:36:09:
52:4f:1f:05:54:22:52:1c:06:44:98:19:e5:3d:56:67:d9:46:
14:20:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:50 2025 by rpki-client