Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa
File: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (raw, json)
Hash identifier: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=
Subject key identifier: 00:29:1D:6A:DC:9F:05:39:73:DB:E1:6D:C3:75:93:A8:51:44:60:2A
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0194252176A3FA94346916AC965D0A6279F5
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58250
IP address blocks: 5.42.234.0/23 maxlen: 23
5.42.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:a3:fa:94:34:69:16:ac:96:5d:0a:62:79:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00291d6adc9f053973dbe16dc37593a85144602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:0d:41:fd:ec:29:73:15:3a:18:35:56:c0:
80:2b:ae:57:e2:77:2c:43:0c:bb:bd:64:7a:c9:42:
7e:ec:c9:2c:c4:e4:35:0f:08:c6:53:17:88:b7:e6:
03:35:ce:aa:c0:d7:26:bc:99:0c:03:15:23:20:b4:
b1:0e:43:22:4d:a3:2a:b6:2c:16:6c:6d:09:29:1c:
6b:fd:fd:45:25:31:2c:ed:96:9d:66:12:3b:ea:44:
24:1c:40:68:4d:b3:6a:cd:84:9f:15:e3:59:df:e6:
15:9f:20:fd:5d:de:9e:54:bd:33:ef:92:89:07:80:
90:9f:60:d7:05:9a:e9:be:58:23:23:66:26:60:24:
e9:66:3b:f3:bb:b2:95:78:c0:48:8d:4b:8c:ca:14:
df:63:d5:d4:6b:11:7f:da:a8:2b:da:b7:58:89:95:
f7:35:f4:f2:bc:67:d9:fa:f4:4c:93:a0:d7:99:91:
81:dd:bd:97:40:88:f5:13:b8:f5:a7:cf:92:91:e3:
50:bf:c7:c9:59:70:30:9b:c2:ca:0c:99:57:5a:7b:
05:46:f6:3d:95:9e:0b:83:77:f7:e1:b8:16:39:9c:
4c:5c:b2:29:57:8c:6e:ca:76:b0:24:cc:8e:a5:9e:
f3:3b:9a:4a:6c:56:d8:c6:9e:1a:8b:55:b3:36:bf:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:1D:6A:DC:9F:05:39:73:DB:E1:6D:C3:75:93:A8:51:44:60:2A
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:fc:ca:9d:c2:42:ca:5a:be:f0:95:e7:b0:55:13:89:87:92:
9d:c5:a1:b9:03:32:2e:e7:da:9d:6c:bb:f0:6f:0c:1c:ea:fe:
21:1b:76:74:68:77:45:06:b4:1e:ed:a9:fb:04:37:77:51:8d:
4d:0b:91:1f:23:72:6e:de:a8:4f:bb:df:01:1f:be:2a:88:d0:
36:24:ce:6b:17:39:c4:fc:7f:d2:f3:b2:b3:5e:41:a9:01:26:
bd:b9:b3:e8:cd:e6:51:ed:9e:e2:d6:34:56:c4:a7:64:d3:7e:
c0:df:a8:b6:31:dd:9f:0c:0f:ba:68:10:67:e3:2d:df:0b:14:
91:23:b3:86:72:c0:ab:fd:f1:cf:c2:a3:9f:5d:dd:8f:21:6e:
7e:43:ba:c7:d2:a3:95:08:de:d9:93:a6:5b:5c:0e:d5:0d:fa:
42:c1:10:a6:5a:a1:c9:ea:0a:3a:4a:4e:0d:d8:c8:df:4e:bc:
73:3f:d9:f8:c6:58:71:24:23:74:0f:d5:b7:57:c8:1b:bb:b8:
54:af:28:f3:1d:62:92:93:a7:ea:04:c2:6a:ff:3d:72:89:15:
5e:f6:78:73:af:73:a4:ee:79:fd:db:b1:e0:16:6f:0b:ae:bf:
63:9a:1e:ae:2f:bf:0a:fd:95:94:1d:5d:53:fb:c6:a0:d9:5a:
c4:44:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:40:10 2025 by rpki-client