Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p-n5W6jM6mH0tNBpkXNDG6NzJT4.roa
File: p-n5W6jM6mH0tNBpkXNDG6NzJT4.roa (raw, json)
Hash identifier: Og7L9JbI0d8Ae8IwMOe31V9C8IKctM3YHN8uMxSX5Ho=
Subject key identifier: A7:E9:F9:5B:A8:CC:EA:61:F4:B4:D0:69:91:73:43:1B:A3:73:25:3E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7035EB43E24A55BA697FF8D7979EA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p-n5W6jM6mH0tNBpkXNDG6NzJT4.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.180.138.0/24 maxlen: 24
84.252.72.0/24 maxlen: 24
2a0f:7b81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:03:5e:b4:3e:24:a5:5b:a6:97:ff:8d:79:79:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7e9f95ba8ccea61f4b4d0699173431ba373253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:c7:a2:d1:62:9b:2f:d3:85:e2:77:26:8b:
1a:97:7c:3b:d6:c0:2c:7b:50:4d:1f:8f:c4:9e:02:
8a:bb:9e:94:65:8c:b7:88:f8:e3:2c:1a:41:af:8b:
08:a0:95:45:f2:13:c8:25:f2:3c:01:26:14:ca:78:
be:0f:00:42:88:9d:a3:5c:82:5c:69:7b:bb:30:d9:
f9:66:e6:b7:17:8e:61:ef:1a:f5:2f:9d:7d:d7:2c:
bf:ea:2a:28:8c:83:7e:3f:b6:aa:0a:c0:f1:89:93:
62:72:9b:94:75:af:0c:98:17:98:84:ab:b2:de:db:
c7:30:3e:da:a3:11:d8:2e:d8:5f:52:d6:4e:65:31:
2d:a9:77:a7:38:f4:63:ba:6a:98:9a:b6:6f:f1:d1:
f7:bc:bd:5d:78:a9:e4:22:7a:2d:11:05:92:06:e6:
09:1f:e4:00:c0:cd:7f:89:20:92:fe:8e:76:53:69:
c6:bf:82:10:4a:69:61:8f:28:cd:c3:32:8f:cf:50:
be:fc:5e:df:0d:dd:b0:b2:6c:98:ac:fa:d4:63:39:
3e:49:8e:da:98:b3:a5:76:58:d0:a1:0f:d1:a8:23:
87:bb:9d:2f:3d:e4:1e:fe:f5:b2:17:ee:da:19:ca:
f9:ac:0d:7c:10:49:0a:b2:6d:c7:ab:06:1a:fe:4c:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:F9:5B:A8:CC:EA:61:F4:B4:D0:69:91:73:43:1B:A3:73:25:3E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p-n5W6jM6mH0tNBpkXNDG6NzJT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.138.0/24
84.252.72.0/24
IPv6:
2a0f:7b81::/48
Signature Algorithm: sha256WithRSAEncryption
65:e8:14:cf:95:4c:6b:35:c0:e5:3e:21:8b:50:0d:81:ed:a7:
4b:65:fd:1b:25:f5:f8:62:2b:8c:93:9a:34:f4:18:a2:ed:2f:
9c:06:14:03:1b:b2:ee:ba:ee:b6:6d:bc:8e:15:b3:04:29:25:
1e:65:d0:2e:ad:cd:2b:d6:ae:b6:96:6e:ed:19:d3:d9:d4:bf:
69:ca:02:28:1f:a3:14:51:3c:a9:b3:28:89:7f:fc:56:64:da:
7c:32:cb:bd:77:52:0f:5a:d6:75:c8:9e:d9:09:e5:7b:b5:c9:
ef:a2:df:5a:3e:9b:5e:a0:4a:fe:9f:37:da:e5:c5:ed:29:5f:
94:ef:1c:71:56:26:94:5a:70:70:ca:f2:50:46:04:fb:7a:5a:
cb:6e:ab:f1:8b:bf:de:a1:b9:5b:b4:9d:2c:fe:dd:66:43:98:
4f:42:24:e0:65:1b:0c:0c:a1:f2:8a:95:ef:08:e8:b6:8f:e0:
3d:86:e8:6c:1d:73:e8:30:5e:4d:f1:35:d6:f0:95:a8:08:48:
a1:e5:ed:a0:ea:60:b9:1d:83:e1:c4:a5:1f:a4:f6:f1:6e:75:
7e:98:0b:34:09:42:28:02:d4:4e:cd:9c:1e:72:86:50:2b:de:
5d:31:72:20:56:75:ad:15:1c:90:cb:1d:cc:cb:34:9c:1f:b5:
13:6c:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:14 2025 by rpki-client