Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa
File: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (raw, json)
Hash identifier: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=
Subject key identifier: B3:90:22:F6:0E:5E:61:82:FC:06:0C:7B:65:68:93:A2:FA:BE:C7:11
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC133ECDEA3461076C694BB5901514
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206505
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:13:3e:cd:ea:34:61:07:6c:69:4b:b5:90:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b39022f60e5e6182fc060c7b656893a2fabec711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:28:28:78:56:c9:d7:15:0a:61:8e:34:cd:
14:fb:bd:45:fb:14:60:24:12:0d:ab:fc:91:1f:c1:
37:1f:78:95:5d:34:e6:b5:5a:e7:4f:32:ab:74:6b:
0b:f7:ea:6c:d3:c9:b1:6f:ef:33:48:9f:99:b5:91:
92:6e:a6:e4:3a:10:21:a9:da:0c:5e:12:f2:31:8b:
a3:05:22:a6:2e:40:7d:df:02:f7:4a:00:7b:4d:66:
52:ae:4e:2e:06:7e:4b:97:de:dc:1f:89:ea:f4:67:
a5:05:f8:11:2c:6b:f6:08:f2:cc:d0:76:a9:64:ac:
c2:3b:08:43:60:8e:27:85:cb:8c:4a:d8:11:ac:77:
a7:27:08:0e:78:2a:84:28:49:b0:f4:e3:42:2e:4a:
ba:44:49:bd:ca:94:92:d9:a8:fb:30:c6:ea:ae:ee:
65:a4:2c:95:1e:1c:fb:0d:4b:1e:21:83:4e:8b:44:
b1:2f:03:cf:87:49:10:e5:c2:46:77:97:82:b7:8f:
33:6b:c0:a2:34:d2:1a:46:d2:65:63:ae:f9:8d:d5:
0f:4f:96:42:14:2d:8c:05:44:42:02:b3:d2:3b:bf:
de:b8:74:69:f8:53:08:e9:d6:ce:d3:54:a8:9a:8e:
ac:6e:96:1f:b7:00:11:a1:30:5c:ff:0c:a0:eb:71:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:22:F6:0E:5E:61:82:FC:06:0C:7B:65:68:93:A2:FA:BE:C7:11
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e6:73:b4:eb:b8:a8:d3:b1:a5:f3:0c:87:5a:89:86:54:d6:
b4:65:a3:37:b4:c7:bb:7b:2a:95:26:10:2f:96:ce:c6:02:72:
51:5f:12:22:39:86:ad:e0:cf:b9:62:7c:d6:05:0b:21:b2:b9:
93:f6:f9:22:19:82:56:5f:6c:c7:b0:5e:37:8f:32:4a:81:c1:
44:27:4d:de:57:85:49:54:b2:54:b8:fe:a0:68:8a:2f:ce:62:
89:0d:a8:d6:1d:b1:b0:ff:73:a3:45:79:ca:f5:8f:e7:f2:31:
b9:96:6c:84:61:2a:84:dd:c3:b0:a7:d0:bb:97:b1:3b:7b:14:
af:01:76:78:13:de:6c:66:74:3d:49:0b:b1:63:71:cb:e2:9f:
10:4c:ae:7a:04:a9:ab:e4:80:95:44:c5:55:b9:a3:27:9b:7a:
a8:27:ad:92:7c:a9:32:50:f7:14:66:14:ee:78:3a:0f:9e:fb:
c1:11:8c:61:ac:88:49:18:d9:fb:38:35:8a:de:f5:5d:c1:6d:
8b:de:20:c9:e7:a1:51:e5:14:55:34:6e:c7:6d:31:1a:9b:9f:
d2:a3:93:b9:4a:a2:73:36:ad:03:76:59:71:1f:16:44:e8:2b:
91:19:5d:a8:d3:97:e2:c1:54:91:87:7f:ac:ae:8b:56:0f:cf:
fd:cb:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:18 2025 by rpki-client