Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/5y1fAHStJ-LIl-krEwTwF8xMfXw.roa
File: 5y1fAHStJ-LIl-krEwTwF8xMfXw.roa (raw, json)
Hash identifier: CigYoXGgEpJO22j1bYVgQQOkgFTLXjpTUquBl/raWWc=
Subject key identifier: E7:2D:5F:00:74:AD:27:E2:C8:97:E9:2B:13:04:F0:17:CC:4C:7D:7C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75CB1B1662D3653F163283B033DFB
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/5y1fAHStJ-LIl-krEwTwF8xMfXw.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 5.1.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5c:b1:b1:66:2d:36:53:f1:63:28:3b:03:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e72d5f0074ad27e2c897e92b1304f017cc4c7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:fd:fc:ab:79:f4:5c:6b:6d:13:b5:df:4c:
a9:25:b7:58:a3:6a:29:93:48:b3:92:9b:7f:da:a0:
13:98:97:05:e2:07:22:2a:67:e2:65:9b:4b:86:ea:
92:1d:85:38:58:ad:6e:c7:04:7b:9c:5d:92:70:51:
fb:bf:18:f1:34:9c:9e:18:ca:1c:16:b4:ee:23:1e:
68:5b:7c:30:62:a7:77:ba:64:d2:2f:a9:85:29:4a:
22:20:41:ee:95:b1:cc:37:b5:c2:ac:30:59:b0:a1:
72:aa:cb:39:63:0a:90:5e:43:27:60:01:2a:73:03:
34:77:1b:c6:52:b6:da:1e:e7:6c:3f:04:a6:40:c3:
a6:9c:3d:ea:db:2f:98:7f:8d:e0:86:24:2b:3d:07:
3c:9e:13:39:0f:fd:0d:df:0a:0d:64:79:0e:a7:aa:
1f:6c:b5:28:f4:18:d1:a5:f8:1f:75:02:1f:d2:16:
47:aa:24:28:d1:30:67:64:55:cd:70:29:52:9e:33:
7e:78:69:0b:95:e7:a7:38:8c:a5:0b:76:e4:79:73:
f2:63:81:f0:9d:b3:ae:e6:d2:48:a8:9c:86:df:55:
2d:77:fb:cf:e6:cd:82:c0:d2:4f:f2:fd:9a:d7:23:
f9:38:c7:b3:81:ca:35:56:fb:68:04:90:17:f4:7a:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:5F:00:74:AD:27:E2:C8:97:E9:2B:13:04:F0:17:CC:4C:7D:7C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/5y1fAHStJ-LIl-krEwTwF8xMfXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ca:e4:be:22:48:97:3a:8f:0d:5f:a8:81:5a:ed:26:98:6d:
cb:bd:65:4b:5a:55:1d:72:b0:13:b5:10:78:01:2c:63:4e:92:
11:65:4e:e8:1f:71:2b:7e:8d:76:fc:ad:15:9e:ea:49:ff:3c:
28:f0:69:38:90:21:14:ad:46:a3:5c:63:fb:84:c9:b2:b7:75:
9d:c8:c3:eb:81:21:cf:03:22:dc:14:21:63:26:b9:86:11:26:
e0:21:1e:a9:bc:e7:58:3a:ce:6b:e2:c9:cb:01:8a:da:25:7d:
2b:4f:6f:e6:41:4a:af:08:8a:a2:88:16:47:94:b6:26:37:ae:
28:04:b6:a3:1c:df:09:4c:fe:4e:28:48:7b:a4:de:1d:66:88:
6e:ae:17:93:71:34:fb:b3:80:fa:61:50:75:78:d0:21:46:90:
81:ae:4d:c1:f5:cb:ac:72:80:56:26:ac:a9:c1:3c:8a:69:d1:
b4:b5:ae:4b:30:50:de:3e:e7:fa:5d:59:17:63:6a:00:83:c7:
ca:67:4b:c0:fc:77:00:2a:60:b1:9d:6f:bd:61:50:77:89:f4:
d1:49:69:b9:48:b8:4d:f1:a1:5e:06:e0:d1:7a:be:13:6b:0f:
99:be:3b:5f:c7:5e:7d:4f:1e:21:bd:8a:19:44:a9:82:d8:df:
aa:7b:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:36 2025 by rpki-client