Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa
File: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (raw, json)
Hash identifier: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=
Subject key identifier: E5:94:2B:6B:B2:FE:22:C6:6C:B8:A2:CE:D2:52:63:C4:39:F3:46:AE
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019424B2B679C5D704FFB97543BDD72F0334
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa
Signing time: Thu 02 Jan 2025 01:47:59 +0000
ROA not before: Thu 02 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16321
IP address blocks: 91.196.252.0/22 maxlen: 22
176.116.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b6:79:c5:d7:04:ff:b9:75:43:bd:d7:2f:03:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jan 2 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5942b6bb2fe22c66cb8a2ced25263c439f346ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:bd:65:4d:f2:50:6e:bc:f9:12:88:be:cc:
65:38:89:b0:02:38:14:4a:3a:b8:2b:47:cb:ec:c5:
b8:53:e0:70:1e:bb:12:37:d1:c7:59:9a:ea:1f:ca:
8c:b3:10:e4:2f:3e:79:b0:cf:d7:f7:e3:b8:ee:be:
b0:18:27:2e:e9:5a:b7:3d:64:23:26:20:fa:72:ee:
27:c8:0a:fd:de:28:54:43:8a:17:d8:fa:a5:93:27:
96:db:90:cf:c2:60:6f:cc:3f:3f:5d:32:eb:92:97:
6f:9b:28:87:fa:ab:d4:cf:1d:34:ea:a6:89:a8:0c:
03:54:1a:05:f9:7d:c2:ff:c1:38:2f:89:c9:56:f5:
60:29:6c:cd:65:a6:4e:27:84:51:b8:a8:61:b3:02:
0e:fa:60:39:08:b1:3d:63:e2:57:36:55:41:ba:da:
80:dc:89:22:20:8b:7d:bc:b1:ab:ea:ae:51:2b:27:
08:33:87:3c:48:55:f0:4b:69:aa:73:db:fb:fd:3e:
f3:3d:b4:53:ef:22:a1:c0:47:4d:ec:61:e2:9c:6c:
85:e5:86:a7:df:00:07:a9:81:6b:54:f7:ac:b0:6d:
b1:2c:14:a8:d1:5c:76:d2:0b:8d:64:fd:f2:9f:6a:
98:b4:31:44:9d:09:c3:b5:52:92:b0:2f:4a:cd:e4:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:2B:6B:B2:FE:22:C6:6C:B8:A2:CE:D2:52:63:C4:39:F3:46:AE
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.252.0/22
176.116.240.0/20
Signature Algorithm: sha256WithRSAEncryption
39:18:16:94:b8:44:87:d2:58:3c:23:ec:80:46:f2:57:37:bc:
1a:bf:18:bb:2f:5d:74:46:0b:bc:53:60:ea:e5:41:8f:c9:2e:
1c:c9:72:20:ff:8a:c3:e0:ff:6c:e7:e3:ca:ec:d3:f2:8b:5e:
d4:3f:dc:7b:1e:49:0e:58:6c:c0:be:3d:2f:5a:67:c8:5e:70:
c3:bd:21:2f:74:4f:79:13:bb:2d:97:ef:a1:e4:d6:41:93:cf:
6e:3a:ea:d5:a4:3f:7a:63:5c:82:53:83:74:45:57:30:95:e8:
9a:22:41:1d:cd:4a:23:ee:81:55:93:6f:e7:f8:c4:fe:04:5f:
07:ab:4a:e2:82:45:da:c8:c3:ba:57:c1:4b:3f:c3:a7:78:e2:
2f:12:60:31:9d:54:6c:6f:51:84:b8:fb:89:42:10:12:08:22:
ad:6c:96:71:b7:70:99:86:ee:57:1d:31:a9:78:77:f2:0c:30:
46:e6:ca:85:e5:78:c0:c2:73:cd:8b:79:71:16:e4:a2:77:08:
a5:24:ca:05:6d:00:59:41:1c:0b:d9:7d:7b:2e:42:54:28:72:
dc:4b:b9:26:e9:cf:59:96:58:f2:70:43:9a:4f:a1:45:8d:07:
1c:19:ac:fc:24:09:f4:27:5d:7b:56:fa:d2:62:d7:0f:d7:be:
1f:63:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:40:43 2025 by rpki-client