Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/5qU9a0oGWmmroynSN69UsFF4Lyw.roa
File: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (raw, json)
Hash identifier: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=
Subject key identifier: E6:A5:3D:6B:4A:06:5A:69:AB:A3:29:D2:37:AF:54:B0:51:78:2F:2C
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01941F8C831C04BCDE60F9E34A86B5677B4B
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/5qU9a0oGWmmroynSN69UsFF4Lyw.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42854
IP address blocks: 193.200.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:1c:04:bc:de:60:f9:e3:4a:86:b5:67:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6a53d6b4a065a69aba329d237af54b051782f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:5c:05:80:5c:0b:da:df:79:23:27:25:d9:
9d:cd:72:e7:8f:59:28:02:27:40:99:26:73:19:bb:
a7:1e:9f:e6:d8:05:b1:cf:ff:1b:2e:71:38:12:87:
f9:6a:49:f6:a5:d4:bd:10:66:1d:ce:00:bd:96:2f:
39:40:00:92:a8:5f:3f:f1:1c:e7:0c:2c:e4:e5:be:
4b:ca:03:8d:74:82:fb:4b:9c:cc:60:5b:c8:67:9d:
96:e5:eb:8d:7d:45:34:27:40:00:e4:bc:45:13:2a:
07:ac:45:c3:2b:6e:d4:cc:e4:c6:98:af:67:7d:09:
16:42:9c:ff:9f:1d:a8:cd:75:1e:92:04:ea:01:10:
65:be:10:97:30:5d:0d:33:07:06:b4:ea:15:ae:d3:
1c:5d:a1:b3:c7:eb:8a:99:20:65:b7:c5:20:85:82:
90:ba:86:70:fe:47:01:e0:a8:fa:58:9c:ee:80:77:
6b:5a:b8:52:db:ba:d2:30:7b:f4:3d:1b:f3:14:8f:
5c:bd:2d:6f:df:10:c8:76:32:f8:c5:99:13:5c:5a:
87:05:b1:c9:59:24:83:0c:a3:91:de:4f:ad:e5:29:
1f:d2:cb:27:5b:2d:12:56:c1:9a:9e:fb:25:d2:9e:
c6:08:74:74:ea:b1:e3:d8:11:92:25:a7:4d:6c:a5:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:3D:6B:4A:06:5A:69:AB:A3:29:D2:37:AF:54:B0:51:78:2F:2C
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/5qU9a0oGWmmroynSN69UsFF4Lyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0a:ef:11:17:7b:6e:44:fb:42:0c:b9:c7:92:95:7f:66:7a:
e6:d7:f8:14:1a:89:ab:a4:a8:f8:54:c5:8b:d0:50:45:1d:9e:
3d:50:c9:2c:86:bb:a2:2c:87:8a:42:eb:63:65:40:12:08:02:
19:bf:9a:d6:39:62:e6:5d:03:a7:8a:50:4d:17:02:c6:e2:c0:
2e:97:31:6a:d0:a8:8c:2c:2c:6e:f4:f3:aa:ba:61:3b:26:31:
34:b5:1a:9f:41:5f:fe:2b:f9:f1:be:ea:79:a3:20:77:8f:ab:
44:78:93:a4:d7:d8:08:51:7e:25:7c:38:12:44:94:6d:97:1f:
66:58:4d:dd:7b:53:e2:06:25:43:e0:45:52:ec:48:a2:39:62:
8c:98:58:9a:13:45:7a:0b:93:57:cd:5d:b2:da:d9:2c:fb:70:
0d:35:60:11:36:39:c6:5d:d7:0a:a3:46:56:ab:1e:3c:f4:5e:
e8:6b:bc:79:82:ff:56:f2:b9:63:87:28:bf:41:2b:ff:9d:69:
e4:95:6d:2d:64:e4:6c:3e:41:bf:67:86:8a:11:d9:88:aa:e1:
95:a1:26:15:2c:55:40:45:ca:0c:9f:94:a3:47:92:c1:fb:fd:
32:64:62:5c:c5:a3:c2:4c:b8:1b:80:a6:ba:d9:7d:a3:ef:84:
32:37:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:58:38 2025 by rpki-client